SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

Is Your Promotion Ready for Prime Time? Seven Make-or-Break Lessons in Staging a Successful Retail Sales Event from Amazon

With the holiday season just around the corner, talk of “Black Friday” and “Cyber Monday” sales have already become practically unavoidable. These two retail sale juggernauts have become so deeply entrenched in our cultural lexicon that they actually shape consumer behavior, as eager shoppers anticipate and plan around their arrival for weeks or even months ahead of time. But what if you want to go your own way? Can you conceive of your own unique promotion that will excite consumers and jump-start spending behavior on par with Black Friday? This was the very challenge Amazon attempted to tackle this past summer with their “Prime Day” promotion. Coinciding with the company’s 20th anniversary, Prime Day was a one-day sale that was promised to include “more deals than Black Friday.” Amazon flooded the marketplace with advertising in advance of Prime Day and whipped up great excitement and speculation among customers about what types of deals might be offered. However, when Prime Day arrived and the sales rolled out, the reaction was decidedly less enthusiastic, with many underwhelmed shoppers turning to social media to express their apathy, disappointment and even downright disgust. In the end, Prime Day was not the colossal failure that the Twitterverse would have you believe. In fact, just a few hours into the day, Amazon sent out a press release claiming that “peak order rates have already surpassed 2014 Black Friday.” Moreover, “Prime members have already bought tens of thousands of Fire TV Sticks, 35,000 Lord of the Rings Blu-Ray sets, 28,000 Rubbermaid sets, and 4,000 Echo devices in 15 minutes. The Kate Spade purse was gone in less than a minute. We also sold 1,200 of the $999 TVs in less than 10 minutes. And there are thousands more deals coming.” While Prime Day may not be the next great retail phenomenon, Amazon’s venture into inventing a new sales holiday offers several valuable lessons in the do’s and don’ts of crafting a successful promotional event:

1. Build buzz around your promotion.

One thing that Amazon did right was building up excitement in advance of the event. They ran advertising for weeks leading up to Prime Day, yet they kept the specifics about the deals that would be offered under wraps, leading to great speculation among Amazon enthusiasts about the kind of fantastic steals they might be able to score. Many of these shoppers even logged on early to try to capitalize on the sale. Any successful promotion starts with hype. You must have a plan in place to build excitement and get people talking so that once it begins, you have a eager customers ready and waiting to jump on board. Of course, hype is just that. It should be the drum roll leading up to the big finish. Otherwise, it’s just an empty promise that will result in disappointed (and distrustful) customers.

2. Deliver on the expectations you’ve created.

By far, the biggest point of failure for Prime Day promotion is that many customers expected much more than Amazon ultimately delivered. The majority of the complaints about Prime Day centered around the lack of perceived value or desirability of the discounted items. Typically, during Black Friday and Cyber Monday, retailers tease deep discounts on highly desirable items (such as TVs, gaming consoles and premium brand products) to get shoppers in the door, counting on them to scoop up other items that they want to unload in the process. But on Prime Day, the best deals centered around Amazon’s own tech gadgets, like their Fire TV stick, Kindle and Echo, while many of the other products that were included, such as dishwasher detergent, socks and even a 55-gallon barrel of lube, were much less attractive and left many customers feeling underwhelmed. Furthermore, Amazon front-loaded the hottest deals at midnight PST, so by the time most customers jumped online in the morning, everything had long been sold out. While Amazon has the numbers to prove they sold tons of item during Prime Day, there’s no denying that, for many customers, they did not meet the expectations that they established in the pre-sale campaigns, leaving the retailer with a major black eye in the court of public opinion. When planning a promotion, be sure that you live up to the hype you create. If your focus is on marketing the promotion instead of on the promotion itself, then you are setting yourself up for disappointed customers.

3. Remember: bigger does not always mean better.

Looking back at Amazon’s pre-sale campaign messaging, you will notice that they refer to Prime Day as being bigger than Black Friday and having “more deals.” Nowhere could I find any mention that Prime Day would be “better” than Black Friday, just that there would be more deals offered, which is a perfect example of the old adage that “bigger does not always equal better.” Item for item, Prime Day may have indeed had more to offer than Amazon did on Black Friday, but that didn’t matter to most customers. People don’t necessarily want tons of options, they just want the right ones. When planning your own promotions, think big, but also ensure that you do not sacrifice quality for quantity. Instead of focusing on offering a wide array of deals, go the opposite direction and think about personalizing your promotion. These days, with the abundance of traffic analytics and customer account data available, it’s easy to know what your customers shop for and purchase most often. Use this information to your advantage and craft customized offers that reward your loyal shoppers with discounts on the things they really want and need. And for goodness sake, notify them ahead of time that their favorite items will be on sale! This is definitely one area where Amazon really missed the boat. After all, who has more customer data and marketing intelligence than one of the Web’s biggest retail giants?

4. Don’t try to please everyone.

The fact that we are talking about all the complaints that people had about Prime Day is interesting in and of itself. After all, this is a sale we’re talking about! People are actually upset that the deals offered weren’t good enough! That’s the very definition of a First World problem and it shows that, no matter how hard you try, you will never please everyone. When planning a promotion, consider your customers and what they want, but don’t get too hung up on trying to include something for everyone. Doing this can force you to go to market with a campaign that is unwieldy and unfocused, and no matter how hard you try, there will always be someone who complains that they did not get what they wanted. Do your best to set and meet expectations, but also be prepared to hear complaints, and accept that this is part of doing business.

5. Motivation is key, and timing is everything.

One of the key reasons Prime Day was not a bigger success is that the motivation behind the event was driven by Amazon, not it’s customers. Amazon decided that they wanted to stage a huge promotion in the middle of the summer to celebrate their 20th anniversary. But what does that have to do with me, the consumer? Nothing at all, really. As Ed Stevens, CEO of Shopatron explains, Amazon’s chief failure was that they neglected to tap into any real time- or emotion-based motivation for their customers: “Prime Day will in no way replace Black Friday. The primary reasons for this include the amount of consumer discretionary dollars in July will not change. Consumers are most motivated to spend their money when it’s associated with an event, and most holiday sales are centered around a sentimental or emotional gift giving component…Prime Day is an unsentimental, ordinary sales gimmick akin to a car dealership having a Labor Day blowout sale.” Everyone knows that the key to making a sale of any sort is to instill a sense of urgency in the buyer. July is far removed from any major gift-giving holiday, so as a shopper, the idea of Prime Day as an early Black Friday is null and void. Unless there’s something I want for myself and happen to find an unbeatable deal on, I’m not likely to part ways with my money on this particular day just because a company tells me I should. When you’re planning your next big promotion, make sure the timing is right, and that you’re tapping into motivations that are relevant to your customer base. If you own a stationery shop, you can run a promotion timed to coincide with brides who are planning for the summer wedding season. If you run a sporting goods store, it doesn’t make sense for you to run a Valentine’s Day sale, but it does make sense for you to plan promotions tied to the beginning of each new sports season for adults and kids needing to gear up for spring baseball or fall football and so on.

6. Make it easy for your customers to participate.

Another one of the chief complaints about Amazon’s Prime Day was the way in which offers were presented: an infinite scroll of items presented five at a time in no particular order which continued on for hundreds of pages. Who wants to wade through that for the chance at finding something they might want at a price they might want to pay for it? If you’re going to run a promotion, don’t make your customers work hard to make you money. People love a good deal, but only to the extent to which it doesn’t cause them an excess of inconvenience. Don’t forget: there’s always a competitor lurking in the wings to give your customers what you fail to deliver.

7. Accept that you will have a target on your back.

With Prime Day well underway and customer reactions starting to roll in, Walmart jumped into the conversation by offering a number of their own “Rollback” deals. They were able to sit back and see what Amazon was doing and then respond in a way that would allow them to try to trump Amazon’s big sale – and for many customers, this move worked as they found (in their opinion at least) better deals on Walmart.com. What does this show us? That the first one to do something is the one with the target on their back! After all, it is always easier to follow rather than to lead. By waiting to see what Amazon had up their sleeve, Walmart was able to evaluate the situation and respond, instead of taking the leap and being first into the fray. This is a reality for any company that forges into uncharted territory, since it allows your competition to learn from any mistakes you make and build upon the path that you establish. Does this mean you should be reactive rather than proactive in your promotional strategy? Not at all. Many companies that were “first in” benefited from that position. eBay was the first company to do online auctions, and sites that tried to follow in their footsteps slowly failed and closed up shop while eBay remains a powerhouse. Sometimes, the first one in wins the day, but other times, they end up being the target that everyone else comes gunning for. Ultimately, though, it’s good planning and solid execution that are the differentiators between a promotion that soars and one that sinks.