SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

10 One-of-a-Kind E-commerce Websites That Put Ordinary Sites to Shame

This collection of creative e-commerce websites includes those that take a unique approach to creating a storefront, and each are discussed in light of what makes their creative designs work so well.

Hopefully, you too can find some inspiration in the collection below to help you in your own e-commerce website designs. Which of these made a big impression on you?

Mom and Popcorn

This vintage website is a very unique experience in that it jumps off the page and makes you forget what decade you are really in. Although not the typical clean cut design of most popular e-commerce sites, it remains easy to use and bursts with creativity. It is very easy to find what you are looking for and the prices are prominent. You don't have to click around aimlessly to figure out what to do next. Five stars for Mom & Popcorn!

The Affair

The Affair is a UK based, offbeat clothing company that makes no apologies; neither for its darkness and morbid atmosphere, nor for its unique shopping design. Although simple and uncluttered, it is anything but standard. For one thing it has a discreet but impossible to miss shopping cart link in the corner. When an item is added to the cart, there is an animation of the selected item dropping into the shopping cart. This is a great touch because so often people click several times to be sure their selection was made and end up with too much in the cart at the end. With The Affair's unique concept, there is no confusion. Another useful feature is that each product's thumbnail offers a 360 degree view so you can examine it from all angles. It's these details that make all the difference.

Storenvy

Storenvy is ingenious, both in concept and in execution. It takes social networking, Etsy, and Pinterest and combines them all into one with an interface as easy to use as Blogspot. It allows users to create their own store to sell stuff, or to buy by browsing hundreds of items from different sellers at once. It is able to pack a lot of information and products into a small space without getting cluttered or confusing. It comes with a built-in store creation wizard to make it super easy to get out there and sell your goodies. I only wish I had thought of it first!

Saddleback

Saddleback is a beautifully and meticulously designed website that sells all types of leather products. Every element of the site contributes to its design, which is a breath of fresh air from other designs that can be weighty and cluttered, even if nice looking. The attention to detail is what makes this rich site still completely practical and usable. One particularly nice touch is that it includes a list of the sites of their business rivals, making it easy to see that Saddleback is the complete package.

Heartbreaker Fashion

Heartbreaker has a pleasant design with a good use of patterns and textures, which is what makes it different from other creative e-commerce websites. The trend has been to avoid patterns because they can distract shoppers from the product. When done right, however, it can really enhance the store front. Heartbreaker also has a handy shopping cart box in the footer of the site as well as the top. Even though it breaks the mold, it is still very user friendly, and even stronger for it.

Oi Polloi

Oi Polloi is a retro site that sells clothes and footwear. It is surprising to find that it does not have a shopping cart immediately available - only once an item is selected does a shopping cart (here called a "Basket") descend as an overlay to the site, showing exactly what you bought, what size, and how much it is, as well as a subtotal. So there is not a separate page for the checkout, which is quite efficient in my opinion. Never be afraid to reinvent the wheel!

A Modern Eden

A Modern Eden sells prints, decals, and stuffed animals with strange angular designs. It makes use of trendy colors, and where normally the bright green background would be tacky or distracting, in this usage it is not only appropriate but adds greatly to the fun and feel of the site. The ribbon highlighting the shopping basket icon is a very nice touch as well.

Patrick Ervell

Patrik Ervell sells fashionable men's clothing with a really cool twist. Where expensive men's clothes can often appear stiff or uncomfortable, this site helps guys envision themselves wearing the clothing, with use of live moving models with every product! Normally this is a huge no-no. Animations can quickly become a very bad idea, especially if there is more than one moving item per page. But Patrik Ervell accomplishes it beautifully, with a sterile white background and simple, concise text only interspersed where necessary.

Marie Catrib's

Marie Catrib's uses vivid pastel colors; friendly, bold text; and interesting dotted lines and patterns to make the pastry and bread products come alive. Some unique elements include the ability to search by vegan or gluten-free, a toggle button to hide half the website to focus on browsing, most information in the footer, and having ALL the offered products on the home page of the site. Simple, easy to use, and captivating.

Brand Neusense

Brand Neusense breaks a lot of rules by being too crowded, having too many colors, and incorporating too many animations - yet, somehow it all works. First of all, the models look like real people, not - for lack of a better word - models. Even more so, though, this creative e-commerce website stands out because the homepage focuses more on the various brands it sells and on ads than it does on its product. It is designed thoughtfully for its target market, and that's all you can ask of a web designer.

So whether you have an upcoming creative e-commerce website design project coming up or you need to revamp your e-commerce site design, use the examples above in your decisions. Doing your research and noting what others do right (or wrong) is one of the best ways to create a website that puts ordinary to shame.