<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Thom Craver</title>
	<atom:link href="http://thom.cravers.us/feed/" rel="self" type="application/rss+xml" />
	<link>http://thom.cravers.us</link>
	<description>SEO Expert and Digital Analytics Strategist</description>
	<lastBuildDate>Fri, 30 Jun 2017 15:16:17 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=4.8</generator>
	<item>
		<title>Hello world!</title>
		<link>http://thom.cravers.us/2017/06/30/hello-world/</link>
		<comments>http://thom.cravers.us/2017/06/30/hello-world/#comments</comments>
		<pubDate>Fri, 30 Jun 2017 15:16:17 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://thom.cravers.us/?p=1</guid>
		<description><![CDATA[Welcome to WordPress. This is your first post. Edit or delete it, then start writing!]]></description>
				<content:encoded><![CDATA[<p>Welcome to WordPress. This is your first post. Edit or delete it, then start writing!</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2017/06/30/hello-world/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Be Kind to Your Users: Calendar Event Edition</title>
		<link>http://thom.cravers.us/2016/10/10/kind-users-calendar-event-edition/</link>
		<comments>http://thom.cravers.us/2016/10/10/kind-users-calendar-event-edition/#respond</comments>
		<pubDate>Mon, 10 Oct 2016 15:33:20 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Growth Hacking]]></category>
		<category><![CDATA[Internet Marketing]]></category>

		<guid isPermaLink="false">https://thomcraver.com/?p=7293</guid>
		<description><![CDATA[Shareable Calendar Event Should Not Frustrate your Attendees Is it as frustrating for you as it is for me? You&#8217;ve registered for an event and they send you that confirmation email. You&#8217;re all excited and want to immediately get it into your calendar. One of several things happen here: The event planner did not include [&#8230;]]]></description>
				<content:encoded><![CDATA[<h2>Shareable Calendar Event Should Not Frustrate your Attendees</h2>
<p>Is it as frustrating for you as it is for me? You&#8217;ve registered for an event and they send you that confirmation email. You&#8217;re all excited and want to immediately get it into your calendar. One of several things happen here:</p>
<ol>
<li>The event planner did not include a calendar attachment and you need to add all kinds of details (like an address in another city you&#8217;ve never been to before) manually.</li>
<li>The event planner included a downloadable attachment, but it&#8217;s in a format for a calendar you don&#8217;t use.</li>
<li>You use Gmail and it tries to auto-add to your calendar by clicking the link to the date, but you still have several fields to remember to type in with a poor interface. (see point #1).</li>
</ol>
<p><img class="alignnone size-full wp-image-7296" src="https://thomcraver.com/wp-content/uploads/2016/10/post_gmail_calendar_Add.png" alt="Adding Calendar Events from Gmail" width="456" height="281" /></p>
<p>That last option is fine for a quick one-subject-line event. But not so much for others, that require an online meeting link or address details and directions.</p>
<p>Recently I received this email, confirming my attendance at a multi-day event. There was an <strong>Add to Calendar</strong> link included in the email. However, when clicking it, it simply gave me a downloadable ICS file.</p>
<p><img class="alignnone wp-image-7297" src="https://thomcraver.com/wp-content/uploads/2016/10/post_registration_email.png" alt="registration email with add to calendar" width="650" height="432" /></p>
<p><img class="alignright size-full wp-image-7295" src="https://thomcraver.com/wp-content/uploads/2016/10/post_download_icon.png" alt="ics file downloaded" width="232" height="49" />Clicking the Add to Calendar link simply downloaded the file. I use Google Apps for email and calendaring. If I used iCal or the desktop version of Outlook, this would have been relatively simple and easy. But I don&#8217;t. I feel fortunate I was received this on my laptop instead of my phone. After downloading, I&#8217;m stuck with this file icon that will open with the Windows Calendar app (does ANYONE use that?) or Outlook, a program I haven&#8217;t used in decades.</p>
<p>Sure, Google Calendar includes an <a href="https://support.google.com/calendar/answer/37118?hl=en">import option</a>. But it&#8217;s bulky and truly involves a desktop-only experience.</p>
<p><img class="alignnone size-full wp-image-7299" src="https://thomcraver.com/wp-content/uploads/2016/10/post_google_cal_import.gif" alt="Google Calendar Import" width="474" height="217" /></p>
<p>If I don&#8217;t have a tab for Google Calendar open already, I need to do so. Then add &#8220;other calendars&#8221; and go through a few prompts in a dialog box. No, this is not a big deal. But in a world where our time is more and more precious and where we&#8217;re trying to provide a better experience for our customers, this is not the way to go.</p>
<p><em>(On a completely different note, Google Calendar people &#8211; you&#8217;re product is aging. It needs some updates to account for this &#8211; and other options in the settings!)</em></p>
<h2>There IS A Better Way!</h2>
<p>We talk about content marketing a lot. We want to make our content more interesting and easy for our customers and would-be customers to consume. The principles of growth hacking suggest to make signups and customer on-boarding activities easy and convenient by incorporating technology. Not everyone uses iCal. Just like you design your websites or marketing emails for different screens, you should be including calendaring links for multiple platforms. It&#8217;s really not that hard.</p>
<p>Here&#8217;s a confirmation email I received today.</p>
<p><img class="alignnone wp-image-7298" src="https://thomcraver.com/wp-content/uploads/2016/10/post_reg_all_formats.png" alt="Calendar Links in ALL Formats" width="650" height="306" /></p>
<p>Look, ma! Multiple calendar links!</p>
<p>While, points should be deducted for the typo in creating the TM HTML entity, the Google Calendar link was there. So was Outlook. iCal format is universal. Be nice to your customers and give them what they want. The devs at GoToWebinar do it right, making it convenient for non-iCal users to add items to their calendar.</p>
<h2>But My Developers Always Say No!</h2>
<p>Then you need new developers or a new corporate culture.</p>
<p>No marketing team should be held captive by their developers. Having previously been a developer and also having led other developer teams for years, there&#8217;s no reason to say no and leave it at that. Perhaps there&#8217;s a technical reason why something can&#8217;t be done, but alternative methods should be considered and will likely work.</p>
<p>Time? Time shouldn&#8217;t be an issue. The iCalendar file format is a simple text file that can be generated with simple scripting, since most of your event information should already be in a database somewhere. There&#8217;s all kinds of ways to convert that to other formats. With APIs and other tools at a developer&#8217;s disposal. There&#8217;s simply no excuse anymore.</p>
<h2>Leverage Existing Code</h2>
<p>There&#8217;s plenty of code out there that can help. Doing a quick search, I found both <a href="http://AddEvent.com">AddEvent.com</a> and <a href="http://AddEvent.com">AddtoCalendar.com</a>. Both sites offer menus for multiple calendar formats. AddtoCalendar even offers icon views and an AJAX option.</p>
<p><img class="alignnone wp-image-7294" src="https://thomcraver.com/wp-content/uploads/2016/10/post_add_to_calendar.png" alt="AddEvent.com Code" width="174" height="200" /> <img class="alignnone wp-image-7302" src="https://thomcraver.com/wp-content/uploads/2016/10/post_addtocalendar_com.png" alt="AddtoCalendar.com code" width="432" height="200" /></p>
<p>Your developers should never have to re-invent the wheel. Sometimes it may be necessary to fix or augment the wheel, but rarely should they have to re-create from scratch.</p>
<p>Remember, this isn&#8217;t about torturing your developers or just &#8220;getting it done&#8221; so it&#8217;s &#8220;good enough.&#8221; This is your customers. It should exceed their expectations. Don&#8217;t you expect the same?</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2016/10/10/kind-users-calendar-event-edition/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Learn Web Analytics on Your Own Schedule</title>
		<link>http://thom.cravers.us/2016/09/01/learn-web-analytics-on-your-own-schedule/</link>
		<comments>http://thom.cravers.us/2016/09/01/learn-web-analytics-on-your-own-schedule/#respond</comments>
		<pubDate>Thu, 01 Sep 2016 13:15:17 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Teaching]]></category>

		<guid isPermaLink="false">https://thomcraver.com/?p=7188</guid>
		<description><![CDATA[Introducing Online Web Analytics Courses It has been a long time coming, but I am proud to announce the availability of my first online course. Introduction to Web Analytics Using Google Analytics is now available online at LearnWithThom.com. The Google Analytics training course is modeled directly from the four-hour masterclass workshops I have been leading for the past [&#8230;]]]></description>
				<content:encoded><![CDATA[<h2>Introducing Online Web Analytics Courses</h2>
<p>It has been a long time coming, but I am proud to announce the availability of my first online course. <a href="https://www.learnwiththom.com/course-directory/"><i>Introduction to Web Analytics Using Google Analytics</i></a><i> </i>is now available online at <a href="https://ww.LearnWithThom.com">LearnWithThom.com</a>.</p>
<p><img class="alignright wp-image-7196 size-medium" src="http://thomcraver.com/wp-content/uploads/2016/08/online_analytics_class_student-e1472672946766-300x161.jpg" alt="online analytics class student" width="300" height="161" /></p>
<p>The <strong>Google Analytics training</strong> course is modeled directly from the four-hour masterclass workshops I have been leading for the past five years, but goes more in-depth, allowing learners to comprehend and retain the information without the benefit of an instructor present.</p>
<p>More than a mere Google Analytics training course online, <a href="https://www.learnwiththom.com/course-directory/"><i>Introduction to Web Analytics Using Google Analytics</i></a> will teach you the fundamentals of web analytics. You&#8217;ll also learn how to use Google Analytics. But more importantly, this Google Analytics course will teach you why you measure, what to measure and when to use each of the different reports.</p>
<p>While the course contains over two and a half hours of video content, it is broken into multiple lessons that range from 4 to 10 minutes each. The content can be easily consumed in one, long session or over multiple days, depending on how much time you have to spend. And you can even get <strong>two full lessons for free</strong> so you can get a feel for the system without commitment.</p>
<h2>More Classes Coming Soon!</h2>
<p>This course is the first of many more to follow. The <a href="https://ww.LearnWithThom.com">LearnWithThom.com</a> platform will be the jumping point for digital marketing training from professionals while learning at your own pace. More courses will be released by Q1, 2017. An advanced analytics course is already in development as the next release. It will be shortly followed by a course on Google Tag Manager.</p>
<h2>Get Learning Web Analytics Now</h2>
<p>[button link=&#8221;https://www.learnwiththom.com&#8221; size=&#8221;large&#8221;]  Go to LearnWithThom.com[/button]</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2016/09/01/learn-web-analytics-on-your-own-schedule/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Measuring Your Website&#8217;s ROI</title>
		<link>http://thom.cravers.us/2016/02/19/measuring-your-websites-roi/</link>
		<comments>http://thom.cravers.us/2016/02/19/measuring-your-websites-roi/#respond</comments>
		<pubDate>Fri, 19 Feb 2016 17:07:28 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Analytics]]></category>
		<category><![CDATA[Web Analytics]]></category>

		<guid isPermaLink="false">http://thomcraver.com/?p=6964</guid>
		<description><![CDATA[Measuring the return on your website’s investment is an elusive concept for many organizations. For many, measuring consists of visitors or page views. In my travels and at various conferences, I often hear similar questions. Where do you start? What else can you measure? But how does that translate to dollars and cents? With a [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>Measuring the return on your website’s investment is an elusive concept for many organizations. For many, measuring consists of visitors or page views. In my travels and at various conferences, I often hear similar questions. Where do you start? What else can you measure? But how does that translate to dollars and cents? With a little set up and a bit of follow-through, it can be easy to look at your website as a revenue center and not some red line on your accountant’s books.</p>
<h2>What’s Your Goal?</h2>
<p>For years, mankind has been concerned with “the meaning of life.” Your website has the same concerns. <strong>Every website needs a goal.</strong> If you’re directly selling on your site, your goal is likely having a visitor complete a sale. That is a goal you should measure. Some common website goals are:</p>
<ul>
<li>Direct Sales</li>
<li>Sales Leads</li>
<li>Requests for information</li>
<li>Whitepaper or other document downloads</li>
<li>Advertisements served and/or clicked</li>
</ul>
<h3>Do Your Goals Have Value?</h3>
<p><img class="alignright wp-image-6969" src="http://thomcraver.com/wp-content/uploads/2016/02/goal_values-300x159.png" alt="Setting a Goal Value in Google Analytics" width="400" height="212" />Ultimately goals are what generates revenue. If you have an ecommerce goal, your ecommerce software should ultimately be able to dynamically insert the value of a transaction into your data layer or goal event. But what about non-transaction goals, like downloads or lead-gen forms for B2B websites?</p>
<p>I&#8217;ll grant you that a lead or a download are not guaranteed customers who will immediately generate revenue. But they start to build trust and establish a relationship with potential clients. how many of your sales team say to you, “if I get the initial meeting, I’ll close the deal”? Thought so.</p>
<p>Leads and sales have value. In your Web analytics software, you can set goals and <strong>add a value</strong> to them. The value you assign is a quantitative measurement of the <strong>revenue</strong> you directly generated through sales or hope to generate through the new lead. Granted, it’s not as easy to apply a value to a lead as it is to direct sales that have a dollar amount associated with the transaction.</p>
<p>Consider this:</p>
<p>Generally speaking, leads generated through web forms are warm leads. People have sought out your site, pursued it, entered data through your form and submitted it, entrusting your site with their personal email address. What is the long-term value of one of your customers? On average, what percentage of warm leads do you turn into long-term customers? Multiply those numbers out and that’s the average value of a website lead.</p>
<p>For example if:</p>
<ul>
<li>over the lifetime of the relationship, the average revenue for a customer is $1000</li>
<li>your sales force can close 80% of their leads to long-term customers</li>
</ul>
<p>Then the value of your lead is: <strong>$1000</strong> x <strong>.8</strong> or <strong>$800</strong>.</p>
<p>Stop thinking in terms of visits or page views. While these are very good metrics that can help set a baseline for other measurements, these are not the end-all, be-all. Some of you might also measure bounces – a visit where the visitor views one page and leaves your site immediately. Measuring bounces can be useful, but can also be misleading. Set goals within your analytics software and measure them. Goals are your best measure of ROI.</p>
<h2>What What&#8217;s Our ROI?</h2>
<p>By definition, Return on Investment means measuring your revenue based on the amount you invested. So it follows that your ROI would be the sum of all the revenue values of the your conversions, minus the cost of your investment. Are you tracking the cost per visitor? It&#8217;s easy using PPC or display campaigns with AdWords or DoubleClick. The interfaces include conversion pixel tracking that will report back to your analytics. However, what about email or social media campaigns? Do you track print or other traditional media? Data from all campaign spends must be accounted for within your ROI equations. Be sure you&#8217;re tagging all inbound links to your site to be sure. Yes, this is still possible with traditional media. Without it, you&#8217;re ROI calculations will never be accurate.</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2016/02/19/measuring-your-websites-roi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Akismet Plugin is Vulnerable to XSS Attack!</title>
		<link>http://thom.cravers.us/2015/10/01/akismet-plugin-is-vulnerable-to-xss-attack/</link>
		<comments>http://thom.cravers.us/2015/10/01/akismet-plugin-is-vulnerable-to-xss-attack/#respond</comments>
		<pubDate>Thu, 01 Oct 2015 23:21:01 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://new.thomcraver.com/?p=6925</guid>
		<description><![CDATA[Akismet, the popular Anti-Spam WordPress plugin that comes installed standard has a bug that could wreak havoc on your entire website. Get the details!]]></description>
				<content:encoded><![CDATA[<p><img class="alignnone" src="https://ps.w.org/akismet/assets/banner-772x250.jpg" alt="How akismet works" width="772" height="250" />]</p>
<p>A new update &#8211; version 3.1.5 &#8211; for the Akismet WordPress plugin was released Tuesday afternoon. It addresses a major security vulnerability that could allow technical ill-doers to inject whatever they want into your website. If they really know what their doing, a malicious user even completely compromise your entire site. The sucuri blog published the vulnerability <a href="https://blog.sucuri.net/2015/10/security-advisory-stored-xss-in-akismet-wordpress-plugin.html?utm_source=Sucuri+WordPress+Plugin&amp;utm_campaign=439fc32cd4-Customers_Security_advisory_Stored_XSS_Jetpack&amp;utm_medium=email&amp;utm_term=0_4ac850e5be-439fc32cd4-82528949">technical details</a> yesterday.</p>
<p>Akismet is the the de facto anti-spam software for comments in WordPress. With millions of active installs, the impact of this could be huge for the tens of thousands of sites that typically go un-patched.</p>
<h2>What Should I Do?</h2>
<p>Update. NOW.</p>
<p>Cross-site Scripting &#8211; or XSS &#8211; is a nasty backdoor of sorts that allows unauthorized people to inject unauthorized things in your website. This could be links to viruses, competitors &#8211; really any content they want.</p>
<p>Log into WordPress, click <em>Updates</em> from your main menu, select all your plugins and upgrade them. Remember, backup your current configuration before updating plugins. This is doubly important if it&#8217;s been a while since you&#8217;ve updated some of them. While this particular Akismet update likely won&#8217;t break your site, your mileage may vary with other plugin updates.</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2015/10/01/akismet-plugin-is-vulnerable-to-xss-attack/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Security Vulnerability in Yoast&#8217;s SEO WordPress Plugin</title>
		<link>http://thom.cravers.us/2015/03/11/security-vulnerability-in-yoasts-seo-wordpress-plugin/</link>
		<comments>http://thom.cravers.us/2015/03/11/security-vulnerability-in-yoasts-seo-wordpress-plugin/#respond</comments>
		<pubDate>Wed, 11 Mar 2015 20:41:22 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://thomcraver.com/?p=6843</guid>
		<description><![CDATA[The popular SEO WordPress plugin by Yoast had a major security vunerability. Here's what you need to know.]]></description>
				<content:encoded><![CDATA[<h2>Popular WordPress SEO Plug-in Vulnerability Affects 14 Million</h2>
<h2><img class="alignright wp-image-6886 size-full" src="http://thomcraver.com/wp-content/uploads/2015/03/yoast.png" alt="WordPress SEO" width="251" height="161" /></h2>
<p>Another week, another WordPress plug-in vulnerability. This time, the plug-in in question is the very popular WordPress SEO by Yoast plugin. According to Yoast&#8217;s site, the plug-in has been downloaded more than 14 Million times. In all fairness, it is the most well-known SEO plug-in for WordPress sites out there.</p>
<p>Just like the SlimStat recent plugin <a title="SlimStat Analytics Plug-in Makes Your Website Vulnerable" href="http://thomcraver.com/security/slimstat-analytics-plug-in-makes-your-website-vulnerable/">vulnerability</a>, the bug in the WordPress SEO plugin makes your site vulnerable to SQL injection. SQL is the language that runs the back-end SQL database that powers WordPress sites. Through an SQL Injection attack, a malicious user could insert their won SQL code into your server through a known vulnerability. They accomplish this through a series of extra code at the end of a Web address on your site.</p>
<p>The WordPress SEO vulnerability only allows someone who is logged into your site to perform the code injection. However, the injected code could change or delete page content or expose usernames. Full technical details were <a href="https://grahamcluley.com/2015/03/wordpress-seo-yoast-plugin-update/">explained earlier today</a> by Graham Cluley.</p>
<h3>What To Do:</h3>
<p>Update WordPress SEO by Yoast to the latest version (1.7.4). Now.</p>
<p>Good practice also suggests to make sure former employees and other people no longer affiliated with your website (perhaps and old developer?) no longer have active accounts.</p>
<p><img class="alignright size-thumbnail wp-image-6797" src="http://thomcraver.com/wp-content/uploads/2015/02/WordPress_Updates-291x120.png" alt="WordPress Updates Idicator" width="291" height="120" />Log into WordPress and look for little icons with numbers next to the <em>Updates</em> menu item. If you see a number next to it, that number indicates the number of plug-ins, themes or other updates you need to execute.</p>
<p>Simply click the update menu item, select all the updates on the page that follows, and click the Update Plugins button. It’s that simple and extremely important!</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2015/03/11/security-vulnerability-in-yoasts-seo-wordpress-plugin/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SlimStat Analytics Plug-in Makes Your Website Vulnerable</title>
		<link>http://thom.cravers.us/2015/02/25/slimstat-analytics-plug-in-makes-your-website-vulnerable/</link>
		<comments>http://thom.cravers.us/2015/02/25/slimstat-analytics-plug-in-makes-your-website-vulnerable/#respond</comments>
		<pubDate>Wed, 25 Feb 2015 15:33:19 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Analytics]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://thomcraver.com/?p=6796</guid>
		<description><![CDATA[The Hacker News is reporting a major vulnerability with the popular SlimStat Analytics plugin for WordPress. The plug-in uses an encryption method for obscuring and encrypting data in transit as it goes from your visitor&#8217;s computers to your website. That encryption uses a &#8220;secret key&#8221; &#8211; effectively a password &#8211; to encrypt that data. The [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>The Hacker News is <a href="http://thehackernews.com/2015/02/wordpress-slimstat-plugin.html">reporting</a> a major vulnerability with the popular SlimStat Analytics plugin for WordPress. The plug-in uses an encryption method for obscuring and encrypting data in transit as it goes from your visitor&#8217;s computers to your website. That encryption uses a &#8220;secret key&#8221; &#8211; effectively a password &#8211; to encrypt that data.</p>
<p>The problem lies with that key. The key is nothing more than the date you installed the plugin. Anyone with that knowledge in your organization &#8211; or FORMERLY in your organization &#8211; can easily use that key to not only change the analytics data, but actually break into your site and do malicious things using an attack known as <strong><em>SQL injection</em></strong>. Even people not affiliated with your organization can find the date out simply by using a service like the WayBack Machine at Internet Archive.</p>
<p>WordPress plugins have access to the WordPress back-end of your site. Which means an insecure plug-in can actually make your whole site vulnerable to being deleted, changed or otherwise manipulated. An SQL injection involves a properly crafted line of code could even delete all your users so you couldn&#8217;t get back into your website to fix it.</p>
<h3>What To Do:</h3>
<p><a href="http://thomcraver.com/wp-content/uploads/2015/02/monopoly-man1.jpg"><img class="alignright wp-image-6889 size-thumbnail" src="http://thomcraver.com/wp-content/uploads/2015/02/monopoly-man1-150x150.jpg" alt="" width="150" height="150" /></a>Update your SlimStat plug-in to the latest version. <em>Now</em>. Do not pass <em>Go</em>. Do not collect $200.</p>
<p>When updates are available for any plugin, you should upgrade immediately. Many times, a plugin update contains important security fixes that are crucial, as in the case with the SlimStat plugin today. Typically, the announcement of a security update includes how to exploit the vulnerability, as well. Security blog, Securi, <a title="Security Advisory – WP-Slimstat 3.9.5 and lower" href="http://blog.sucuri.net/2015/02/security-advisory-wp-slimstat-3-9-5-and-lower.html">published</a> the full exploit on the SlimStat plugin yesterday. This gives knowledge and courage to the would-be hackers to go out and find sites to attack.</p>
<p>You&#8217;ll know simply by logging into WordPress and looking for little icons with numbers like in the images below. These indicate updates are available.</p>
<p><a href="http://thomcraver.com/wp-content/uploads/2015/02/WordPress_Updates.png"><img class="alignnone size-medium wp-image-6797" src="http://thomcraver.com/wp-content/uploads/2015/02/WordPress_Updates-300x214.png" alt="WordPress Updates Idicator" width="300" height="214" /></a></p>
<p>Simply click the update link, select all the updates and click the <em>Update Plugins</em> button. It&#8217;s that simple and even more important.</p>
<p>Go &#8211; update your site and keep it that way.</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2015/02/25/slimstat-analytics-plug-in-makes-your-website-vulnerable/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Speaking Schedule: ClickZ Live Toronto</title>
		<link>http://thom.cravers.us/2014/05/08/speaking-schedule-clickz-live-toronto/</link>
		<comments>http://thom.cravers.us/2014/05/08/speaking-schedule-clickz-live-toronto/#respond</comments>
		<pubDate>Thu, 08 May 2014 16:29:46 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Speaking]]></category>

		<guid isPermaLink="false">http://thomcraver.com/?p=6724</guid>
		<description><![CDATA[ClickZ Live, the newly-named digital marketing conference from Incisive Media invades the Great White North next week. The three-day conference starts Wednesday, May 14th with a full-day of training and continues through Friday. If you&#8217;re heading to the conference, or even considering it, here&#8217;s where you&#8217;ll find me speaking: Wednesday, May 14th 1:30 PM: How [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>ClickZ Live, the newly-named digital marketing conference from Incisive Media invades the Great White North next week. The three-day conference starts Wednesday, May 14th with a full-day of training and continues through Friday. If you&#8217;re heading to the conference, or even considering it, here&#8217;s where you&#8217;ll find me speaking:</p>
<p><a href="http://thomcraver.com/wp-content/uploads/2014/05/thom_jimh-300x1691.jpg"><img class="alignright wp-image-6891 size-medium" src="http://thomcraver.com/wp-content/uploads/2014/05/thom_jimh-300x1691-300x169.jpg" alt="" width="300" height="169" /></a></p>
<h2>Wednesday, May 14th</h2>
<h3>1:30 PM: <a href="http://www.clickzlive.com/toronto/training-workshops.php#web-analytics-data">How to Collect, Interpret and Use Your Web Analytics Data</a></h3>
<p>My in-depth analytics workshop runs in the afternoon time slot from 1:30pm &#8211; 5:30pm. The session runs 4 hours and discusses the finer points of how to measure your inbound marketing, determine business KPIs and prove your business objectives are being met.</p>
<h2>Thursday, May 15th</h2>
<h3>2:30 PM:<a href="http://www.clickzlive.com/toronto/site-clinics.php#thom-craver"> Get Your Website Graded Site Clinic</a></h3>
<p>Is your website performing the way you&#8217;d like it to? Wondering if you&#8217;ve been hit with a manual penalty? Get a little tough love for your site and a free audit. If your site is selected in this theater session, you&#8217;ll walk out with a mini site audit report card with actionable items to have your IT and marketing teams remedy.</p>
<h3>3:30 PM: <a href="http://www.clickzlive.com/toronto/agenda-day1.php#campaign-power-toolkit">Digital Campaign Power Toolkit: What Every Online Marketer Should Use</a></h3>
<p>Always have the right tool for the job! Tools are an important part of any practitioner&#8217;s day-to-day operations. Are there any &#8220;magic bullet&#8221; tools? Which tools are the right fit for the various SEO tasks you perform. I join Jim Hedger from Digital Always Media to discuss just that. Join us for the last session on day one.</p>
<h3>4:30 PM: Meet the Experts &#8211; Web Analytics Roundtable</h3>
<p>Still didn&#8217;t get enough? Come sit down over a drink and talk analytics with me. This is your chance for free advice for an hour discussing anything you&#8217;d like in the Web analytics world.</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2014/05/08/speaking-schedule-clickz-live-toronto/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SES Chicago 2013 Speaking Schedule #SESChi</title>
		<link>http://thom.cravers.us/2013/10/29/ses-chicago-2013-speaking-schedule-seschi/</link>
		<comments>http://thom.cravers.us/2013/10/29/ses-chicago-2013-speaking-schedule-seschi/#respond</comments>
		<pubDate>Tue, 29 Oct 2013 13:18:17 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Speaking]]></category>

		<guid isPermaLink="false">http://thomcraver.com/?p=6708</guid>
		<description><![CDATA[I&#8217;ll be blowing into the Windy City November 4-7 to talk SEO, Not Provided and a whole lot more. It&#8217;s time for SES Chicago. If you&#8217;re planning on being there, here&#8217;s where you can find me and the sessions I&#8217;ll be leading: Monday 4-Nov: ClickZ Academy Training &#8211; Sold Out! How to Collect, Interpret and [&#8230;]]]></description>
				<content:encoded><![CDATA[<p>I&#8217;ll be blowing into the Windy City November 4-7 to talk SEO, Not Provided and a whole lot more. It&#8217;s time for SES Chicago. If you&#8217;re planning on being there, here&#8217;s where you can find me and the sessions I&#8217;ll be leading:</p>
<h3><strong><a href="http://thomcraver.com/wp-content/uploads/2013/10/czl-box.jpg"><img class="alignright size-full wp-image-6894" src="http://thomcraver.com/wp-content/uploads/2013/10/czl-box.jpg" alt="ClickZ Live" width="160" height="160" /></a>Monday 4-Nov:</strong></h3>
<ul>
<li><strong>ClickZ Academy Training &#8211; Sold Out!<br />
</strong><a href="http://sesconference.com/chicago/training.php#web-analytics">How to Collect, Interpret and Use Your Web Analytics Data</a><br />
You&#8217;ve built your website. Now what? Is it generating revenue, or is it still a cost center? Are people visiting? Once they come to your site, what are they doing? My 4-hour training class on Web analytics covers common metrics, KPIs, segmentation, finding meaning in your data, and reporting it properly.</li>
</ul>
<h3>Tuesday 5-Nov (Day 1):</h3>
<ul>
<li><strong><a href="http://sesconference.com/chicago/site-clinics.php">Get Your Website Graded</a></strong> (Site Clinic)<br />
Is your website performing as you&#8217;d like it? Get some one-on-one advice and tough love with Technical SEO strategist, Thom Craver. From technical elements to content and usability, Thom will audit your site and present you a website report card to get you back on the path to better rankings, user satisfaction and visitor conversions.</li>
<li><strong><a href="http://sesconference.com/chicago/agenda-day1.php#tracking-untrackable">Tracking the Untrackable with Google Analytics</a></strong> (Moderator)<a href="http://sesconference.com/chicago/agenda-day1.php#tracking-untrackable"><br />
</a>Google Analytics is only as great as the information you get out of it. If the actions you want people to take are not trackable or if they occur offline, how do you connect them to the tool? Discover the answer to this question and learn the amazing things that can be done in Google Analytics and the new Universal Analytics. Explore some powerful yet little-known ways to segment your audience using the new advanced segmentation features and multi-channel funnels.</li>
<li><strong><a href="http://sesconference.com/chicago/agenda-day1.php#growing-customer-base">Growth Hacking and Data Collection: Growing Your Customer Base Online<br />
</a></strong>Growth hacking is all the rage for start-ups. But established businesses can use the same lean marketing ideas to grow their customer base online. Some previously non-traditional methods of online marketing are becoming more and more common. When used correctly, these methods provide insight to visitor behavior to raise your conversions.</li>
</ul>
<h3>Thursday 7-Nov (Day 3):</h3>
<ul>
<li><strong><a href="http://sesconference.com/chicago/agenda-day3.php#seo-isnt-dead">SEO Isn&#8217;t Dead, It&#8217;s Been Reincarnated</a></strong><a href="http://sesconference.com/chicago/agenda-day3.php#seo-isnt-dead"><br />
</a>This Fall saw Google give an unannounced one-two punch of Not Provided and the Hummingbird Algorithm, taking away keywords and changing semantic search. At the same time, Bing rolled out instant &#8220;Page Zero&#8221; searches without leaving the search box and became the default Web Search for Siri on iOS 7. A panel of SEO experts weigh in on what this means for SEO and how the SEO community can cope with the changes for their clients.</li>
</ul>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2013/10/29/ses-chicago-2013-speaking-schedule-seschi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Not Provided is Not the End of the World</title>
		<link>http://thom.cravers.us/2013/09/24/not-provided-is-not-the-end-of-the-world/</link>
		<comments>http://thom.cravers.us/2013/09/24/not-provided-is-not-the-end-of-the-world/#comments</comments>
		<pubDate>Tue, 24 Sep 2013 17:09:52 +0000</pubDate>
		<dc:creator><![CDATA[thomcraver]]></dc:creator>
				<category><![CDATA[Google]]></category>
		<category><![CDATA[Search Engine Optimization]]></category>

		<guid isPermaLink="false">http://thomcraver.com/?p=6696</guid>
		<description><![CDATA[What&#8217;s This Not Provided Stuff About? Since 2010, Google has made encrypted search available to its users. When using encrypted search, your query (keywords) that were previously supplied to owners of the sites you clicked through to stopped being provided. Marketers and Web analysts who have come to measure site visitors by which keywords they [&#8230;]]]></description>
				<content:encoded><![CDATA[<h2>What&#8217;s This Not Provided Stuff About?</h2>
<p>Since <a title="Search More Securely With Encrypted Search" href="http://googleblog.blogspot.com/2010/05/search-more-securely-with-encrypted.html">2010</a>, Google has made encrypted search available to its users. When using encrypted search, your query (keywords) that were previously supplied to owners of the sites you clicked through to stopped being provided. Marketers and Web analysts who have come to measure site visitors by which keywords they used on Google to find them no longer can because in place of keywords, they now see the phrase <em>(not provided</em>).<img class=" wp-image-6697 alignright" src="http://thomcraver.com/wp-content/uploads/2013/09/not_provided_in_analytics.png" alt="Not Provided in Google analytics" width="247" height="227" /></p>
<p>Since then, Google has ramped up encrypted search so <em>(</em><em>not provided) </em>crept into analytics reports.  This past week, Google confirmed they were <a title="Goodbye, Keyword Data: Google Moves Entirely to Secure Search" href="http://searchenginewatch.com/article/2296351/Goodbye-Keyword-Data-Google-Moves-Entirely-to-Secure-Search">all-in on encrypted search</a> for all users. This means that for all visitors who arrive at your site from Google search, you will see <em>(not provided) </em>instead of the words they used to find your site.</p>
<p>Across the Web and Twitterverse SEOs are furious. The <em>(not provided) </em>invasion in Google Analytics and other Web analytics tools has been on the rise over the past three years. Now it&#8217;s certain for all Google searches.</p>
<h2>Google&#8217;s official response to &#8220;not provided&#8221;:</h2>
<blockquote><p>&#8220;We added SSL encryption for our signed-in search users in 2011, as well as searches from the Chrome omnibox earlier this year. We’re now working to bring this extra protection to more users who are not signed in.&#8221;</p></blockquote>
<p>I&#8217;ve seen conspiracy theorists shouting it&#8217;s not about privacy because Webmaster Tools and AdWords still show the phrases. I&#8217;ve seen angry people blaming a Google push for more AdWords sales. I&#8217;ve seen and been asked &#8220;what do we do now?&#8221; and &#8220;how does this effect search and PPC?&#8221; Let me dispel rumors and try to provide explanations to the angry masses.</p>
<h2>What Does This Really Affect?</h2>
<p>Just your keyword reports in your analytics clients. But only the keywords data for Google users. Bing, AOL, Yahoo and other search engines are still provided keyword data. It&#8217;s still a subset of data. Depending on your traffic, it might even be a statistically significant sample.</p>
<p>It won&#8217;t affect your PPC campaigns. It won&#8217;t change your rankings &#8211; good, bad or otherwise. It won&#8217;t affect how you search. It won&#8217;t affect your Webmaster Tools or your bounce rate or your page views. Don&#8217;t let it affect your temper, either.</p>
<h2>No Keywords Means SEO Is Dead / We Can&#8217;t Do Our Job</h2>
<p>If you feel this way, you shouldn&#8217;t be doing SEO to begin with.</p>
<p>SEO is <em>not</em> about ranking first on Google &#8211; or any search engine for that matter. SEO drives more awareness and hopefully higher rankings. But SEO should be more than moving the needle on a keyword. It should be about driving quality (qualified) traffic to a site to increase that site&#8217;s bottom line.</p>
<p>Even still, as a practitioner, I understand that ranking higher is a large part of that. You need to measure that. So you start with a baseline (I currently rank 129th for widgets). You do some SEO-y kind of things. (Titles, Headings, keyword stuffing, etc), then you watch to see where you move to (Great, now I&#8217;m 99th!).</p>
<p>Do you measure that with Google Analytics? I think not. There are FAR better tools out there. Google Webmaster Tools shows you all the queries people used to find you, how many times you appeared, average rank for all those queries and how many clicks through you had.</p>
<p><img class="alignnone  wp-image-6698" src="http://thomcraver.com/wp-content/uploads/2013/09/Google_Webmaster_Tools_Keywords.png" alt="SEO Keywords in Google Webmaster Tools" width="600" height="110" /></p>
<p>For straight-up SEO measuring, what more do you need? Maybe the landing page would be nice. But really &#8211; does it matter? You should know which pages you were editing for SEO. They should all be targeting different phrases if you&#8217;re doing it right. Right?!</p>
<p>SEMrush has more great tools to track ranking. You set the words you want to monitor, then let it go. When you click through, you see pretty graphs showing trends over time. It reports automatically and will even email you every week.</p>
<p><img class="alignnone size-full wp-image-6699" src="http://thomcraver.com/wp-content/uploads/2013/09/SEMRush_position_tracking.png" alt="SEMrush keyword position reporting" width="677" height="134" /></p>
<p>Don&#8217;t know which keywords you&#8217;re targeting? (Again, shame on you!) SEMrush will do that for you too, if you want:</p>
<p><img class="alignnone  wp-image-6700" src="http://thomcraver.com/wp-content/uploads/2013/09/SEMRush_position_tracking2.png" alt="SEMRush keyword tracking" width="625" height="319" /></p>
<h3>Bottom Line: Not Provided is NOT the End of SEO.</h3>
<p>It may be the end of how you currently do your job. But now you can do it better. You&#8217;re welcome.</p>
<h2>Google vs Privacy: AdWords and Webmaster Tools Provide the <em>Same Data</em></h2>
<p>No, they don&#8217;t. They&#8217;re very much <em>not</em> <em>providing</em> the same information.</p>
<p>When you use analytics (not even GA, others too) properly, you can tie personally identifiable information back to transactions. If you use a logfile analyzer, you also get IP address information. Google has tried to make Analytics as useful as possible without compromising privacy. You can&#8217;t get individual IP addresses. I know. I&#8217;ve asked Google Analytics product managers about individual transactions when interviewing them about their multi-channel attribution tools. Google won&#8217;t offer certain data in certain settings because they don&#8217;t want to compromise this data.</p>
<p>Here&#8217;s my speculation, but based in reality:</p>
<p><strong>Yes, this is all about user privacy.</strong></p>
<p>Webmaster tools does not show who searched. It doesn&#8217;t even show landing page. I can&#8217;t trace that data back to anything in analytics. I can&#8217;t even segment by it if I tie my GA and Webmaster Tools account together.</p>
<p>If you do paid properly, you have one landing page tied to a bunch of keywords. You&#8217;re bidding on those keywords, counting on the fact that people are going to search for them. You&#8217;re likely using heavily searched phrases. This is not private information. You should be able (through common sense) tie together people who clicked and hit your specific-to-that-campaign landing page to a handful of phrases.</p>
<p>While AdWords provides conversion data, it doesn&#8217;t show unique data identifying a person. Analytics can provide far more personal data, possibly more personally identifiable data depending on what other data a site collects or requires for use. For example:</p>
<p>My local grocery store has a &#8220;Shoppers&#8217; Club&#8221; card that tracks me in-store. To get up-to-date pricing, I need to log into their site when browsing this week&#8217;s ad. They can track me online and offline by tying the two data sets together based on the common unique ID that is my card number. As such, they can track my search data back to me, personally. Google wants to avoid this.</p>
<p>Let&#8217;s not forget about Facebook and other sharing sites. The Facebook like/share/recommend button is called directly from Facebook, not from the site on which its placed. Can they access search query? Depending on how it&#8217;s passed (GET string), yes, they might be able to maliciously do that. Can Facebook tie that back to you personally? You bet your <a title="Facebook Super-Cookei" href="http://paidcontent.org/2011/09/30/419-facebook-pushes-back-against-supercookie-charges/">sweet cookies</a> they can!</p>
<h3>But I Wouldn&#8217;t Misuse Keyword Data!</h3>
<p>Of course not. 99% of us likely won&#8217;t. But is your site 100% safe from hackers? Are you storing that keyword data &#8211; intentionally or not? Are there malicious sites out there that might misuse the system? Of course there are. Don&#8217;t be silly. Have you seen the phishing and spam sites out there?</p>
<p>One bad apple can spoil the bunch. You may not like it, but that&#8217;s a hard truth of the Web.</p>
<h2>Google&#8217;s Only Doing This to Push AdWords and Paid Search</h2>
<p>Really? How?!</p>
<p>Paid data is significantly different than organic data. It won&#8217;t tell you where you rank for all those SEO efforts you just made. I&#8217;ve already said this change will not change your rankings. So tell me how this will push people toward paid? What I&#8217;d really like to know is how many of those that are screaming this &#8220;more paid&#8221; mantra are the same people who say &#8220;people ignore ads.&#8221;</p>
<p>This argument is rubbish. There&#8217;s no correlation between encrypted search and paid. Not when you&#8217;re screaming &#8220;end of SEO&#8221;/&#8221;can&#8217;t do our jobs!&#8221;</p>
<h2>Not Provided Final Thoughts</h2>
<p>Most SEOs I know have moved off the segment-by-keywords thought process long ago. Those who haven&#8217;t shouldn&#8217;t be miserable. It&#8217;s an opportunity to improve yourself in your field, instead of continuing to use stagnant, older practices.</p>
<p>You&#8217;re in a new world of content marketing. Make good content. Know what keywords you&#8217;re targeting on that content. Measure people based on landing pages and source (social, email, etc). Keywords are a signal your content is doing well for the words you already targeted. They have no bearing that your overall marketing is bearing fruit.</p>
<p>No one ever made board room decisions based on visits per keyword. They&#8217;re based on revenue and cost savings. Stop whining and start marketing!</p>
]]></content:encoded>
			<wfw:commentRss>http://thom.cravers.us/2013/09/24/not-provided-is-not-the-end-of-the-world/feed/</wfw:commentRss>
		<slash:comments>23</slash:comments>
		</item>
	</channel>
</rss>
