SPF for Your Website: Three Simple Steps to Protect Your Online Presence

As the days get longer and the mercury rises, we’re reminded yet again of the importance of remaining vigilant when it comes to applying sunscreen to protect ourselves from summer’s damaging rays. It’s a simple yet necessary precaution that if neglected has both short-term consequences – the painful agony of sunburn – and long-term ramifications – skin damage and increased risk of skin cancer. The same holds true for our websites. If we are not proactive in taking the necessary precautions to keep our online presence safe, problems will inevitably arise. Here are three simple measures you can take to apply SPF to your website that will safeguard the integrity not only of your brand’s online presence but its reputation as well:

(S)ecure your site against SQL injections.

Websites that feature data-driven applications can be vulnerable to attacks known as SQL injections, whereby malicious code is added to an entry field, then run and executed. These attacks exploit security vulnerabilities in problematic code, attacking your site’s database and performing any number of actions, from adding unapproved content to your public-facing site to allowing the hacker to download your entire database. This is a prime example of why rigorous testing is absolutely critical prior to launch. If your site is already up and running, consult with your web team to make sure that it has undergone thorough testing and is protected against such hacks. If you want to take additional precautionary measures, there are also security companies that specialize in detecting these types of website and database vulnerabilities, and they can provide you with a security audit.

(P)rotect your domain name.

It’s common sense that you must pay to acquire the domain name where your business will reside online. However, it’s important to remember that you have to continue to pay in order to retain the rights to use that domain name. Essentially, when you purchase your domain name, you’re not buying it outright. Rather, you’re renting that name for a specified period of time. Most registrars (Network Solutions, GoDaddy, Register.com, etc.) allow you to secure a name for anywhere from 12 months to 99 years. If you allow your registration to lapse, however, the domain name becomes available for purchase again and is open to the public for anyone to acquire. Bear in mind that there are actually companies that profit handsomely from business owners who neglect their domain registrations. They monitor domains that are nearing expiration, taking ownership of them the moment they become available. If you have the misfortune of having your domain acquired by one of these companies, usually you can negotiate having ownership transferred back to you, but it will cost you dearly. Unfortunately, while this is a shady practice, it is not illegal. If you allow your domain name to expire, it is fair game for anyone to register it – including these types of companies. Before your domain name expires, your registrar will likely send you many notices prompting you to renew. I start getting domain name renewal notices six months or more before the scheduled expiration date, and as that date gets closer, the notices start coming more and more frequently. Still, despite this barrage of email notifications, there are still many companies that are unaware that their expiration date is approaching, and they either lose their domain name altogether or are forced to pay a king’s ransom to get it back. Often when this situation occurs, it is because the person who initially completed the registration process for the domain name is no longer with the company, and therefore the email address they used to register the name is no longer valid, so the multitude of email notices go unreceived. The company innocently thinks they are protected until one day they stop receiving emails (yes, your email is tied into your domain name), or a customer mentions that they tried to go to the site, and it was simply gone. Even though there is a grace period after a domain has lapsed that allows you to reclaim your ownership before it becomes open to the public, the lapse isn’t always discovered in time to take advantage of this safety net. To prevent this, it is critically important to keep the contact information for your domain registration up to date. Either contact your registrar directly or speak with your web team to make sure you know when each of the domain names you own needs to be renewed, and double-check to ensure that the contact information for your account is valid.

(F)ortify your forms.

Web forms are a staple of doing business online. In fact, rare is the site that doesn’t include a form of some sort that allows the user to input information to be transmitted to the site’s owner, whether its purpose is to make a contact inquiry, sign up for a mailing list, complete a purchase, apply for employment, etc. As anyone who has a form on their site can attest, however, not all submissions received via these forms are legitimate. This is called robot spam, which is created by spammers who write programs that send out spambots to indiscriminately fill out any and all different types of forms on the Web, looking for entryways to expose a site’s security vulnerabilities (see SQL injections above). If you find your inbox filling up with indecipherable junk submissions, it’s these bots who are to blame. To combat these spambots, you can install a CAPTCHA system on your form, which generates an image with a random combination of numbers and letters that the user must enter in order to submit the form. The spambots can't interpret these CAPTCHA images, so therefore they can’t complete the process of sending the form. While there is legitimate debate as to whether or not CAPTCHA is the most effective way to prevent bogus submissions, it still remains the most popular solution for web form security. However, the reason it’s important to block these bots goes beyond eliminating the annoyance of a cluttered inbox. A few months ago, my company decided to remove the CAPTCHA requirement from our contact form. We knew we would get a flood of spam submissions, but we decided we could deal with a little extra hassle on our end in exchange for reducing the inconvenience to legitimate users of having to interpret those squiggly letters in order to simply get in touch with us. As expected, the amount of spam we received increased dramatically, but it was still manageable. Then, all of a sudden, we stopped receiving any submissions at all. We also began seeing some of our emails to other people bounce back. What we discovered was that our web domain (which is where our emails originate from) had been blacklisted as spam by Microsoft (which is what powers our email platform). Apparently, all the bogus submissions from our website (which resides on our domain) to our email caused Microsoft to identify us as spammers. This is because our form submissions came from an email address associated with our own domain name (many web forms are configured this way). Obviously, we were not the ones generating the spam, but this strange series of coincidences conspired to get us blacklisted! Fortunately, it was an easy process to get our domain removed from the blacklist, and we quickly re-installed the CAPTCHA system on our contact form, but we certainly learned an important lesson about security and spambots along the way. If you allow those bogus entries to make it through, there is a risk that you, too, could find yourself blacklisted and unable to send email to some of your most important contacts.

Seize the day and stay safe.

Since summer is vacation season for many of us, business tends to slow down slightly as our clients and colleagues enjoy much-deserved time off. That makes this the perfect time to seize the opportunity to apply these S-P-F practices today to ensure that your online presence is well protected all year long.

---

The Next Evolution of Social Media Integration

A few years ago, when brands first began wading in to test the waters of the social media pool, the concept of social media integration was very straightforward and simplistic: add icons linked to your company’s social media profile pages on your website, and consider the job done. The message to visitors was, “Like what you see here? Please come join the conversation happening on our company’s social outposts!” And as brands continued to jump on each new social bandwagon that came along – YouTube, Pinterest, Instagram, etc. – the once-standard three buttons became four, then four became five and so on. Shortly thereafter, brands discovered the benefit of serving content across multiple sites in the name of message continuity. The advent of social media management tools like Hootsuite and Tweetdeck set this activity on fire, as marketers began exploiting newly available scheduling tools to republish content to all their profiles with the click of a single button, with no regard for tailoring their message to the culture and syntax of each platform and audience. And this run-of-the-mill, low-quality content made its way back to these companies’ websites as embedded Twitter and Facebook feeds – all in the name of integration. And customers noticed. Actually, everyone noticed. Because this robotic, efficiency-driven method of social media integration began to strip these platforms of their primal social element — the very reason why sites like Facebook, Twitter and Instagram are so popular in the first place. So with a little push from Google, Bill Gates’ postulation, “Content is King,” became every marketer’s buzz phrase. Companies began pouring big dollars into developing relevant, original content in every arena, from sharable blog posts and traffic-driving SEO landing pages to viral videos — each fighting for a just few fleeting seconds of consumers’ precious attention. As companies started to find their footing, they realized success in social media demands integration through and through – not at the superficial level of icons and links but at the very core of a company’s business growth efforts. Rather than treating each marketing medium (e.g., television, radio, email, pay-per-click, social, etc.) as existing within its own self-contained silo, social should be seamlessly interwoven throughout the brand’s marketing initiatives in ways that are a natural fit with how real customers think, behave and make decisions. When done well, social media integration steps inside and outside the four walls of the Internet fluidly, supports customer engagement while maintaining the social integrity of the platform and, inevitably, drives sales. Here are a few excellent examples of companies who are doing it right by today’s standards:

Well that’s Pin-teresting

Recently, Banana Republic sent out an email blast that combined the best of social media, direct marketing and e-commerce into one cleverly crafted campaign. Subscribers to the company’s mailing list received an email message featuring images of customers’ most-pinned styles. Within this email was a link that took recipients to a dedicated landing page on the brand’s own website where they could shop these looks, creating a direct, distraction-free path between email, website browsing and checkout, greasing the gears for a quick and easy purchase decision. Smartly, Banana Republic executed these promotional efforts in the other direction, too. Their Pinterest profile includes a board of most-pinned styles, each of which of course links directly to the item featured in the pinned image for interested buyers to purchase from the website. This creative campaign not only integrates the company’s social media, email and e-commerce efforts, it also capitalizes on a key psychological motivation for the fashion-minded by giving them insight into what’s on their fellow shoppers’ wish lists so that they, too, can be seen sporting the season’s most-wanted looks.

Tweet to eat

If you’ve got a fanbase that’s actively engaged in talking about your brand on social media, it begs the question: how can you take advantage of their promotional activities to reach a broader audience? The answer: integrate your social media campaigns into your traditional marketing efforts. Case in point: Panera’s highly successful #PaneraFaves campaign. Over the past several months, Panera Bread has been encouraging customers to share photos of their favorite menu items on Facebook, Twitter and Instagram – providing added incentive by giving those who participate a chance to win Panera gift cards. While this initiative provides great value on its own by prompting fans to promote the brand to their own friends and followers, Panera has taken this campaign to the next level, running national TV spots that feature these #PaneraFaves tweets and pics. The strengths of this TV campaign are multifold, as they position Panera not only as a brand that pays attention to its customers and their opinions but one that is well loved by those customers, too.

Add it now, buy it later

In May 2014, Amazon launched a feature that lets Twitter users add items directly to their Amazon cart simply by typing a hashtag. First, the user must connect their Twitter account to Amazon. Then, anytime they see an Amazon product link on Twitter, replying to that tweet with the hashtag #AmazonCart — or #AmazonBasket in the UK — adds the product to that user’s shopping cart, where it will be ready and waiting for them to purchase at their convenience. This stroke of marketing genius essentially turns Twitter into a retail pipeline for Amazon, extending the reach of the e-commerce giant beyond its own website to the social hubs where its customers live and talk about products day in and day out. In doing so, Amazon is also wisely fending off the rising threat of social networks transforming into social commerce outlets in their own right. While there is still a learning curve for customers and a few technical kinks to work through, Amazon’s “add it now, buy it later” concept clearly has tremendous potential to shape the future of social commerce.

As seen on TV

Also in May 2014, TaylorMade partnered with Chirpify, a marketing conversion platform, to host a live sweepstakes for their SLDR S golf club during the CBS broadcast of the PGA Byron Nelson Championship. Using their #actiontag (#DistanceforAll), anyone could enter for a chance to win the SLDR S or a trip to the US Open. According to Chirpify, “55 percent of people who saw the message on TV and responded to the sweepstakes on social completed the registration.” This 55 percent conversion rate is nothing to scoff at. It means social is no longer limited to merely reflecting engagement. Instead, it can be used as a clear and defined component of the sales funnel — exactly the kind of approach to and innovative use of second screen and social that defines the next stage of evolution in social media integration.

---