SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

In It to Pin It: 8 Ways to Win New Customers with Pinterest

A Pinterest-ing development in social media

The results are in and they’re rather stunning: Pinterest is now the third largest social network in the U.S., right behind Facebook and Twitter (Google+ who?). Moreover, a recent study by BlogHer showed that women trust recommendations from Pinterest more than any other platform. Not too shabby for a network that’s barely two years old and still in an invite-only open beta phase.

The basic mechanics of the site are simple. Members (known as “Pinners”) can establish a profile and “pin” all the cool, funny, trendy and inspirational things that they find in their online travels to digital bulletin boards, where images (and their associated links) are bookmarked. Pinners use these boards to visually document anything and everything pertaining to their interests, whether those interests entail fashion, home décor, food, parenting, wedding planning, tech gadgets or cars.

As you’d expect from any social network, pinners can follow each other. They can also “repin” other users’ images as well as like or comment on pins. Naturally, there’s also integration with the other Big Two, with the option to share links to pins on Facebook and Twitter.

More interesting is the question of why the site has caught fire so quickly. The primary reason lies in its anatomy. True to its name, Pinterest creates a highly streamlined experience for its users that is curated according to their interests. Unlike Facebook and Twitter, where users have to sift through every photo and status update from those they follow in a linear fashion, Pinterest users can focus solely on their hobbies without their feeds being cluttered with information that holds no value to them.

The most important question, of course, is how you can harness the power of this explosive new social network to grow your business. To answer that question, here are eight ways you can use Pinterest to win over new customers and fans:

1. Tap into what people love.

Before you dive in, take some time to study the ecosystem and how its members interact. One of the greatest advantages of Pinterest from a marketing perspective is that the community is very open, so it’s easy to see who’s influential in a certain area of interest and what types of content generate the most repins and comments.

By monitoring these trends, you can identify where the best opportunities lie for your brand to create the kind of content that your customers crave.

2. Focus on values, not products.

Think your brand isn’t a good match for an image-driven platform? Don’t be too quick to dismiss your Pinterest potential. Plenty of brands that don’t seem like the most obvious fit for Pinterest – from GE to Kotex – have found creative ways to leverage the platform to engage with customers.

The key is focusing not on your products or services but on the core values that define your brand. Organize your boards around these pillars of your brand and share things there that anyone who shares that common interest or passion would enjoy. Make sure to offer a healthy balance of content that includes your products where relevant but also great stuff from across the Web as well as repins from other users.

Whole Foods Market, for example, has quickly emerged as a Pinterest rock star using this approach. The company’s core values include caring about the community and the environment, promoting healthy eating habits and providing education about good nutrition. Drawing upon these values, they’ve created a diverse collection of boards –ranging from “Who Wants Dinner?” to “Winter Entertaining” to “Super HOT Kitchens” to “We’re Used to Reusing” – where they share content from a wide array of sources that collectively represents the Whole Foods lifestyle.

3. Tell a story in pictures.

Unlike Facebook or Twitter, Pinterest is image-based rather than message-based – which is one of the key reasons for its success. When users scroll through feeds or boards, they’re presented with a simple, uncluttered interface that includes a stream of pictures interrupted just slightly by a brief caption below. As a result, to be successful, it’s important to ensure that the images you pin to your boards tell the story of the content they represent in a visually compelling way.

For example, if you want to share a link to a post from your blog on Pinterest, you need to make sure it includes a powerful image that encapsulates its key theme or message and is also intriguing enough to prompt someone to click through to see the full story.

Keep in mind, too, that when followers re-pin your images, they can change the caption. As a result, it’s important that the images you pin can stand on their own outside the context of your brand’s boards so that they continue to convey your message and values as they are repinned from one board to another.

4. Be a participant, not just a contributor.

Creating boards that offer great curated content organized around your customers’ interests is a good first step. But as with any social network, to get the most out of your presence on Pinterest, you must also listen and engage, not just broadcast.

Repinning other users’ content to your brand’s boards demonstrates that you’re there to do more than push your own agenda by elevating those who have something interesting to offer on your topics of interest. Likewise, following other users’ boards and commenting on others’ pins is an effective relationship-building tactic that can draw new eyes (and potential new customers) to your own boards.

5. Let your customers create content for you.

Pinterest makes it easy to crowdsource content. All you have to do is create group pinboards and invite other users to pin content to those boards – a great way to spark engagement with your brand.

You can also use group pinboards as a springboard for contests where you ask customers to pin pictures of themselves using your products, with prizes for the most creative, innovative or inspiring images. It’s a win-win strategy for both your brand and your customers, as your customers can enjoy a turn in the spotlight while you can promote your products in a tasteful way that’s very palatable to the community.

6. Diversify your boards.

Another element that differentiates Pinterest from Facebook and Twitter is that users have the option to follow specific boards in addition to following users. This means that a user may elect to follow just one or two of your boards rather than everything you post.

While this may initially seem like a disadvantage to you, it’s actually a benefit. Why? Because it means you don’t have to worry about limiting your content to only that which offers the broadest appeal. Instead, you can tailor each board to fit a specialized interest.

Returning to our Whole Foods example, each of their boards is tailored to a fairly narrow area of interest, whether that’s recipes, seasonal entertaining, home décor, DIY projects, gadgets or books. While all of these boards may not appeal to every Whole Foods customer, by providing such a wide array of boards, the brand has greatly increased its chances that every customer can find something that resonates with their interests.

7. Make sure your great content can be found.

If you’re investing the resources required to create and curate interesting content, you want to make sure it can be found by the greatest possible number of customers and potential customers, right? The good news here is that there are tactics you can use to boost your odds.

First, just like Twitter, Pinterest supports hashtags. Tagging each image with the central idea or theme of your board will increase its chances of being found in search. Additionally, the sharing tools built into Pinterest automatically pick up these hashtags and include them when users share your content on Facebook and Twitter.

Also, make sure when possible to form the name of your boards around keywords. For example, West Elm offers home décor boards organized around specific color palettes (“Coral,” “Aquamarine”) and patterns (“Stripes,” “Chevrons”). By naming their boards according to these keywords, West Elm helps lead users who are looking for decorating ideas focused on that color to their boards.

8. Turn pins into traffic.

Don’t overlook the opportunity to use Pinterest to drive traffic to your website. If you pin cool imagery and interesting content from your site to your boards, you’re basically seeding Pinterest with a lot of links back to your site.

You can also add the “Pin It” button to your site right next to your other social sharing buttons in order to make it as easy as possible for visitors to add images from your site directly to their boards.

And if something either you or one of your customers pins happens to become incredibly popular? Think of all the potential clicks back to your site!