SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

---

Don’t Fear the Reviewer

Does the idea of allowing your customers to rate your products on your website make you uneasy? If so, it’s time to reverse your thinking: don’t fear the reviews; fear what their absence is costing you. Here are four reasons why encouraging your customers to post product ratings will not only strengthen their allegiance to you but also help you capture more sales:

Break through the trust barrier

As we established previously in our article on the culture of the Web, the Internet collective harbors an inherent mistrust toward all corporate entities, and unfortunately for you, retailers are no exception to that rule. On the other hand, peer validation is everything. No matter what you do or what you sell, if people love it and vouch for you, you’ll be strongly positioned for success. In the absence of this corroboration, you face a significant burden of proof to overcome the natural skepticism of the collective. What does this mean for you? You can spend hours meticulously crafting eloquent descriptions for each and every product you sell, but they will never carry the weight of a review that one of your customers spends five minutes to dash off. Reviews demonstrate that you stand behind your products and you have nothing to hide.Fair? Perhaps not. True? Absolutely. It’s all about trust. However, when it comes to trust, you actually get extra credit for the very fact that you do empower your customers to publish their feedback on your site. For new visitors who may not be familiar with your brand or your reputation, these reviews are a badge of transparency that demonstrate that you stand behind your products and you have nothing to hide.

Tip the scales in your favor

Online shopping is a fact of life in today’s world. However, as commonplace as the act of buying on the Web has become, there is always still a lingering hint of uncertainty that resides with customers because they cannot see, hold and judge an item for themselves before committing to the purchase and paying the associated shipping costs. This effect is multiplied for certain types of merchandise like clothing and shoes. I may know that I generally wear a size 11 running shoe, but when deciding between different brands and styles, how can I tell whether my chosen shoe will run true to size, offer the level of cushioning I desire and be comfortable for a five-mile jog? The last thing you want in this situation is for me to give up and go to a bricks-and-mortar store where I can try before I buy, even if it means paying a bit more for that luxury. This is where customer reviews can save the sale by providing the reassurance I need to feel confident that the particular shoe I have selected will meet my expectations.

Turn your customers into salespeople

Returning once again to the qualities that define the culture of the Web, one of the fundamental characteristics of the Internet collective is their compulsive need to share. As a result, when someone buys something that they love, it’s practically second nature for them to talk up their purchase on sites like Facebook and Twitter. This tendency is all the greater when they can boast about a particularly unique find or an especially good bargain, as they seek the approbation of those in their social networks. It’s the virtual equivalent of taking a girlfriend along on a shopping excursion and having her ooh and ah in approval over your selections. Why not give your customers a soapbox to exercise their habitual need to share on your own site, where their opinions can help persuade other shoppers to purchase the same product when it is right there in front of them, just one click away from landing in their cart? One of the most effective customer review systems we’ve encountered is on gap.com. Not only does Gap allow customers to provide thorough evaluations of each item in their own words, but each product can be rated on several different criteria, including overall sizing, fit through the arms, chest and shoulders as well as the type of occasion for which the item is best suited (i.e. work, going out, etc.). If the prevailing sentiment among reviewers indicates that a shirt runs small or tends to shrink in the wash, I know right away to order a size larger than usual, and I can feel certain that I won’t regret this decision when my order arrives at my doorstep. Furthermore, let’s say I’m a little iffy on whether or not to buy a pair of pants based on how they look in the photographs. Rave reviews from those who have already purchased and worn the same item can provide the tipping point that will persuade me to add them to my cart. Detailed and informative reviews give shoppers the confidence boost they need to complete the transaction.As these examples demonstrate, not only will detailed and informative reviews give shoppers the confidence boost they need to complete the transaction, they can also provide enticement to splurge on additional unplanned items. As a result, chances are good that you will yield a greater number of conversions as well as an increase in the total amount of each sale.

Do your own market research

Your customers buy products from you. Inevitably, those customers have opinions about their purchases. If only you could benefit from knowing what their opinions might be. It just so happens that you can, and you don’t have to spend a boatload of cash on a consumer research study to do it. When you invite your customers to post their reviews of your products on your site, you not only open a direct line of communication, but you also send a clear message that you care about what they have to say. Open a direct line of communication with your customers.Better yet, because it is up to the customer to take the initiative to provide their feedback and they can do so with relative anonymity, you can be confident that you are receiving their honest and unfiltered opinion – much more so than if you tried to solicit a response face-to-face or with a formal survey. Although these reviews do not represent a statistically accurate sampling of all your customers, they can be instrumental in revealing insights that can be invaluable in helping you shape your product offering to better meet their needs. Even when you’ve done your homework and made your best effort to provide a great selection of high-quality products that align with your customers’ interests and concerns, there’s nothing like the candid reassurance of those customers to let you know that your instincts were right. You might even find an unexpectedly strong preference for a certain type of item over another, in which case you can consider expanding your offerings in that category. But wait! What if the feedback you receive is negative? You should be equally appreciative of the opportunity this creates to go back to the drawing board and figure out better ways to give the people what they want. Maybe the response is “I like this, but I really wish it had more of that.” Without reviews, this sentiment might never have come to light, and your customers might have just silently drifted away, leaving you wondering where they went and why. Or perhaps your reviews alert you to a problem that emerges when a product is used over a prolonged period of time or in a particular set of real-world conditions. Even the best quality control efforts can’t forecast and circumvent every potential pitfall, but armed with this knowledge, you can take proactive measures to address the issue and make it right.

Open the door to greater success

If you’ve made the investment in creating a smart, user-friendly e-commerce store, why not seize the opportunity to yield the most from that investment by adding functionality that can multiply your sales? If you’re not sure where to begin, let Fame Foundry’s expert web development team help you develop a customer feedback module that is custom-tailored to fit your brand, your product line and – most importantly – your customers.

---