SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

Bridging the Gap: How to Integrate Social Media Into Your Website

Your website is the home base for your company. It’s where you turn visitors into leads and prospects into paying customers.

Social media sites are outposts for your company. They’re where you go to find your customers and prospects and maintain an ongoing dialog with them in the places where they live online.

All too often, however, companies treat their web development and social media efforts as separate and distinct initiatives when, in fact, they should be working together seamlessly to promote the growth of your business.

Here’s how to maximize your online exposure by bridging the gap between your home base and social media outposts:

Start with the basics.

Make sure you have obvious links to every social media site where you maintain an active presence in a prominent location on your website. The header or footer is a good spot for these links because they then become a universal element of your website that every visitor will see no matter which page they might happen to land on first, last or in between.

You don’t have to use the standard logo for these social media sites, either. Instead, you can style these buttons in ways that reflect the look and feel of your own site.

Keep in mind, too, that the point of these links is to entice web visitors to “like” or follow you on these social media networks so that you can continue your conversation with them long after they’ve left your site. Therefore, it’s important that you include links only to those sites where you maintain an active presence. Don’t add a link to any site where you are not a frequent participant because there will be no incentive for that prospective customer to want to continue engaging with you on that platform.

It’s also smart to have these links open in a new tab so that you don’t risk losing your hard-earned visitor to other distractions on Facebook or Twitter.

Empower your advocates.

Today’s culture of the Web thrives on people finding great stuff and passing it along to others.

Make sure it’s easy for your customers and fans to share the stuff they like on your site with their own circles of friends and followers.

Again, use some discernment here and don’t include sharing options for every social site ever invented. Just pick a few key options like Facebook, Twitter and Google+ so that these buttons can be large enough to be easily seen.

Also, don’t plop these buttons on every page. Make sure they’re present on every product page and blog post. But what are the chances someone is really going to share your About or Contact page with the world?

Finally, pay attention to how links look when they’re shared. For example, Facebook’s API displays page titles and meta descriptions for shared links, so make sure these elements that live in the underpinnings of your site are formed strategically so that the shared content is presented in the most advantageous way for your brand.

Use social media to feed your website.

If you regularly use social media networks to keep your customers and prospects apprised of special promotions or events, you might consider plugging a Facebook Like Box or Twitter widget into your website.

However, don’t exercise this option just because it’s there and it’s trendy. Think carefully about whether the content you share on Facebook or Twitter actually pertains to and is appropriate for your average website visitor.

Also, while it’s almost always best for your blog to be an integral part of your own website, if you do maintain your blog on a third-party platform like Blogger or Tumblr, make sure you pull an RSS feed from your blog into your website so customers can discover your great content.

Get visual.

If you have a helpful how-to video or a series of photos from your latest event that you want to feature on your website, consider posting them to social sharing sites like YouTube or Flickr and embedding them in your site from there.

This approach makes your content accessible to the millions of users who search these social platforms for videos and images, making it that much easier for potential new customers to discover your website and your brand.

For example, Pink Cake Box, a gourmet cake shop located in New Jersey, reports that about 10 percent of their website traffic each month comes from Flickr, where they regularly post photos of unique cakes.

Just make sure when you post your photos or videos that you include a link back to your site in the description so users have a clear path to reach your home base.

Get social with service.

It’s standard practice to give your customers the option to contact your company via an email address or by submitting a form on your website.

However, many companies are now encouraging customers to get in touch via Twitter or Facebook as well.

There are several benefits to this approach. First, it gives the person who wants to reach you a quick, convenient way to do so. It also gives your company the opportunity to field both praise from happy customers and complaints from dissatisfied buyers in the public eye.

While you might be nervous about the idea of having complaints aired publicly, consider this: these people are going to be talking about you anyway. It’s best to give them an outlet to do so in a way that allows you to provide a positive resolution to the problem at-hand while demonstrating to the world that your company cares about your customers and is dedicated to providing the best possible experience for them.

If you go this route, just make sure that you’re prepared to monitor and reply to any communication directed at you via social media right away. If a question or complaint lingers unanswered, it will reflect poorly on your brand. Also ensure that anyone who is tasked with responding behalf of your brand is well trained in how to handle any imaginable scenario in a way that demonstrates strong values and a commitment to providing excellent customer service.

By bridging the gap between your activities on social media networks and your own website, you’ll create an even stronger promotion engine for your business that will help you capture and convert more customers.