If you’re new to blogging or are contemplating changing the design of your site, this information might pertain to you…
I was visiting the Problogger forum the other day and came across a new blogger who had a question about how they should set up their website.
The scenario: Bill is starting a website which will consist of two parts:
- A main site area where he will advertise his products and services
- A blog… which he’ll use to generate traffic and brand awareness
Bill’s dilemma: Should he create his site as part static (html only) for his products and services and part WordPress for his blog – or – simply create the entire site as a WordPress site and simply place his blog in the /blog path?
Bill’s question sparked a number of replies, some for an all WordPress site and some for splitting it up as part static and part WordPress. Here’s my take…
If html and a little css doesn’t scare you, you might want to consider splitting things up; however, if you have no idea how to code in html and at the very least, toy with css, a full WordPress site might be the better option.
Personally, I like splitting up the two. I can sum it all up in two words: Upgrades and Security.
Consideration #1: Upgrades
Ask anyone who is a WordPress blogger about “upgrades” and you’ll hear it… upgrades are a pain in the butt. It seems every month there is a new release of WordPress and you are advised to upgrade immediately. The problem here is that many times after we upgrade WordPress, weird things can happen:
- Database errors
- Theme not displaying right
- Some plugins might no longer be compatible with your new version of WordPress
The list goes on and on and because of this, we are told to make sure and fully backup our sites before we attempt upgrades.
Now imaging for a moment if your entire site was made up by a WordPress installation and after you hit that “upgrade” button your ducks are no longer all lined up… that means “Database Error” to you and me.
Crap, now what? Your site is disabled and everyone who comes to your site to purchase your “super mommy night time slippers” get to see a big fat “Database Error” instead of your product. On the other hand, if your site was split up between a static site and WordPress blog, only your blog would be disabled and your visitors could still visit your site and make a purchase.
Consideration #2: Security Issues
WordPress sites are a little less secure because they require a database to run and also require PHP code to execute processes. Static sites, on the other hand, are a little more secure because there’s not much to exploit (i.e. crack into).
For the most part, to hack a static site a malicious hacker would need to obtain some information from you, such as your FTP login information. Another way might include them breaking into your web hosting server or possibly even breaking into someone else’s website which is hosted on the same server as yours.
However, for the most part WordPress is pretty well secure as long as you keep up with the upgrades. To that end, if you’re not comfortable with html and css, a full WordPress site might be the way to go because you can update your site very easily without the need to hire a professional.
The choice is yours and not one I can make for you. All I can do is give advice and help you to make an informed decision.
So what do you think? Do you have an all WordPress site but wish it were split up? What’s your opinion here?
















January 11th, 2010 at 9:11 am
Hey John,
I have been working a lot lately with the WordPress codex and really like the idea of keeping everything inside WordPress, if possible. Just for ease of use, but you are right about splitting it up. It can be better.
At the same time I am trying not to use any plugins, which would differ from most.
Here is something I just noticed too; in order to be listed in Google News you need to have at least 3 numbers in your address bar. So I think the best permalink structure for news site would be using the year/month postname.. and for the categories, add news in the front..
Jim Gaudet´s last blog ..Giving Power back to Link Pages
January 11th, 2010 at 10:03 am
Hi Jim. Yeah I’ve heard about the numbers thing in your URL for Google news, too. I don’t really consider my blog as a news site so it’s not that important to me. I like simple and clean… but that’s just me.
That’s awesome that you aren’t using any plugins. What about Akismet? Not activated? It is possible to limit spam even without plugins.
About splitting things up…
I really should have put 3 reasons why I like splitting things up:
1. Upgrades
2. Security
3. Speed
HTML sites typically load faster than PHP (WordPress) sites. And as everyone might of heard, Google is going to take into account how fast your site loads.
But keeping everything under one roof might be a little more convenient for some.
January 11th, 2010 at 10:23 am
I am not even sure why I mentioned that, it just happened to be on my mind.
Spam, that’s a small problem for me at the moment. I haven’t figured that into my plan yet, but I will. I just manage it now and it is only about 10 a day.
I have been using the Page Speed plugin for Firefox from Google to test my site. Right now it is looking pretty good, but working on maximizing the entire sites code.
I don’t really care about making money on my site yet, and so I have removed analytics plugins as well, including Google. But, I can use hosting statistics, so that helps if I need it.
Jim Gaudet´s last blog ..Minify your CSS and Speed Up WordPress
January 11th, 2010 at 10:52 am
You should just hardcode in some of those functions into your theme.
Here’s the video I made on how to install Google Analytics without a Plugin.
Also, you can do the same with FeedBurner.
I once stumbled on a blog which showed a number of how-to’s to hardcode many of the different plugin functions out there into WordPress. Can’t find the site, though.
January 11th, 2010 at 1:06 pm
Hi John
Guess it’s too late to buy the “super mommy night time slippers” for Christmas so I read the rest of your article.
Looks like you’ve covered the main issues with an all WordPress site i.e. constant upgrades of WordPress (and Plugins!) plus security. But for me,perhaps the most disappointing aspect of WordPress is page load times.
Some of the websites that I’ve put together with html / CSS and nothing else, not even Javascript, are super fast.
The SEO gurus emphasised clean code without all the thrills.
Trouble is, WordPress adds such great “functionality” and with great free or cheap themes out there, who can afford to spend hours/ days on the graphics and solving CSS float problems for IE 6?
I’m still setting up a few small static sites now and again, but I’ve definately been converted to WordPress.
Keith Davis´s last blog ..Ooh la la…
January 11th, 2010 at 1:14 pm
Hi Keith. I agree completely with you on the speed thing (see my previous comment).
You’re right though, who has the time to toy with all the html and css stuff? I sure don’t (have time to learn a bunch of new stuff). In that case, it might be the better option to hire someone to do it should you go the split static and WordPress option.
January 11th, 2010 at 1:22 pm
Most of my clients split it up. I agree that it’s probably best.
vered | blogger for hire´s last blog ..Fat People Not Welcome
January 12th, 2010 at 7:45 am
Yeah I am going to hard code any plugins that I use and write a post about it! But, for the moment I am enjoying the speed from not having anything, including Java!
Jim Gaudet´s last blog ..Minify your CSS and Speed Up WordPress
February 3rd, 2010 at 9:10 pm
I think having a good host platform for wordpress is security proof. I have recently integrated my wordpress account to my host server with complete security options so they take care of the rest.
Rian´s last blog ..There is no Facebook Theme and Facebook Layout Available
February 4th, 2010 at 9:44 am
Hi Rian, nothing is 100% security proof. In fact, typically your host only provides security to the web server your site is hosted on, not necessarily alterations to your WordPress installation so that it has added security… but then again, I can’t speak for every host.
For example, one way people hack into WordPress is through SQL injection and they guess that your database prefix starts with wp_, because that’s what most WP installs are. But unless your web host went in and changed that for you, that security issue is there.
John Hoff´s last blog ..The Super Beginners for Dummies Tutorial on RSS Feeds
February 5th, 2010 at 2:51 pm
Hi John
You mention “database prefix starts with wp_”… did I see one of your videos showing how to change the database prefix?
Or is it all in my imagination?
Keith Davis´s last blog ..Practice, practice, practice…
February 6th, 2010 at 4:35 pm
Keith, stay tuned. I’ve got something coming soon which you might be interested in. It’s not your imagination.
February 7th, 2010 at 2:56 am
“Something coming soon” hmmmmmm I’m intrigued.
One question John… will it cost me money LOL.
Another question, off topic if I may?
I’ve been thinking about installing CommentLuv but have been put off by someone saying that it was difficult to customise.
Obviously you would recommend using CommentLuv but is it difficult to customise and does it slow things down at all?
Keith Davis´s last blog ..Practice, practice, practice…
February 7th, 2010 at 7:35 am
Forget my last comment John, I’ve just installed CommentLuv plugin… nice and easy to install.
Might even entice you to leave a comment!
Keith Davis´s last blog ..Practice, practice, practice…
February 7th, 2010 at 9:58 am
I know, Keith. I keep meaning to head over there and comment. I’ve been really bad about leaving comments these days. I do read a lot of blogs but then I head away and maybe tweet about it or something. Watch out, though, I’ll be coming.
Congrats on getting the plugin all set up.
February 7th, 2010 at 10:07 am
No problem John
Any time in the next ten minutes will be fine LOL
Keith Davis´s last blog ..Practice, practice, practice…