wordpress克隆站点_安全有效地管理WordPress协作站点

wordpress克隆站点

This guest post is by Juliana Payson of InMotion Hosting

此来宾帖子由InMotion Hosting的Juliana Payson撰写

As a longtime WordPress user, I have run many successful websites in the past and have invited many writers/contributors/developers to join my team. To make the process go smoothly, I had to give them access to the WordPress backend. This decision comes with its own risks and rewards. In this article, I will share how I manage a collaborative WordPress site safely and effectively.

作为WordPress的长期用户，我过去运营过许多成功的网站，并邀请了许多作家/贡献者/开发人员加入我的团队。 为了使流程顺利进行，我必须让他们访问WordPress后端。 这个决定有其自身的风险和回报。 在本文中，我将分享如何安全有效地管理协作WordPress网站。

为什么您需要放弃管理员访问权限？ (Why you would need to give out admin access?)

WordPress is a dynamic platform by nature. On top of that websites are always evolving and competing with the current evolution of web design can get hard at times. Web trends for blog design have changed from the heavy sidebar orientation of the 90’s, the floating header banners of the Noughties, and now we’re just pushing the bar with HTML5. For people like me, experimentation with how far you can push the interactivity of WordPress is part of blogging. Often I break the site while experimenting, and then have to give someone admin access to help me fix it. Sometimes I want features in my themes that are beyond my ability to implement. Other times, I need help managing comments or I just don’t want to do the process of copying and pasting articles from our content writers. To manage my time efficiently and focus on what I’m good at, I utilize writers, contributors, and developers to help me run my websites successfully.

WordPress本质上是一个动态平台。 最重要的是，网站总是在不断发展，并且与网页设计的当前发展竞争有时会变得很困难。 博客设计的网络趋势已经从90年代沉重的侧边栏方向，Noughties的浮动标题横幅改变了，现在我们只是使用HTML5推动标准发展。 对于像我这样的人来说，尝试将WordPress的交互性提高多远是博客的一部分。 我经常在实验时破坏该站点，然后不得不授予某人管理员访问权限以帮助我进行修复。 有时，我希望主题中的功能无法实现。 有时，我需要管理评论的帮助，或者只是不想执行复制和粘贴内容作者的文章的过程。 为了有效地管理时间并专注于自己擅长的领域，我利用作家，撰稿人和开发人员来帮助我成功运营网站。

如何挑选合适的人 (How to Pick the Right People)

One of the positives of building a team is that you can get a bunch of passionate people who are willing to put in the time and effort to build your website up. This is the time that you can use to focus on what you do best! If you prescribe to pick the right people to begin with and spend that extra time being careful about it, then you will avoid many of the problems which I will describe below. This is the first tip for controlling security on your backend install, pick a passionate, good-natured team!

组建团队的好处之一是，您可以让一群热情的人愿意花时间和精力来建立您的网站。 这是您可以专注于最擅长的时间！ 如果您选择挑选合适的人作为开始，并花一些额外的时间对此加以注意，那么您将避免许多我将在下面描述的问题。 这是在后端安装上控制安全性的第一个技巧，请选择一个热情，善良的团队！

I’ve often used eLance, invited bidders with specific skill sets, and negotiated with their bids. The negotiating process alone gives you a good feel about their nature and whether you would like to work with them and trust them with access to your WordPress hosting.

我经常使用eLance，邀请具有特定技能的投标人，并与他们的投标进行谈判。 单独的谈判过程使您对它们的性质以及是否愿意与他们合作并信任他们可以访问WordPress托管感到满意。

Here’s the trick to inviting the right bid for the work you are offering. “It should be EASY for someone who KNOWS how…” those few words will immediately filter out those that will say it’s a two week job, maybe to negotiate a higher price. You will likely get a broad range of bids if this is your first time on eLance, don’t be put off by seemingly high prices, or get attracted to the lowest bid. Give yourself time to communicate with each and get a feel of their negotiation skills. This guy was a previous winner with me, and I negotiated his bid price down by showing him the level of planning and preparation I had gone through prior to putting the job out. This made sure that he knew I didn’t want any duplicitous effort on top of the things I’d already spent time in preparing. The keywords I picked up on was that he expressed how interesting, fun, and easy the task was. I’m all up for choosing passionate people on my team!

这是为您提供的作品邀请正确出价的技巧。 “对于知道如何做的人来说应该很容易……”这几个字会立即过滤掉那些说这是两周工作的人，也许是为了讨价还价。 如果这是您第一次在eLance上获得出价，可能会获得广泛的出价，不要被看似高的价格所推迟，或者被最低出价所吸引。 给自己时间与每个人交流，并了解他们的谈判技巧。 这个人是我以前的赢家，我通过向他展示了我在完成工作之前经过的计划和准备水平来降低了他的出价。 这样可以确保他知道我除了已经花费时间准备的事情之外，还不想做出任何重复的努力。 我选择的关键词是他表达了这项任务的有趣，有趣和轻松。 我全力以赴选择团队中充满激情的人！

The tested skill sets I look out for when it comes to potential WordPress admins in particular are: WordPress 3.1, CSS 3.0, PHP5. Tested skill sets are done against a timer, so you have reassurance that the person you are hiring is not learning on the job.

当涉及到潜在的WordPress管理员时，我特别关注的测试技能包括：WordPress 3.1，CSS 3.0，PHP5。 经过测试的技能集是针对计时器完成的，因此您可以放心，所雇用的人不会在工作中学习。

You can always give people a chance who’ve never picked up work before on eLance, but there is a learning curve associated with how to communicate effectively with your new teammate – and I treat them as such. If communication feels abrupt instead of concise, I take this as a hazard that’s probably best avoided.

您总是可以给人们一个从未接触过eLance的机会，但是如何与您的新队友进行有效沟通存在学习上的弯路-我也是如此。 如果沟通突然而不是简洁，我认为这是最好避免的危险。

用户角色管理 (User Role Management)

Giving out “administrator” level account can be risky. Specially if it is someone you DO NOT know that well. Also not everyone in your team need to have the same set of permission level. For example, if they are an author, then they should only have author level permission. Sometimes you may want to promote an author as a moderator or community manager, so you can simply create a new role that adds that capability to their user role. For this I use User Role Editor Plugin.

提供“管理员”级别的帐户可能会有风险。 特别是如果有人，那你就不会那么了解。 同样，并非团队中的每个人都需要具有相同的权限级别集。 例如，如果他们是作者，则他们应仅具有作者级别的权限。 有时，您可能希望将作者提升为主持人或社区管理员，因此您只需创建一个新角色即可将该功能添加到其用户角色中。 为此，我使用用户角色编辑器插件 。

In this particular case, I chose to create a new role called “webmaster” which gives user a specific set of permissions. To do this, you need to go to the User Role Editor settings and create a new type of role. I assigned this “webmaster” role all the capabilities of an ‘Editor’ to start things off. This person may need to go into some of my page posts and fix bugs in the HTML, so at minimum I have to give this person editor controls.

在这种情况下，我选择创建一个名为“网站管理员”的新角色，该角色为用户提供了一组特定的权限。 为此，您需要转到“用户角色编辑器”设置并创建一种新的角色类型。 我为这个“网站管理员”角色分配了“编辑器”的所有功能，以开始工作。 该人员可能需要进入我的一些页面帖子并修复HTML中的错误，因此至少我必须给此人员提供编辑器控件。

Once you have successfully created a ‘Webmaster Role’, select the user role from the drop down list, and add any additional capabilities that you like. In my case I added the following:

成功创建“网站管理员角色”后，请从下拉列表中选择用户角色，然后添加所需的其他功能。 就我而言，我添加了以下内容：

• Activate Plugins
  激活插件
• Edit Plugins – to edit the PHP and adapt CSS to fit your site for example.
  编辑插件–例如，编辑PHP并修改CSS以适合您的站点。
• Edit Theme Options – certain stylesheet customization
  编辑主题选项–某些样式表自定义
• Edit Themes – may need to fix javascript conflicts in header file
  编辑主题–可能需要修复头文件中的javascript冲突
• Install Plugins
  安装插件
• Install themes – for your perusal note that I have omitted ‘Activate Themes’
  安装主题-请注意，我已省略了“激活主题”
• Manage Options – sometimes publishing options from remote need to be whitelisted to allow your webmaster extra flexibility.
  管理选项–有时需要将远程发布的选项列入白名单，以使您的网站站长拥有更大的灵活性。

I can go in at any time and remove privileges once tasks are complete.

任务完成后，我可以随时进入并删除特权。

Now, assigning your new user the blanket capabilities of their new ‘Webmaster’ role:

现在，为新用户分配其新的“网站管理员”角色的全部功能：

Select the new user you created, a subpage will appear giving you the opportunity to assign the new type of role you created. Hint, don’t actually set up ‘Admin’ as a username, it’s common for someone to crudely hack in if they have half the job done for them by using a global name. I’ve used this for demonstration only!

选择您创建的新用户，将出现一个子页面，您可以借此机会分配您创建的新角色类型。 提示，实际上并没有将“ Admin”设置为用户名，如果某人使用全局名称完成了一半工作，则通常会粗暴地侵入他人。 我仅将其用于演示！

使用ThreeWP Activity Monitor进行用户监视 (User Monitoring using ThreeWP Activity Monitor)

While role management is a good way to keep control, for extra peace of mind there is a plugin that will track what all your registered users are doing.

角色管理是保持控制权的好方法，但为了让您更加省心，有一个插件可以跟踪您所有注册用户的工作 。

It does this by reporting the user activity change-log in one central location.

它通过在一个中央位置报告用户活动更改日志来做到这一点。

Hopefully you’ve now narrowed the room for error with your multi-author site, and got some peace of mind that anything outcropping as a result of user error or tampering is at least traceable. Now that you know how to keep your site secure with multiple contributors, here is an article that will show you how to manage a good editorial workflow, and make your collaborative team more organized.

希望您现在已经缩小了多作者网站的错误空间，并放心，由于用户错误或篡改而导致的任何露面都至少可以追溯。 既然您知道如何通过多个贡献者来确保网站的安全，那么本文将向您展示如何管理良好的编辑工作流程 ，并使协作团队更加有条理。

Juliana Payson (@JulianaPayson) is a Content Manager based in Los Angeles for InMotion Hosting, famous for their dedicated hosting. She develops content based on Web 2.0 design and ‘Socialization’ of websites.

朱莉安娜·佩森(Juliana Payson)(@JulianaPayson)是驻洛杉矶的InMotion托管内容管理员，以其专用托管而闻名。 她根据Web 2.0设计和网站的“社交化”来开发内容。

翻译自: https://www.wpbeginner.com/wp-tutorials/managing-collaborative-wordpress-site-safely-effectively/

wordpress克隆站点