Finally found time after months to secure my wordpress installation. I installed tonight openSSL on my Linux box, a GeoTrust certificate and enabled Secure Socket Layer. Now the access to the admin area is secured via SSL access and the password transfer is not transparent anymore.

It does not make sense to SSL secure the whole blog, due to performance aspects and the fact that non-secure content are embedded anyhow.

Go to the root of your webserver and type

svn co http://svn.automattic.com/wordpress/trunk/ .

You need to have svn installed - if not yet done the following command should do this for you.

aptitude install subversion

If you want to update your Wordpress plugins remotely through your linux server, you have to install them through SVN. Go to your plugin-in folder (ususally: ../wp-content/plugins/) and type

svn propedit svn:externals .

(Please note that the period at the end is important).

Your editor of choice should now open and you have to integrate your wished plugins. Find below one example:

akismet http://plugins.svn.wordpress.org/akismet/trunk/
flickr-slideshow-wrapper http://plugins.svn.wordpress.org/flickr-slideshow-wrapper/trunk
sociable http://plugins.svn.wordpress.org/sociable/trunk/
google_sm http://plugins.svn.wordpress.org/google-sitemap-generator/trunk/
lightbox-2 http://plugins.svn.wordpress.org/lightbox-2/trunk/
wp-security-scan http://plugins.svn.wordpress.org/wp-security-scan/trunk/
snapshot http://plugins.svn.wordpress.org/snap-shots-for-wordpressorg/trunk/
syntaxhighlighter-plus http://plugins.svn.wordpress.org/syntaxhighlighter-plus/trunk/
twitter-tools http://plugins.svn.wordpress.org/twitter-tools/trunk/

Please not that I’m using here the ‘trunk’-version, which are the latest development and might contain bugs. You can alternatively specify /tags/XYZ/ - XYZ being the release version you want to install.

After having saved your new entry you have to go back to your root folder (e.g. by cd ../..) and then please type:

svn up

The system will now download the latest version(s) and you only have to (re-)activate your plugins within Wordpress.

A regular updating with ’svn up’ will keep your plugins updated.

Finally I achieved to move my whole blog to expressionengine.com technology. I bought the full license already a couple of years ago, tried in a sandbox and have to say that I always gave up after a couple of hours as you do need some leisure time to understand the logic of the software. So most of the time I reinstalled wordpress, drupal or joomla and sometimes played with offline tools like rapidweaver for Mac OS X or even dreamweaver. All these tools (and there are more, see following review to get an impression: http://www.openjason.com/) have th big advantage that you get quickly productive. Installation is as smooth as ExpressionEngine is, but you get faster very promising results with wordpress for example. ExpressionEngine (although some templates available) is a tool which overs you ALL possibilities but with the limitation that you’ll not get a fancy homepage out of the box by simple installation of the core platfrom.

I was first attracted to Expression Engine because it appeared to offer a solid all in one package. Seamlessly integrating multiple pieces of software to bring a site together can be at best a laborious task and at worst impossible. Even once it’s done you then have the hassle of one login for every section of the site, whether it’s the gallery, the news section or the downloads area. The idea that I could configure every aspect of my site through the same templates and then make updates through the same login made EE an appealing purchase. It includes a forum, a gallery and even a small e-commerce module for basic functionality.

Being a closed software platform it offers less modules, plugins and extensions than the open source alternatives mentioned above. However, before my purchase years ago I was already impressed by the quality of their customer service, the good documentation and the strong community - really everyone is polite and helps you as a newbie to go through the difficult steps of a learning to navigate through a new environment.

You have to get used to the templating philosophy. But once you did, you’ll be impressed by the possibilities. It’s just great that expression engine separates CSS, RSS, etc, means the layout with the dynamic content. You’re building your sites as you would do with a tool like a dreamweaver and you only replace your content mainly with variables and loop “through dynamic content statements” to get your content show up in the templates you defined.

For each of your content sections you can define own input fields, mandatory fields, categories, etc. You as the owner keep the control over the whole content management system. This means that a different selection of fields can be displayed, depending on the blog being posted to. For anyone who has plans to ‘hand over the keys’ so to speak and let their clients update their own sites, this is a very useful feature as each field can be clearly labelled and configured to suit.

ExpressionEngine is a full content management systems which can display as well only a blog, but you have the whole power in and this makes it especially for people who only want to implement quickly a blog less convenient than most of the above mentioned tools. But(!) … even though I have to admit that installation of wordpress is much easier at first glance I was always disappointed about the speed of the software and I was tired as well of hacking away at core files and scouring the net for essential third party plugins or even to develop own ones as I did with flickr-slideshow-wrapper for wordpress.

Having now implemented expression engine successfully I know what the biggest advantage is and why it was worth spending my leisure time in the learning curve: SPEED, SPEED, SPEED!!! I’m just amazed how fast expression engine renders my pages (with comparable functionality) to my former implementations with joomla, wordpress, drupal or rapid weaver (the last one being very fast compared to the other, due to its static page concept).

Nevertheless, tools like wordpress, joomla, drupal are today commodity. Download, install and start blogging. For expression engine you need some time. I’m not affiliated with ellislab.com the company behind ee, but I can only suggest their software expression engine to any blogger, who does not want to compromise with any may be limitations. Expression Engine can really do whatever your design dreams are.

Ryan Irlan (http://www.ryanirelan.com) made some absolutely fantastic videos which will give you a fantastic deep dive-in into expression engine philosophy. Although building in his casts an example “news” page, you’ll easily understand the philosophy behind ee, and with only some basic CSS, HTML and programming skills you’ll get tremendous benefit out of his lessons (worth each penny, and again I’m not affiliated to Ryan either ).

The only thing I’m missing is a plug-in for http://www.websnapr.com/. If any reader has a hint or a workaround (easy to implement and to use) I would appreciate if you could add a comment to this posting with your advice! Many thanks in advance.

Update: Since 4th october this blog is again running on Wordpress, mainly for the reasons of a long delay of the Expression Engine 2.0.

Gears (formerly called Google Gears) will be part of new Wordpress 2.6. It supports already today other services as Google Docs or Remember The Milk.

Google Reader is another application which benefits already today from Gears Offline caching of data into a database.

Gears is beta software offered by Google to enable offline access to services that normally only are available online. It installs a database engine, based on SQLite, on the client system to cache the data locally. Gears-enabled pages use data from this local cache rather than from the online service. Using Gears, a web application may periodically synchronize the data in the local cache with the online service. If a network connection is not available, the synchronization is deferred until a network connection is established. Thus Gears enables web applications to work even though access to the network service is not present.

Released under the BSD license, Gears is free and open source software.

The new WordPress release 2.6, announced for later august this year, will be able to use Gears. You can have a kind of sneak preview of version 2.6 by visiting the following page: wp.chrisjohnston.org. Chris provides an automatic renewed test side. The password for the user “admin” is “demo”.

The wait is over, realmacsoftware.com released their new version 4 of RapidWeaver.

RapidWeaver is a revolutionary piece of web design software made exclusively for the Mac. It’s the perfect choice for creating and publishing beautiful, modern sites, compliant with today’s web standards.

Quickly and easily create and maintain standards-compliant websites from start to finish. Built for new users and seasoned web developers, RapidWeaver gives you the flexibility to get your website online fast without having to compromise.