Book summary “WordPress For Dummies”: summary

Introduction

You want to build a professional website, blog, or content management system, but you do not know how to code. Technical barriers often stop you from publishing your ideas or launching your business online.

Lisa Sabin-Wilson demonstrates in WordPress For Dummies that you can bypass complex programming and build sophisticated sites using the world's most popular publishing platform. WordPress empowers you to create, manage, and scale your web presence with ease.

The book guides you from your initial setup decisions through daily publishing routines and advanced site maintenance. You will learn how to configure your system, organize your content, and extend your site with themes and plugins.

• How do you install and configure a self-hosted WordPress site?
• What are the best ways to structure your content using posts, pages, categories, and tags?
• How can you customize your site appearance and add new features safely?

1. Discovering the Benefits of WordPress

WordPress offers a free, highly extensible, and easy-to-use platform that empowers you to build websites and publish content without needing to know how to code.

The software enables you to write content and publish it simply by clicking a button. It provides diverse options, a quick setup, and extensibility through themes and plugins. By the first half of 2020, 35 percent of the websites on the internet were powered by WordPress. Total WordPress downloads achieved 30 million downloads by the beginning of 2020. You can use the software for personal blogs, business sites, or complex content management systems.

Choosing a WordPress Platform

WordPress is divided into two distinct versions: WordPress.com, a hosted turnkey blogging solution, and WordPress.org, a self-hosted software version offering total control. WordPress.com manages backend configurations for you but limits custom themes, plugin installations, and code modifications unless paid annual fees are met. WordPress.org requires external web hosting and gives you full access to core files, plugins, and custom themes.

Using WordPress.com involves specific costs for advanced features. You face a cost of $96 per year on WordPress.com for custom CSS control and template access. You pay $300 per year on WordPress.com for the ability to install plugins and themes.

Self-hosting with WordPress.org

Running the self-hosted WordPress.org software requires a web server meeting specific modern minimum software standards to ensure security and functionality. While older software versions can technically run WordPress, they are considered discontinued and leave sites vulnerable to security issues. Up-to-date server software is critical for safe operation. You need PHP version 7.3 or later as the minimum recommended version for PHP. You also need MySQL version 5.6 or later as the minimum recommended version for MySQL. Older fallback versions supported by WordPress include PHP version 5.6.20 or later and MySQL version 5.0.

The self-hosted WordPress.org software allows administrators to run an unlimited number of websites and domains from a single installation using the Multisite feature. By configuring network options, you become the administrator of a network where global navigation and updates can be pushed centrally to numerous separate instances.

BBC America manages its TV network shows through a huge WordPress Multisite network where each show has an individual site. Boise State University centrally manages global navigation and emergency notifications, pushing updates out to more than 200 separate WordPress multisite instances within minutes. Boise State University offers nearly 200 degrees across 7 colleges. Microsoft Windows manages niche-specific blog networks in multiple languages using WordPress.

• Write your content
• Click a button to publish your content

2. WordPress Basics and Publishing Strategy

Publishing success requires establishing a clear content strategy and understanding how server technology and built-in features organize your site.

WordPress Basics

WordPress relies on PHP and MySQL running on a server to dynamically generate and store website content. When a visitor requests a page, the server uses the PHP scripting language to retrieve information from the MySQL database, which acts as a filing cabinet for posts, pages, comments, and options. Theme and design files are stored separately in the file system.

The platform supports personal bloggers sharing private interests, businesses promoting products, media organizations covering current events, citizen journalists challenging traditional media, and professional bloggers paid by networks or advertisers.

Lisa Sabin-Wilson maintains a personal blog at lisasabin-wilson.com/blog and a business blog for WebDevStudios at webdevstudios.com/blog.

WordPress functions as a full content management system that can power entire websites beyond simple chronological blogs. While a blog displays chronological posts, a CMS website incorporates static pages, photo galleries, e-commerce stores, discussion forums, social communities, and portfolios.

WebDevStudios uses WordPress as a full CMS for its main site at webdevstudios.com, featuring a static front page, portfolio, and service landing pages.

Moving On to the Business of Publishing

Open comment systems attract automated spam seeking search engine ranking benefits, which is mitigated by anti-spam software. Spammers use automated programs to flood open comment sections with links to improve their search engine rankings, but built-in tools like Akismet eliminate this spam.

Publishing success requires establishing a clear content strategy before adjusting technical website settings. Creators should define their core topics, decide whether to include a blog, separate personal and professional subjects, and determine how information will be delivered.

The author keeps design project updates on a dedicated design blog while separating personal life topics onto a personal blog.

Ask these planning questions before you begin:

• Ask out loud: What am I going to write about?
• Ask out loud: Am I going to have a blog on my website at all?
• Determine how you want to deliver information based on your topic and plan.

3. Setting Up Your WordPress Base Camp

Establishing Your Domain

Registering a unique domain name is the first step in setting up a self-hosted WordPress website. Domain names are rented rather than bought outright, typically for periods ranging from 1 to 10 years, and failing to renew them promptly allows opportunistic buyers to claim them. Furthermore, registering a domain under a specific top-level domain extension does not prevent others from registering the exact same name with a different extension. Expect to pay anywhere from $5 to $500 per year for domain registration through a domain registrar.

Lisa Sabin-Wilson owns both lisasabin-wilson.com and lisasabin-wilson.net to prevent others from riding the coattails of her website's popularity.

You can secure your web address by following these steps:

• Decide on a domain name.
• Verify the domain name’s availability.
• Purchase the domain name.

Finding a Home for Your Website

A reliable web host providing adequate disk space, bandwidth, and specific server software versions is required to run a self-hosted WordPress site. Web hosting provides the server space and bandwidth needed to serve a website. To run WordPress successfully, the host must meet minimum software requirements, and site owners must monitor their CPU usage because hosts often throttle or shut down sites experiencing traffic spikes that exceed processing limits.

You can expect to invest $10 to $30 per month or more for web-hosting services. A good starting point includes 10GB to 20GB of disk space alongside 50GB to 100GB of bandwidth as a respectable amount for a blog. Your server environment must also run PHP version 7.3 or later paired with MySQL version 5.6 or later or MariaDB version 10.0 or later.

Establishing a self-hosted WordPress site requires registering a domain, securing web hosting, configuring a MySQL database, and running the manual installation script.

Setting Up the Technical Foundation

Secure File Transfer Protocol provides a secure method for connecting to a web server to transfer, view, and edit website files. SFTP encrypts sensitive data and passwords using Secure Shell to prevent unauthorized interception on the network. Using an SFTP client allows administrators to manage files, configure user accounts, and change permissions safely. The standard SFTP Server Port is 22, while some hosts utilize 2222 as a custom SFTP port.

A MySQL database must be created and configured before installing WordPress so that the platform can dynamically store and retrieve site content. WordPress relies on a PHP-and-MySQL platform where posts, comments, and options are stored in a database. When a visitor requests a page, PHP fetches the required data from the MySQL database and presents it through the web browser.

WordPress can be installed manually by uploading extracted software files via SFTP and running the installation script to connect to the database. The manual installation process requires uncompressing the WordPress download package, transferring the files to the server's root directory or a subfolder, and launching the installation script to establish database communication and create administrative credentials. This famous WordPress installation process takes about 5 minutes across 87 languages available for WordPress installation.

File and folder permissions on a web server dictate read, write, and execute access for the server and its users. Permissions are represented by numeric codes that determine who can modify files. WordPress themes, plugins, and core installations frequently rely on precise permission settings to function correctly without exposing the server to security risks. Files that are readable by everyone and writable only by the owner use 644, files that are readable and executable by everyone and writable only by the owner use 755, and files that are readable, writable, and executable by anyone use 777.

4. Understanding the Dashboard and Settings

Mastering the WordPress administration panel and configuration menus allows you to control foundational site parameters, user roles, and interaction rules.

Dashboard Navigation

Logging into the WordPress administration panel requires navigating to the site login URL and entering credentials, with options to store login cookies. You access the login page via a standard web address ending in wp-login.php or pointing to a custom installation folder. Selecting the Remember Me option places a persistent cookie in your browser, though you should avoid this on public or shared computers.

• Open your web browser and type the WordPress login-page address in the address box.
• Type your username or email address in the Username or Email Address text box and your password in the Password text box.
• Select the Remember Me check box if you want WordPress to place a cookie in your browser.
• Click the Log In button.

The WordPress Dashboard allows you to rearrange, expand, collapse, or hide modules using drag-and-drop mechanics and screen options to create a personalized workspace. You can move modules such as At a Glance, Activity, and Quick Draft by dragging their title bars or hide them entirely using the Screen Options menu at the top of the interface.

• Hover your mouse over the title bar of the module you want to move until the pointer changes to a cross with arrows.
• Click and hold your mouse button, and drag the module to the desired side of the screen guided by the light gray line.
• Release the mouse button when the module is in place.
• Click the Screen Options button at the top of the Dashboard to deselect and hide unused modules.

Configuring Core Settings

The General Settings screen establishes foundational site identity parameters including site title, tagline, URLs, default user roles, language, and time zones. Site titles and taglines appear in browser title bars and are indexed by search engines. Setting the correct UTC time offset ensures posts and comments are time-stamped accurately, while date and time format strings dictate frontend display styles.

• Click the General link on the Settings menu.
• Enter the name of your site in the Site Title text box.
• In the Tagline text box, enter a five- to ten-word phrase that describes your blog.
• Enter the location where you installed the WordPress software in the WordPress Address (URL) text box.
• Enter the web address where people can find your blog in the Site Address (URL) text box.
• Enter your email address in the Administration Email Address text box.
• Select a Membership option and choose a New User Default Role.
• Choose your preferred language and UTC time zone, then configure date and time formats.

Writing and Reading settings control default publishing categories, post formats, RSS feed output, and search engine indexing visibility. The Writing panel sets default categories and post formats, while the Reading panel controls whether the front page displays latest posts or a static page, how many items appear per feed, and whether to block search engines from indexing the site.

• Choose Settings to access Writing and Reading configuration screens.
• Select default post categories and formats, or configure ping services like XML-RPC.
• Select your homepage display preference, set maximum blog pages to show, and configure RSS feed content options.
• Check or uncheck the Discourage Search Engines from Indexing This Site option as needed.

Discussion settings manage interaction protocols, anti-spam safeguards, pingbacks, trackbacks, threaded comment nesting, and avatar displays. Administrators can enforce comment moderation, require user registration, automatically close comments on older posts, block specific keywords or URLs, and limit the number of allowed links to combat comment spam.

• Choose Settings and click Discussion to open the Discussion Settings screen.
• Configure default post settings for pingbacks, trackbacks, and comment allowances.
• Set other comment rules such as requiring name, email, or user registration.
• Specify automatic comment closing rules, threaded comment depth limits, and comment pagination.
• Define comment moderation thresholds, link limits, and blocklist keywords.

Media, Permalink, and Privacy settings govern image auto-resizing dimensions, file folder organization structures, URL formatting, and GDPR data compliance pages. WordPress automatically scales uploaded images into thumbnail, medium, and large dimensions while organizing files into month- and year-based folders.

• Choose Settings and select Media to adjust thumbnail, medium, and large image pixel dimensions.
• Choose Settings and select Permalinks to establish permanent URL structures for posts and pages.
• Choose Settings and select Privacy to assign or create a formal Privacy Policy page in compliance with GDPR.

5. Publishing Routine and Organization

Effective content management relies on structured categories, pretty permalinks, modular block editing, and robust comment moderation.

Categories organize website content into hierarchical subjects to improve reader navigation. You can nest categories into subcategories or category children under parent categories without level limits. If a published post is not assigned to any category, WordPress automatically files it into the default Uncategorized category, which you can rename.

Books I Enjoy as a main category containing subcategories like Fiction, Nonfiction, Trashy Romance, Biographies, and For Dummies.

• Click the Categories link on the Posts submenu of the Dashboard navigation menu.
• Click the title of the category you want to edit.
• Type the new name for the category in the Name text box.
• Type the new slug in the Slug text box.
• Choose a parent category from the Parent Category drop-down menu.
• Type a description of the category in the Description text box.
• Click the Update button.

Permalinks define the permanent web addresses of posts, which you can customize from ugly default IDs to pretty structures. Default WordPress permalinks use post IDs, but pretty permalinks display readable structures containing dates, categories, or post names. Changing permalink structures affects existing indexed search engine links.

The default link http://yourdomain.com/?p=100/ versus the post name structure http://lisasabin-wilson.com/wordpress-is-awesome.

• Click Permalinks on the Settings menu.
• Select the Post Name radio button or Custom Structure radio button.
• Click the Save Changes button at the bottom of the page.

Custom permalinks require server support and a properly configured .htaccess file for rewrite rules. When using non-default permalinks on an Apache server with mod_rewrite, WordPress writes directives to an .htaccess file in the server root directory to serve up the custom URLs properly.

• Using a plain-text editor, create a blank file and name it htaccess.txt.
• Upload htaccess.txt to your web server via SFTP.
• Rename the file .htaccess and ensure it is writable by changing permissions to 755 or 777.
• Create the permalink structure on the Permalink Settings screen of your WordPress Dashboard.
• Click the Save Changes button at the bottom of the Permalink Settings screen.

Writing and Editing with Gutenberg

The block editor allows you to stack modular content blocks to build and format pages without technical coding knowledge.

Version 5.0 of the software introduced the block editor in December 2018. Gutenberg allows you to stack individual blocks containing text, images, or layout elements. You can add blocks using top inserters, block inserters, shortcut icons, keyboard Enter returns, or slash commands, and 34 services are currently supported for embedding content.

Stacking paragraph blocks, image blocks, and column blocks to build a custom page layout.

• Click inside a standard Paragraph block and press the slash (/) key on your keyboard.
• Navigate to the desired block by pressing the down-arrow key and pressing Enter, or finish typing the block name and press Enter.

WordPress protects content against data loss through a 10 seconds default autosave interval running in the background and stores historical editing revisions. Each time you edit a post, WordPress saves the prior version as a revision, allowing you to compare and restore past iterations on the Compare Revisions screen.

Global document settings control post visibility, publishing schedules, featured images, and excerpts. You can manage global attributes from the Status and Visibility settings panel, including setting visibility to public, private, or password-protected, scheduling future publication dates, making posts a sticky post on the front page, or adding a Featured Image and Excerpt.

Writing about a terrible family dinner, password-protecting the post, and sharing the password only with trusted friends.

Comment systems enable reader interaction, while moderation tools and the Akismet plugin protect sites from spam. Version 2.0 was when Akismet began packaging with software releases to automatically catch massive volumes of comment and trackback spam.

Finding 2,300 pieces of comment spam on a blog in a single morning in 2004 prior to using Akismet.

• Click the Comments link on the Dashboard navigation menu.
• Hover the mouse pointer over a comment to reveal management links.
• Select the boxes to the left of comments for bulk actions, choose an action from the Bulk Actions drop-down menu, and apply.

6. Media Management and Multimedia

You can elevate your site design and user engagement by managing images, building photo galleries, embedding videos, and setting up audio casting.

Managing Images and Galleries

WordPress provides four distinct ways to add images to posts via the Image block. You can select an image from your computer, pick one from the Media Library, use an image URL, or drag an image directly from your computer hard drive onto the WordPress site.

• Click the Upload button in the Image block to select an image from your computer.
• Select the Media Library button in the Image block to choose an existing image.
• Insert an image from a different source by adding an image URL.
• Drag an image from your computer to your WordPress site.

The Cover block lets users place text directly on top of an image to create visually striking section headers. Lisa Sabin-Wilson created a post about her dogs using a Cover block with a light gray overlay color set to 80 percent opacity.

The Gallery block enables the creation of full photo galleries with customized sorting, captions, and layout controls. Matt Mullenweg, co-founder of WordPress, created a photo-only blog using a grid format at matt.blog.

• Add the Gallery block to your post on the Edit Post screen.
• Click the Upload button to select an image from your computer or the Media Library button.
• Click the Create a New Gallery button.
• Add a caption for each image by clicking the Caption This Image area.
• Set the order in which the images appear in the gallery by using the drag-and-drop option.
• Click the Insert Gallery button.

Embedding Video and Audio

Embedding videos from third-party services is recommended over hosting video files directly on a WordPress server. TMZ uses a video blog at tmz.com/videos to display entertainment videos for web and mobile devices.

• Click the Add Block icon at the top left of the Edit Post screen, and select the YouTube block in the Embed section.
• Enter the desired YouTube URL in the text field and press the Enter key.
• Add an optional caption in the text field below the video player.

WordPress supports native audio playback and structured podcasting features through dedicated blocks and plugins.

• Click the Add Block icon at the top left of the Edit Post screen, and select the Audio block in the Common Blocks section.
• Click the Upload button in the Audio block.
• Select the audio file you want to upload from your computer, and click Open.

7. Extending WordPress with Plugins and Themes

Plugins extend your site functionality and themes control your appearance, requiring careful selection, safe installation, and regular updates.

Plugins control site functionality, whereas themes control site appearance. Unlike themes, multiple plugins can be active simultaneously. Plugins load before themes and can override core functions in pluggable.php. A site can host zero, one, or many active plugins. The Multiple Themes plugin allows running different themes for specific site sections. The WP Mobile X plugin can replace theme functionality to serve a mobile-specific version of a site.

The WordPress Dashboard provides a centralized Plugins screen to view, filter, and mass-manage installed plugins. Plugins are highlighted with a blue background and left border when active and a white background when inactive. You can filter them by categories such as Active, Inactive, Must Use, and Drop-Ins. The Akismet plugin appears with a white background when inactive, while Hello Dolly appears with a blue background when active. Akismet holds spam in the queue for 15 days before deleting it from the database.

• Click the Installed Plugins link on the Plugins menu of your WordPress Dashboard.
• Select the box to the left of each plugin name or the box next to the Plugins heading to select all.
• Choose an action from the Bulk Actions drop-down menu at the top or bottom of the page.
• Click the Apply button to execute the mass management action.

Administrators can search, download, install, and activate official plugins directly from the WordPress Dashboard without manual file transfers. The Add Plugins interface connects to the official directory, enabling you to inspect details, ratings, and compatibility before executing an automated installation. Searching for the keyword SEO on the Install Plugins page brings up Yoast SEO as the primary recommendation for installation.

• Click the Add New link on the Plugins menu.
• Enter a keyword in the Search text box on the Install Plugins page and click Search.
• Click the More Details link on the desired plugin to open its Description window.
• Click the Install Now button to download, unpack, and install the plugin.
• Click Activate Plugin to enable it immediately or Return to Plugin Installer to proceed without activation.

Managing Plugins

Plugins can be installed manually by downloading zip packages, extracting files, reading documentation, and uploading them to the web server. Manual installation serves as an alternative when the Dashboard auto-installation fails or the official plugin repository is unavailable. You must carefully adhere to developer instructions in readme.txt files. Downloading the Yoast SEO plugin package from WordPress.org provides a .zip file that can be unpacked and uploaded via the Dashboard upload interface.

• Go to the official WordPress Plugins page at https://wordpress.org/plugins and search for the required plugin.
• Click the Download button to save the .zip file to your hard drive.
• Open the file with a decompression program to unpack the plugin files and read the readme.txt instructions.
• Click the Add New link on the Plugins menu in your Dashboard.
• Click the Upload Plugin link at the top of the Install Plugins page.
• Click Choose File to select the downloaded .zip file and click Open.
• Click the Activate Plugin button to complete the upload and activation process.

Paid and commercial plugins exist outside the official free WordPress.org directory. They are distributed through third-party marketplaces and developer sites. Commercial vendors provide dedicated support and regular updates in exchange for payment. iThemes offers BackupBuddy for backups, Gravity Forms provides form creation, CodeCanyon acts as a multi-developer marketplace, and WooCommerce delivers e-commerce functionality.

Finding and Installing Themes

WordPress themes are split between free options that offer zero cost and limited support and commercial options that require payment and include dedicated developer assistance. Free themes serve as great starting points for testing layouts and designs, but you are largely on your own for support. Commercial themes cost money and usually provide a higher level of professional coding, innovation, and dedicated support staff. Typical prices for commercial themes range from 10 to 500 dollars.

Downloading themes from unverified sources exposes your WordPress site to hidden malware, spam links, and broken code from lack of maintenance. Third-party sites outside the official directory may insert malicious code or spam links into footers to manipulate search engine rankings. Furthermore, free themes often lack ongoing updates, meaning new WordPress software releases occurring 2 to 3 times a year can break theme functionality.

Themes can be installed directly through the WordPress Dashboard theme installer by uploading compressed theme files in .zip format. This method simplifies installation because the system automatically unpacks and installs the theme into the correct directory.

• Download the theme file from the Themes page to your desktop.
• Log in to your WordPress Dashboard.
• Click the Themes link on the Appearance menu.
• Click the Add New button.
• Click the Upload Theme button.
• Upload the .zip file you downloaded in step 1.
• Click the Install Now button.

8. Advanced Customization and Maintenance

You can transform WordPress into a full content management system using child themes, custom post types, multisite networks, and rigorous backup routines.

Child themes provide a best-of-both-worlds solution by allowing site owners to safely customize styles, images, and templates without blocking parent theme updates. A child theme inherits all styling and functionality from its parent theme while overriding specific rules or template files through a designated Template header in its stylesheet.

• Connect to your hosting account via SFTP and create a new directory inside /wp-content/themes
• Create a style.css file containing theme headers and the Template header pointing to the parent directory
• Activate the new child theme on your WordPress site
• Enqueue the parent stylesheet in the child theme's functions.php file

Static pages can be customized with unique layouts and designs by creating and assigning specific PHP page templates. By duplicating and renaming an existing theme file like page.php and adding a template name tag at the top, you can upload the file to the theme folder and select it from the Page Attributes module in the Dashboard.

Lisa Sabin-Wilson uses different templates on her site WebDevStudios.com to give the home page and the team page distinct layouts and information.

Hosting Multiple Sites and Backing Up

The WordPress Multisite feature allows running multiple self-contained sites within a single WordPress installation sharing a codebase and users. Each site shares the same installation and core files but functions as a separate unit with its own database tables and back-end Dashboard access. WordPress.com is cited as the best example of a large blog network using the Multisite feature to host millions of blogs and users.

Before upgrading WordPress or moving a site, you should back up your MySQL database using phpMyAdmin within cPanel to safeguard your data against failures. Lisa Sabin-Wilson recommends accessing cPanel, opening phpMyAdmin, selecting the specific database, and using the Export tab with the zipped and save-as-file options to download a complete backup.

• Log in to the cPanel for your hosting account.
• Click the phpMyAdmin icon.
• Click the name of the database that you want to back up.
• Click the Export tab at the top of the screen.
• Select the Save As File check box.
• Select the “zipped” option.
• Click the Go button.
• Click the Save button to download the backup file and save it to your computer.

Conclusion

The foundational setup, publishing tools, and extension mechanisms fit together into a unified workflow that transforms raw code into a manageable digital home. You begin by securing the technical infrastructure and domain name, move through dashboard configuration, and build your content using posts, pages, and media attachments. Themes and plugins then layer design and custom functionality over this core architecture, turning a simple blog into a robust content management system. Regular maintenance and security routines protect this entire ecosystem against disruptions.

You can maintain a secure and successful WordPress site by following these practical rules:

1. Keep your core software, themes, and plugins updated immediately upon release to patch security vulnerabilities.
2. Back up your site files and database regularly, and store those backups on an external server.
3. Choose themes and plugins from reputable developers with active support histories to ensure compatibility.
4. Manage user roles strictly, assigning administrative privileges only to trusted individuals.
5. Moderate comments and implement spam filters to maintain a safe and engaging community space.

10 Key Ideas

1. You can choose between the hosted turnkey blogging solution of WordPress.com and the fully controllable, self-hosted WordPress.org software version.
2. Running the self-hosted WordPress.org software requires an up-to-date web server environment meeting minimum software standards, specifically PHP version 7.3 or later and MySQL version 5.6 or later.
3. Establishing a self-hosted WordPress site requires registering a domain, securing web hosting, configuring a MySQL database, and running the manual installation script.
4. Mastering the WordPress administration panel and configuration menus allows you to control foundational site parameters, user roles, and interaction rules.
5. Effective content management relies on structured categories, pretty permalinks, modular block editing, and robust comment moderation.
6. You can elevate your site design and user engagement by managing images, building photo galleries, embedding videos, and setting up audio casting.
7. Plugins extend your site functionality and themes control your appearance, requiring careful selection, safe installation, and regular updates.
8. You can transform WordPress into a full content management system using child themes, custom post types, multisite networks, and rigorous backup routines.
9. The WordPress Multisite feature allows running multiple self-contained sites within a single WordPress installation sharing a codebase and users.
10. You can maintain a secure and successful WordPress site by keeping software updated, backing up files regularly, choosing reputable developers, managing user roles strictly, and moderating comments.