SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

---

When Less is More: An Introduction to Minimalist Website Design

Minimalism is a trend that garners a lot of debate and discussion in the website design community. As a result, chances are good that you’ve heard of minimalist design and seen its principles in practice on sites that you visit day in and day out. But what exactly is minimalist design? And is it the right choice for your site?

Minimalism defined

In website design, minimalism can easily be construed as plain, lackluster or easy to accomplish. However, that is quite far from the truth. To the contrary, minimalism is a philosophy of web design that strives to eliminate all unessential features and elements in order to enhance usability by providing a clean, streamlined browsing experience that is absent of unnecessary distractions and clutter.

Focus

Every successful minimalist design starts with a crystal-clear vision of the purpose of the site and the key messages it needs to convey. Before any design choices are made, it’s critical to outline the goals and content of the site. This requires determining what information is most vital to visitors and arranging it in order of significance. You might actually be amazed to discover how little information is actually required to help users make decisions or accomplish their goals.

Typography

Because minimalist design is reduced to only its most essential visual elements, the site’s content takes center stage. As a result, typography is key to capturing the user’s attention. The choice and usage of typefaces in minimal design is critical to creating a unique look and feel that makes a lasting impression on visitors. Therefore, it’s important to choose a combination of typefaces that both reflect the personality of the brand and provide a clean, pleasurable user experience. Yet again, restraint is key, as using too many different fonts can make the site feel unorganized and chaotic. Beyond the choice of typeface, attention to detail in size, color, spacing and weight is important to ensuring readability and defining the overall aesthetic of the site. The WPShower website offers a good example of the role typography plays in setting the tone for minimalist design, with an easy-to-read yet somber font for the main caption and a quiet font for the menus.

Color

A common myth of minimalism in website design is that it entails a lack of color. While many minimalist websites do feature a color palette that is limited to black and white, this is merely an aesthetic choice, not a requirement. Instead, just as with all other elements of minimalist design, color should be deployed in ways that emphasize focus and restraint. Minimalist sites commonly employ a single continuous background color that sets the mood or tone for the site. A carefully chosen accent color is then employed to draw the user’s attention to key features of the site, such as navigational elements or important points within the content. It’s important to ensure that the accent color is not used to excess, or else it will lose its impact. For instance, take a look at authentic style, the design portfolio of William Smith. The background is brown, with another shade of that very color used as accent, yielding an overall effect that is minimal, clean and neat.

Layout

Layout is a make-or-break element of minimalist design. It requires proper execution and an absolute lack of ambiguity. All elements should work together to keep the primary focus on the site’s content. Minimalist design requires special attention to certain key elements. For example, the company name and logo should be in a prominent location in order to establish the site’s identity and promote the brand. Next, as with any site, ease of navigation is critical. Navigation menus should be convenient to locate and use on any device or platform. If visitors are forced to scavenge for information, the website will not be popular, no matter how beautiful it is. For instance, take a look at the website of The Mavenist – a minimalist design featuring awesome typography and a user-friendly layout. Also, it is often incorrectly assumed that a minimal website design excludes images and graphics. After all, we are concentrating on good typography, few colors and highly structured layouts, so images will only introduce chaos, right? Actually, no. Images are an important component of any website’s content, and in minimalist design, images can be used to powerful effect in the absence of other competing graphical elements. For example, take a look at the Clean Dessign theme. It is loaded with images and yet maintains restraint in terms of layout and design.

White space

White space – also known as “negative space” – simply refers to the area on a web page that is not occupied by any design elements or text. Even though it is called “white space,” it does not actually have to be white. This term merely refers to the space that exists between content. White space is a critical element of any design – not just minimalism. It can be tempting to fill this empty space in order to make the best use of the available real estate on the page. However, in fact, it is this space between content that helps users make sense of the page and understand which elements are most important. In minimalist design, white space is used to help lead and direct the user’s attention. For example, content that stands alone will draw focus immediately. Furthermore, white space can also be used to group similar items together as well as to create separation and differentiate between elements of various levels of importance.

Getting started with minimalist design

While minimalist design is appealing in its simplicity, it’s not the right choice for every site. It works best for those sites that are centered around serving a singular purpose – whether that’s selling an app or presenting a portfolio of work. So how can you determine whether your site would benefit from being redesigned with a minimalist approach? The answer is more simple than you might think. No matter what business you’re in, your website exists to help that business grow. Therefore, every decision you make with regard to your site should be based on whether it will help to advance your business growth objectives. A good place to start is by evaluating your current website. Make a list of its various features and components. Now arrange that list in order of usage, with the most commonly used ones on top. From there, go down the list and eliminate any that are not often used or are not essential to supporting the business objectives of your site. If what remains on the list reflects a few relatively simple ideas and functions, your site could be a good candidate for a minimalist redesign. Further exploration with an experienced website design firm will help you identify the ways that your site could be simplified and streamlined. As always, usability trumps all, so any changes must be driven by the goal of providing the best possible experience for visitors that motivates them to take action. Implementing minimalism just because it is a popular trend could ultimately undermine your site’s ability to help you capture and convert new customers. But if your aim is to present a focused message in a powerful way, minimalist design will provide a stage where those ideas can shine.

---