Gonna party like it's 1989 !

Sticking with my stolen song title methodology.. lame, I know.

Anyways, I thought I'd touch on one of the little nuances of web development that can have a pretty large impact on a website's usability. Link colors and decoration.

Webmasters have always had control over the color of their textual links, via the BODY tag, Then along came CSS and it became the new rage to make textual links look "cool". Of course "coolness" is in the eye of the beholder, and unfortunately many webmasters wound up making their textual links look nearly identical to their regular text, in turn making it difficult for people to spot links that they might be interested in.

Even worse, often there was no way to tell which links the viewer had already visited, causing some visitors to unintentionally view the same page twice, discovering it isn't what they wanted (again), getting frustrated and going elsewhere.

Usability is just as crucial as the content. After all what use is great content if it isn't accessible, sort of like a museum full of masterpieces, except its never open.

Along with slow page loads, a poorly though out navigation scheme, which includes link color and decoration, is one of the reasons people will abandon your site and go elsewhere.

When HTML first evolved into common use, the web browsers of the day came up with a common scheme, and surprisingly all the companies making browsers agreed, and displayed them the same way. Something almost unheard of today.. but I digress.

• There is a reason the default link color is blue and underlined.
• There is a reason the default visited link color is purple.
• There is/was a reason the default active link color is red.

Even the behemoth Google sticks to this standard. Actually they enforce it via CSS, just in case you've twiddled with the browser default's.

Granted, active link color isn't really an issue today. Hopefully the viewer's computer, and the web server you use results in a nearly instantaneous reaction, but back in the day, it was necessary to tell the viewer "we're working on it, keep your shirt on, and don't click the link again !". If your site has an international audience, it's probably still a good idea to make active links stand out, since there is a chance people will repeatedly click a link, which just bogs down your server, and probably frustrates all your viewers.

Of course you needn't use these exact colors, but do make certain your textual links don't blend in too well with your regular text. Also be sure to differentiate between links to pages that the viewer has already seen. I'm also a staunch supporter of leaving links underlined, but that is likely just personal preference.

Until next time HAPPY WEBMASTERING!

It's a wild world (wide web)

Maybe showing my age here, by using a bit of Cat Steven's lyrics, but it's true, the world wide web is a wild and dangerous place. Just as a "user" you are subjected to emails, the least harmful of which want you to buy viagra, others try to trick you into divulging sensitive information, or worse, infect your
computer with a trojan virus to later do the villains dirty work.

If you are reading this, you are a user and have no doubt encountered some or all of these types of dangers.

It's even worse if you run a website because not only is your own computer a potential victim, but now your web server will be preyed upon, continually poked and prodded in an effort to find a weak link in your security chain.

Over the past 2 years I've cleaned up about 20 infected web servers. In almost every case I find the weak link that allowed the server to be compromised in the first place. All too often, the weak link was the site owner, who for whatever reason didn't take their web server's "security" seriously.

So why, oh why does one go to all the trouble to create a spiffy website only to leave it unprotected ?

In my experience, the website owners consider themselves "little fish" and assume that an actual hacker won't target them, the classic "what could they possibly want with my little corner of the internet?"

What they are after differs, but it all starts the same way, by compromising your web server. then they may simply use it to attempt to hack bigger fish, except now those attacks come from your web server.

Maybe they are after the email addresses in your site's database, or if you run an e-commerce site, they may be looking for retrievable credit card info. Basically, what they are after is irrelevant. If they get in, they'll find some way of leveraging that access to their advantage and likely to your demise.

If you are a website owner, there are of course concerns about the code that makes your website go. Is it subceptable to SQL injection or XSS attacks, but.. again, and granted only in my experience.. the weakest link is you.

Do you use FTP ?
FTP is just plain bad in many respects, most notably due to the fact that user names
and passwords are sent unencrypted. Their are trojan viruses that look for the tell tale signs of an FTP login and convey that info to the bad guys, since it's not encrypted, they can be in your web server running amok within seconds after you log in.

Look into disabling FTP and enabling SSH. With SSH enabled you can use the SCP protocol to upload files. Since SCP rides on an SSH connection, everything is encrypted. I use a program called WinSCP, which is very intuitive if you've used an FTP program before. It also has some pretty nifty features I've never seen in an FTP program.

Is your password good ?
This likely seems obvious, but I'm continually amazed at how many web site owners have their passwords set to something that a brute force attack would easily plow through. Be sure to use a mixture of upper & lowercase letters and numbers.

mysite BAD
MySite Better
MyS1t3 PDG (pretty damn good)

Do you use a commonly exploited email program ? (Outlook anyone)
I try to keep my Micro$oft bashing under wraps, but in this case, for your safety.. if you must use Outlook (or Outlook Express) be aware that it is the primary program used to convey viruses to your computer. Even with up to date anti-virus software running you are still vulnerable. Consider using a web based
email client which can greatly reduce the likely hood of a virus reaching your own computer.

Do you use up to date anti-virus software ? .. is it reputable, effective ?
If I had a nickel for every time I heard, "I can't be infected, I'm running XYZ anti virus!" where XYZ is either reputable, but known to be easily circumvented (sorry Norton) or some fly by night coder in a basement somewhere that has no intentions of updating viruses definitions.

One word.. AVAST
Reputable, effective, and free, although it is certainly worth the nominal price they ask for their commercial version.

So there you have it. The weakest link in your web server's security chain is likely you, and the computer you are using right now.