SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

Is Your Website Ready for the Tablet Revolution?

The revolution is here.

When Apple launched the iPad last year, it carved out a new category in the mobile device marketplace. With the release of the iPad 2 and newer challengers like the Motorola Xoom and the Samsung Galaxy now joining the fray, the market continues to heat up as more and more users opt to perform everyday tasks like browsing the Web, sending email, watching videos and playing games on tablet devices rather than their desktops, laptops or netbooks.

In fact, according to a recent study conducted by Nielsen, 35 percent of tablet owners polled said they now use their desktop computer less or not at all while 32 percent of respondents said the same of their laptop. The top five reasons cited for preferring the tablet over a desktop or laptop were portability (31 percent), easier interface (21), start-up speed (15), convenience (12) and size (12).

Additionally, Forrester Research forecasts that tablet sales in the U.S. will continue to climb sharply, from 10.3 million in 2010 to 24.1 million in 2011 to 44 million in 2015. The firm also projects that by 2015, 82 million people in the U.S. will own a tablet, a figure which represents one third of the total online population.

What do these numbers mean for you? With each passing day, the likelihood that consumers will be interacting with your brand via a tablet rather than a desktop or laptop is increasing. As we demonstrated previously, not all brands can or should release a native app, and even if you do, you shouldn’t neglect those users who will be surfing your primary site on a tablet-based browser.

As a result, it’s up to you to make sure that your website evolves to provide these users with a high-quality, hassle-free experience, or else you’ll risk losing them to competitors that do.

Here are nine critical elements you must examine now to make sure your site will continue to serve the needs of your customers and support the growth of your business in the era of the tablet:

Balance of content vs. interface

Tablet screens are much smaller than desktop or laptop screens, yet the primary use of tablets is for consuming content. Therefore, it’s important to make sure that your website’s interface is clean and clutter-free so that you make optimal use of the available real estate and allow your content to take center stage.

Typography

The type on your website must strike a happy medium for tablet users. If it’s too small or condensed, it will be illegible without zooming in. If it’s too big, users will be forced to scroll more than necessary.

You must find the ideal balance of font face, font size, line spacing and line length so that your content is pleasant and comfortable to read at the distance at which a user would naturally hold a tablet.

Color and texture

Color and texture are more than cosmetic niceties. When applied in strategic ways, they can go a long way toward improving the usability of your site for tablet users. For example, a subtle gradient on top of a button can provide a visual cue to users that it is an actionable object.

Keep in mind as well that with tablet users, you’re fighting finger smudges and glare for visibility. Bright background colors and patterns can reduce interference from these elements, while solid black tends to make them more distracting.

Buttons and links

When it comes to the tools your visitors use to travel around your website, size matters.

For tablet users, the clicking and scrolling of a mouse are replaced by touching and swiping gestures. As a result, navigation actions are less precise on touchscreens. You must allow a greater margin of error by creating buttons that are the size of a fingertip rather than a cursor.

Also, make sure to allow a little breathing room around your buttons and links, especially those that live in your site’s main navigation. Nothing will frustrate a user faster than being directed to a different page than the one they wanted because your links are crammed together too tightly.

Interface cues

If your website’s interface currently relies heavily on rollover effects, you’re going to be in trouble on a tablet. In the world of the touchscreen, there is no such thing as a hover state. If, for example, you have “previous” and “next” buttons that appear only when the mouse is nearby, those elements will be unavailable to your tablet users.

To create finger-friendly navigation, all elements must be big, bold and obvious. Replace buttons that require users to mouse over them to get a sense of action with style enhancements that draw attention to their “pressability.”

Menus

If your site contains drop-down menus, make sure there are visual cues (such as small up and down arrows) to indicate that the menu is expandable and that the menu remains open on tap.

Alternatively, you might consider streamlining your navigation to eliminate the need for drop-down menus altogether. Instead, you can create a showcase page for each main section of your site that acts as a gateway to the subpages contained within.

Scrolling

Screens on the tablet devices that are currently on the market range from approximately 7 to 10 inches and allow viewing in both vertical and horizontal orientation. As a result, there’s no way to be able to accurately predict what a tablet surfer will see without having to scroll.

The good news here is that tablet device users expect to scroll – not just vertically but horizontally as well. There’s no need to worry about trying to force all your important information to fit “above the fold.” Clean, streamlined design that promotes easy content consumption is the name of the game.

Forms

Many of the most critical interactions between your website and your customers occur through forms, whether it’s subscribing to email updates, requesting more information, logging into a secure account or completing a purchase.

Examine your forms closely to ensure that all fields render clearly. Also, make sure your forms are as streamlined as possible. Trying to complete a long form with many fields on a tablet is cumbersome. While the marketer in you wants to collect as much data as possible from your site visitors, the danger of requiring users to complete too many fields is that they’ll get frustrated and give up, leaving you with no data at all or, even worse, a potential sale lost.

Flash

Apple’s iOS does not – and probably never will – support Flash. Android does support Flash, but the performance of Flash content on Android devices thus far has been less than ideal.

If you have Flash anywhere on your site – whether it’s in the introduction to your site, your navigation menus or video – get rid of it now, or else your tablet users will be plagued with problems. Today there are better, more tablet-friendly options available, such as HTML5 and JavaScript, that can replicate the same effects that once required Flash.

When in doubt, test it out.

The only way to be confident about how well your site performs on a tablet is to put it through the paces on actual tablet devices. While there are some web-based simulators, they aren’t 100 percent reliable since they are ultimately limited by using your desktop browser to render your site.

If you don’t already own a tablet, borrow one or – if all else fails – make a trip to your local retailer and use the display models there.

Be sure to evaluate every element and every page of your site carefully. If possible, recruit other friends, colleagues or family members to do the same, and observe them as they navigate through your site. Because they aren’t as intimately familiar with your site and its nuances as you are, they may uncover stumbling blocks that you might have overlooked.

If you identify any problem areas, seek out the help of a trusted website design firm to address them. While you may have to make an investment in upgrading the infrastructure of your site, it will be money well spent to make sure current and prospective customers can access your site on their device of choice – which is more and more likely to be a tablet.