parallels 黑屏
This article was sponsored by Parallels. Thank you for supporting the sponsors who make SitePoint possible!
本文由Parallels赞助。 感谢您支持使SitePoint成为可能的赞助商！
Web management tools aren’t new, they’ve been around for many years and they all support one-click installs for common web applications. However, for the most part all this does is install the application and then you’re on your own. You don’t have visibility to manage these applications once they’ve been installed.
Web管理工具并不是新工具，已经存在了很多年，并且都支持通用Web应用程序的一键安装。 但是，大多数情况下，要做的就是安装应用程序，然后您就可以自己完成了。 安装这些应用程序后，您将无权管理它们。
If you then throw in the fact that users love to install themes and plugins, the management becomes even more fun. The solution to this usually involves third-party services to centrally manage our WordPress sites. Wouldn’t it be nice if these management features were built into our hosting control panel? Well, with the latest version of Plesk, this is now possible.
如果您随后发现用户喜欢安装主题和插件这一事实，管理将变得更加有趣。 解决方案通常涉及第三方服务来集中管理我们的WordPress网站。 如果将这些管理功能内置到我们的主机控制面板中，那会不会很好？ 好吧，使用最新版本的Plesk，现在可以实现。
Parallels Plesk is one of the leading hosting control panel and automation platforms on the market. If you’ve used a few hosting providers, chances are you’ve used Plesk.
Parallels Plesk是市场上领先的主机控制面板和自动化平台之一。 如果您使用过一些托管服务提供商，那么您很有可能使用过Plesk。
In this article I’ll walk you through how to use Plesk 12 with a focus on the features that are most relevant to WordPress professionals, mainly the WordPress Toolkit. I will also touch on some of the other areas that those who manage multiple WordPress sites will be interested in.
在本文中，我将向您介绍如何使用Plesk 12，重点介绍与WordPress专业人员最相关的功能，主要是WordPress Toolkit。 我还将介绍管理多个WordPress网站的人员可能感兴趣的其他一些领域。
When I first logged in, it was immediately obvious that the latest version of Plesk is seriously catering to WordPress developers and administrators.
当我第一次登录时，立即显而易见的是，最新版本的Plesk非常适合WordPress开发人员和管理员。
While other web applications are supported, the WordPress-specific features are impressive. Plesk 12 has introduced what they call the ‘WordPress Toolkit‘ and it brings professional WordPress management features to a mainstream web hosting control panel. This includes the ability to detect manual installations, create new installations (with control over various configuration options), perform bulk updates, and manage plugins/themes.
虽然支持其他Web应用程序，但WordPress特定的功能令人印象深刻。 Plesk 12已推出了他们所谓的“ WordPress工具包 ”，并将专业的WordPress管理功能引入了主流的Web托管控制面板。 这包括检测手动安装，创建新安装(可以控制各种配置选项)，执行批量更新以及管理插件/主题的能力。
In addition to the WordPress management features, if you want to jump into a specific WordPress dashboard, there’s usually a direct link available in most places within in the Plesk interface. That said, you can easily perform routine tasks without leaving Plesk.
除了WordPress管理功能外，如果您想跳到特定的WordPress仪表板，通常在Plesk界面中的大多数位置都可以使用直接链接。 也就是说，您可以轻松执行例行任务，而无需离开Plesk。
Overview of features:
功能概述：
Security 安全 Update Management 更新管理 Plugin Management 插件管理 Theme Management 主题管理 ServerShield by CloudFlare ServerShield由CloudFlare ModSecurity ModSecurity Fail2ban Fail2ban Outbound Antispam 出站反垃圾邮件 Range of Editions 版本范围Installing WordPress is easy and using the WordPress Toolkit is even easier.
安装WordPress很容易，使用WordPress Toolkit甚至更容易。
To install WordPress, log into Plesk and go to the ‘Applications’ page. On this page you have two options for installing WordPress via the drop-down box in the top right. The first option is ‘Install’ and that will run a default WordPress install.
要安装WordPress，请登录Plesk并转到“应用程序”页面。 在此页面上，您可以通过右上角的下拉框选择两个选项来安装WordPress。 第一个选项是“安装”，它将运行默认的WordPress安装。
The second option is ‘Install (Custom)’. This option will provide you with more control over the common configuration options.
第二个选项是“安装(自定义)”。 此选项将为您提供对常见配置选项的更多控制。
With this option you will be able to select the installation path, update settings and admin access.
使用此选项，您将能够选择安装路径，更新设置和管理员访问权限。
Further down the screen, you’ll find your standard WordPress configuration options such as your site name, administrator email address, language, and database details.
在屏幕的更下方，您将找到标准的WordPress配置选项，例如站点名称，管理员电子邮件地址，语言和数据库详细信息。
When your installation is complete, you’ll see the message shown below:
安装完成后，您将看到以下消息：
Plesk 12 also includes best-of-breed security controls, with both WordPress-focused options and traditional web security tools.
Plesk 12还包括同类最佳的安全控件，同时具有针对WordPress的选项和传统的Web安全工具。
This feature will allow you to perform a security check to make sure WordPress has been configured correctly and general security measures are in place. Users would usually install plugins to achieve the same results, but now this is available natively within Plesk.
此功能将允许您执行安全检查，以确保WordPress已正确配置并且常规安全措施已到位。 用户通常会安装插件来获得相同的结果，但是现在Plesk内部可以使用此插件。
There are two ways to access this feature. The first appears when you login to Plesk. Under ‘Websites & Domains’ you’ll find a button labelled ‘Security Scan’ listed next to the WordPress installation name.
有两种访问此功能的方法。 当您登录到Plesk时，第一个出现。 在“网站和域”下，您会在WordPress安装名称旁边找到一个标记为“安全扫描”的按钮。
The second way to access this feature is by clicking on the WordPress installation name and selecting ‘Check Security’ under the ‘Tools’ menu on the right-hand sidebar.
访问此功能的第二种方法是单击WordPress安装名称，然后在右侧工具栏的“工具”菜单下选择“检查安全性”。
Selecting either ‘Security Scan’ or ‘Check Security’ will display the screen shown below. The first time you run this on a new site, you will see a few alerts letting you know that there are measures that can be taken to harden your installation. Make sure these options are selected and then click on ‘Secure’:
选择“安全扫描”或“检查安全性”将显示以下屏幕。 第一次在新站点上运行此命令时，您会看到一些警报，使您知道可以采取一些措施来加强安装。 确保选择了这些选项，然后单击“安全”：
Now, if you re-run this scan or check, it will look like this:
现在，如果您重新运行此扫描或检查，它将看起来像这样：
You will notice that some permissions give you the option to ‘Roll Back’, which I can see turning into a real time-saver when troubleshooting.
您会注意到，某些权限为您提供了“回滚”选项，在进行故障排除时，我可以看到它变成了实时节省时间。
By following these basic steps above, you have significantly hardened your WordPress site. Too often I see security plugins being promoted as the silver bullet when it comes to security, however, following the basic best practices covered in ‘Security Check’ will offer way more protection from both known and unknown threats. It also removes the need for yet another plugin.
通过执行上述基本步骤，您已经大大增强了WordPress网站的安全性。 我经常看到安全性插件被提拔为涉及安全性的灵丹妙药，但是，遵循“安全性检查”中涵盖的基本最佳实践将提供更多方式来防御已知和未知威胁。 它还消除了对另一个插件的需求。
The WordPress Toolkit also includes a ‘Scan’ feature that you can use to detect WordPress sites running version 3.4 and above. This allows you to attach an installation to your WordPress Toolkit sites.
WordPress工具包还包含“扫描”功能，可用于检测运行3.4及更高版本的WordPress网站。 这使您可以将安装附加到WordPress Toolkit网站。
It’s worth noting that Plesk only knows about installations created through the WordPress Toolkit using Plesk’s application installer (based on Application Packaging Standard technology) or those that have been detected during a scan. It’s recommended you periodically scan your client sites for WordPress installations so they can be managed within the WordPress Toolkit.
值得注意的是，Plesk只知道使用Plesk的应用程序安装程序(基于Application Packaging Standard技术)通过WordPress Toolkit创建的安装或在扫描过程中检测到的安装。 建议您定期扫描客户端站点上的WordPress安装，以便可以在WordPress Toolkit中对其进行管理。
We should all know not to use the default ‘admin’ as the administrator account, however, if we’re inheriting someone else’s sites there may be an occasion when you’re dealing with the dreaded ‘admin’ username. Or you might just want to change the administrator username.
我们都应该知道不要使用默认的“ admin”作为管理员帐户，但是，如果我们要继承其他人的网站，则可能会遇到您使用可怕的“ admin”用户名的情况。 或者，您可能只想更改管理员用户名。
There are a lot of ways to change your administrator username, most users will use a plugin to do this or create a new user to be the administrator and then delete the old ‘admin’ account.
更改管理员用户名的方法有很多，大多数用户将使用插件来执行此操作，或者创建一个新用户作为管理员，然后删除旧的“ admin”帐户。
With the WordPress Toolkit, this is easily managed, simply click on ‘Manage’ as shown below:
使用WordPress工具包，可以轻松进行管理，只需单击“管理”，如下所示：
This will take you to a page where you can then specify your new administrator username.
这将带您到一个页面，您可以在其中指定新的管理员用户名。
Security is a central theme to much of the Plesk platform. With Version 12, there are several powerful tools that have been bundled into ‘Security Core’. Here’s a few of the available tools for those who want to take extra steps to harden their sites (which should be everyone!):
安全是许多Plesk平台的中心主题。 在第12版中，“安全核心”中捆绑了一些强大的工具。 对于那些想采取额外步骤来加强其网站(应该是所有人！)的人，以下是一些可用的工具：
ModSecurity ModSecurity Fail2Ban 失败2禁 Outbound Antispam 出站反垃圾邮件 ServerShield by CloudFlare ServerShield由CloudFlareWe will cover these tools in more detail below.
我们将在下面更详细地介绍这些工具。
Keeping any web application updated is critical. With WordPress running on 47.38% of identifiable CMSs on the Internet, it’s a popular target for attackers. A key component of WordPress Toolkit is the ability to manage all of your WordPress core updates in one place.
保持任何Web应用程序更新至关重要。 WordPress在Internet上47.38％的可识别CMS上运行 ，这已成为攻击者的热门目标。 WordPress Toolkit的一个关键组件是能够在一处管理所有WordPress核心更新的功能。
Under the ‘Websites & Domains’ tab select ‘WordPress’ on the right-hand sidebar. This will then display a list of all your WordPress sites. To run either a single or bulk update, select the sites you wish to update and click on the ‘Update ‘ button, it couldn’t get any easier. During my testing, updating WordPress worked flawlessly.
在“网站和域名”标签下，在右侧栏中选择“ WordPress”。 然后将显示所有WordPress网站的列表。 要运行单个更新或批量更新，请选择要更新的站点，然后单击“更新”按钮，此操作再简单不过了。 在我的测试过程中，更新WordPress完美无缺。
Once the updates have been installed and the process is complete, you’ll get an alert in the bottom right corner of your screen.
安装更新并完成此过程后，您将在屏幕的右下角收到警报。
When the WordPress team announced the move to automatic updates, most of us loved the idea. While I don’t personally ever recommend turning off automatic updates, I can understand why some people like to control updates themselves. Also, core updates such as 4.0 still require manual updating, so performing manual updates is something we all have to do.
当WordPress团队宣布转向自动更新时，我们大多数人都喜欢这个想法。 尽管我个人不建议关闭自动更新，但我可以理解为什么有些人喜欢自己控制更新。 另外，诸如4.0之类的核心更新仍需要手动更新，因此执行手动更新是我们所有人都必须做的事情。
Even though there are a few ways to manage updating, such as editing your wp-config.php, or installing a plugin such as WP Updates Settings, once you have more than a few sites, you really need centralized management to make things easier for you.
即使有几种管理更新的方法，例如编辑wp-config.php或安装诸如WP Updates Settings之类的插件，一旦您拥有多个站点，您确实需要集中管理以使事情变得更容易您。
To turn on (or off) Automatic Updates, just toggle on the ‘Automatic Updates’ switch on your WordPress installation.
要打开(或关闭)自动更新，只需在WordPress安装上打开“自动更新”开关即可。
I’m a fan of updating early and often, but if you have clients who prefer to take their time, you can at the very least easily check what versions they are running on your systems at a glance.
我非常喜欢早期更新，但经常更新，但是如果您有喜欢花费时间的客户，则可以一目了然地至少轻松地检查他们在系统上运行的版本。
Once you have updates under control, plugins are probably one of the greatest areas of concern when supporting lots of WordPress sites.
一旦您控制了更新，当支持许多WordPress网站时，插件可能是最大的关注领域之一。
Issues such as performance, compatibility, and security are often linked to the choice of plugins. The WordPress Toolkit in Plesk 12 comes with a section to manage plugins. You can access this area under the ‘Websites & Domains’ tab, then select ‘WordPress’ on the right-hand sidebar followed by the ‘Plugins’ tab which will show a global list of plugins that are installed. Here’s what it looks like:
性能，兼容性和安全性等问题通常与插件的选择有关。 Plesk 12中的WordPress Toolkit带有一个用于管理插件的部分。 您可以在“网站和域名”标签下访问此区域，然后在右侧边栏中选择“ WordPress”，然后选择“插件”标签，这将显示已安装的插件的全局列表。 看起来是这样的：
Within the Plugin section, you can perform a number of actions:
在“插件”部分中，您可以执行许多操作：
Activate/Deactivate 激活/停用 Install 安装 Delete 删除 Update 更新资料 Search 搜索The ability to search all plugins across your systems is useful if you’ve discovered an incompatibility or a security issue.
如果发现不兼容或安全问题，则可以在整个系统中搜索所有插件。
If you want to manage plugins for a particular installation, under the ‘WordPress Installations’ tab select the site and then select ‘Plugins’ in the toolbar:
如果要管理特定安装的插件，请在“ WordPress安装”选项卡下选择站点，然后在工具栏中选择“插件”：
Poorly developed or configured plugins are often a cause of performance issues. With the plugin view you can disable a plugin with one click or install a better alternative.
开发或配置不当的插件通常是导致性能问题的原因。 使用插件视图，您可以一键禁用插件或安装更好的替代方案。
Another powerful feature is the ability to bulk install plugins. To manage plugins on a single site, click on the site within the ‘Websites & Domains’ tab and then select ‘Manage Plugins’ next to the site you wish to manage. You can then select the plugins that you want active or inactive.
另一个强大的功能是能够批量安装插件。 要在单个站点上管理插件，请在“网站和域”标签内单击该站点，然后选择要管理的站点旁边的“管理插件”。 然后，您可以选择要激活或不激活的插件。
If you want to manage plugins across multiple sites go to ‘WordPress’ in the right hand sidebar to view the ‘WordPress Installations’ page. Then select the sites you wish to bulk install plugins on, then select ‘Plugin’ in the toolbar.
如果要管理跨多个站点的插件，请转到右侧栏中的“ WordPress”以查看“ WordPress安装”页面。 然后选择您要批量安装插件的站点，然后在工具栏中选择“插件”。
As shown above, you might want to install a troubleshooting plugin such as P3 (Plugin Performance Profiler) on all of your sites to help your clients identify common performance problems. You’ll notice that ‘Activate after installation’ is checked, this is optional.
如上所示，您可能希望在所有站点上安装故障排除插件，例如P3(插件性能分析器) ，以帮助您的客户确定常见的性能问题。 您会注意到选中了“安装后激活”，这是可选的。
Similar to the plugin management feature, you can see a list of all installed and active themes in the ‘Websites & Domains’ tab either by clicking on ‘WordPress’ on the right-hand sidebar and selecting the WordPress site:
与插件管理功能类似，通过单击右侧工具栏上的“ WordPress”并选择WordPress网站，您可以在“网站和域”标签中看到所有已安装主题和活动主题的列表：
Or by clicking on the ‘Themes’ tab:
或通过点击“主题”标签：
I know many WordPress developers like to remove the default themes, but I like to leave the default themes for troubleshooting and isolating theme and theme/plugin compatibility issues. This is especially important when you have clients who like ‘experimenting’.
我知道许多WordPress开发人员都喜欢删除默认主题，但是我想保留默认主题以进行故障排除和隔离主题以及主题/插件兼容性问题。 当您有喜欢“实验”的客户时，这一点尤其重要。
As with the Plugin management section above, the ability to install, activate, and deactivate themes from within Plesk is a huge time-saver.
与上面的插件管理部分一样，从Plesk中安装，激活和停用主题的功能可以节省大量时间。
ServerShield is the result of a partnership with Parallels and CloudFlare and is a new key feature of Plesk 12.
ServerShield是与Parallels和CloudFlare合作的结果，并且是Plesk 12的新关键功能。
People usually associate CloudFlare as ‘just a CDN’ and there’s no doubt it is definitely a world-class CDN, however there’s much more to CloudFlare than that. They also offer a range of security-related features that can further lock down your site.
人们通常将CloudFlare关联为“只是CDN”，毫无疑问，它肯定是世界一流的CDN，但是CloudFlare的意义远不止于此。 他们还提供了一系列与安全性相关的功能，可以进一步锁定您的站点。
To enable ServerShield, select the link in the sidebar as shown below:
要启用ServerShield，请在侧栏中选择链接，如下所示：
ServerShield offers easy CloudFlare and StopTheHacker integration for your client sites directly within your Plesk interface, enabling both services couldn’t be any easier.
ServerShield直接在您的Plesk界面内为您的客户端站点提供了轻松的CloudFlare和StopTheHacker集成，这使这两项服务变得非常简单。
ServerShield has two main components:
ServerShield具有两个主要组件：
CloudFlare CloudFlare StopTheHacker 停止黑客CloudFlare’s security platform is comprehensive and beyond the scope of this article, but here are a few of the threats CloudFlare helps protect you from:
CloudFlare的安全平台是全面的，不在本文讨论范围之内，但是以下是CloudFlare可以帮助您防止以下威胁的一些威胁：
Comment Spam 垃圾评论 SQL Injection SQL注入 XSS XSS Malicious and Harvesting Bots 恶意和收获机器人StopTheHacker offers daily monitoring of the reputation of your site on malware and phishing blacklists such as Google’s Safe Browsing list. It also offers suggestions on how you fix this if you ever find yourself on the list. Enabling StopTheHacker monitoring for yours or your clients sites is one click away in Core Security, as seen in the screenshot below:
StopTheHacker每天监控您的网站在恶意软件和网络钓鱼黑名单(例如Google的安全浏览列表)中的信誉。 如果您发现自己在列表中，还将提供有关如何解决此问题的建议。 只需单击一下即可在Core Security中启用对您或您的客户站点的StopTheHacker监视，如以下屏幕快照所示：
ModSecurity is a powerful web application firewall and included in all editions of Plesk 12.
ModSecurity是功能强大的Web应用程序防火墙，并包含在所有版本的Plesk 12中。
Plesk gives you an easy interface to manage ModSecurity’s behaviour. All editions of Plesk 12 include premium ModSecurity rules from AtomiCorp. This means they’ll be updated regularly by a reputable ModSecurity rules provider to protect you from a variety of the latest threats.
Plesk提供了一个简单的界面来管理ModSecurity的行为。 Plesk 12的所有版本均包含AtomiCorp的高级ModSecurity规则。 这意味着知名的ModSecurity规则提供商将定期对其进行更新，以保护您免受各种最新威胁的侵害。
As well as AtomiCorp, Plesk’s ModSecurity also ships with the OWASP Core Rule Set (CRS) and the Comodo ModSecurity Rule Set. The OWASP rules are known to be quite restrictive and may cause issues for WordPress, so Parallels recommend using the rules from Atomic or Comodo in this case.
除AtomiCorp之外，Plesk的ModSecurity还随附OWASP核心规则集(CRS)和Comodo ModSecurity规则集。 已知OWASP规则非常严格，可能会给WordPress带来问题，因此Parallels建议在这种情况下使用Atomic或Comodo的规则。
There are also a few nice touches to the ModSecurity interface, like the ability to switch off rules by the ID, CVE, or regular expression. This is very useful if you’re trying to isolate a problem, as some ModSecurity rules can cause false positives.
ModSecurity界面也有一些不错的功能，例如可以通过ID，CVE或正则表达式关闭规则。 如果您试图找出问题，这将非常有用，因为某些ModSecurity规则可能会导致误报。
If you’re looking at hardening your site, ModSecurity is something you’ll want to make sure you’re using (and leaving turned on) so it’s worth spending some time to get to know it.
如果您正在考虑加强站点，ModSecurity是您想要确保自己正在使用(并保持打开状态)的东西，因此值得花一些时间来了解它。
Fail2Ban is a popular application that looks for any suspicious activity in your log files for various services and blocks (or ‘jails’) the IP addresses associated with that activity. This is useful for automatically blocking brute force attacks originating from an IP address or network. The Fail2Ban application can also automate changing firewall rules and send email alerts.
Fail2Ban是一个流行的应用程序，它在日志文件中查找各种服务的可疑活动，并阻止(或“监禁”)与该活动关联的IP地址。 这对于自动阻止源自IP地址或网络的暴力攻击很有用。 Fail2Ban应用程序还可以自动更改防火墙规则并发送电子邮件警报。
To configure Fail2Ban, go to ‘Tools & Settings > IP Address Banning (Fail2Ban) (in the Security group)’ and select the ‘Enable intrusion detection checkbox’. You can then configure the ban time length, interval between attacks as well as the number of failures before an IP address is banned.
要配置Fail2Ban，请转到“工具和设置> IP地址禁止(Fail2Ban)(在Security组中)”，然后选择“启用入侵检测复选框”。 然后，您可以配置禁止时间长度，两次攻击之间的间隔以及被禁止IP地址之前的失败次数。
You can also whitelist trusted IP addresses by going to ‘Tools & Settings > IP Address Banning (Fail2Ban) > Trusted IP Addresses > Add Trusted IP’. This is useful so you don’t accidentally end up blocked, or if you want to perform your own security checks on your systems.
您还可以通过转到“工具和设置> IP地址禁止(Fail2Ban)>受信任IP地址>添加受信任IP”将受信任IP地址列入白名单。 这很有用，这样您就不会意外地被阻止，或者如果您想在系统上执行自己的安全检查。
The problem of blacklisted IP addresses is something that has plagued even some of the biggest players and is a serious problem when you’re running lots of sites on a single or small range of IP addresses. With Outbound Antispam, you can protect your IP reputation by limiting your outgoing mail. This is an important feature that protects your users from getting their IP address blacklisted.
将IP地址列入黑名单的问题甚至困扰着一些最大的参与者，当您在单个或较小范围的IP地址上运行大量站点时，这是一个严重的问题。 使用出站反垃圾邮件，您可以通过限制出站邮件来保护IP信誉。 这是一项重要功能，可防止您的用户将其IP地址列入黑名单。
Plesk comes in four flavors, catering for those hosting a few sites all the way up to professional hosting providers. The editions available are:
Plesk有四种样式，可满足那些托管一些站点的人员，直至专业托管提供商的需求。 可用的版本有：
Web ADMIN Edition Web ADMIN版 Web APP Edition Web APP版 Web PRO Edition Web专业版 Web HOST Edition Web主机版All of the editions of Plesk 12 includes the WordPress Toolkit. It comes standard in the Web PRO and Web HOST editions and as an optional extra with Web ADMIN and Web APP edition.
Plesk 12的所有版本均包含WordPress Toolkit。 它在Web PRO和Web HOST版本中是标准配置，在Web ADMIN和Web APP版本中是可选配置。
Parallels has put together a handy comparison chart of the various Plesk editions to help you select the right version.
Parallels汇总了各个Plesk版本的便捷比较表，以帮助您选择合适的版本。
With WordPress continuing to grow in popularity and with the volume of sites we deploy continuing to grow, any features that help us automate and streamline the management of all our sites is critical.
随着WordPress的持续流行以及我们部署的网站数量的持续增长，任何有助于我们自动化和简化所有网站管理的功能都是至关重要的。
There’s a lot more to Plesk than what I’ve highlighted in this article, I’ve only covered the WordPress specific goodies. Plesk 12 is taking the lead by including professional WordPress management features, they’re the best I’ve seen in any hosting control panel.
除了我在本文中强调的内容外，Plesk还有很多其他功能，我只介绍了WordPress特定的功能。 Plesk 12通过包含专业的WordPress管理功能而处于领先地位，这是我在任何托管控制面板中所见过的最好的功能。
Check out the Plesk 12 demo for yourself here. Or if you’re already using it, I’d love to hear your thoughts in the comments below.
在这里自己检查Plesk 12演示 。 或者，如果您已经在使用它，则希望在下面的评论中听到您的想法。
翻译自: https://www.sitepoint.com/plesk-12-wordpress-toolkit/
parallels 黑屏
相关资源：jdk-8u281-windows-x64.exe