How to Setup and Develop a WordPress Site

WordPress is the world’s most popular content management system (CMS), powering over 40% of all websites. It is open-source, highly customizable, and supported by a massive community of developers and users. You can use WordPress to build:

• Blogs and news sites

• Business websites

• E-commerce stores (with WooCommerce)

• Portfolios

• Membership sites

• Forums

• And much more

WordPress consists of two main components:

• Core: The base software that handles content management, users, and administration.

• Themes & Plugins: Extend functionality and design without modifying core files.

 

Pre-Installation Requirements

Before installing WordPress, ensure you have the following:

 

Domain Name

A unique web address (e.g., yourdomain.com). You can register one through registrars like SowfiHost or Namecheap.

 

Web Hosting

A server that supports PHP and MySQL. Recommended hosts:

• Shared Hosting: SowfiHost, Bluehost, Hostinger

• WordPress Hosting

• VPS/Dedicated

Minimum Requirements (official WordPress):

• PHP version 7.4 or greater (recommended 8.0+)

• MySQL version 5.7+ or MariaDB 10.3+

• HTTPS support

• Apache or Nginx web server

 

FTP/SFTP Access (for manual installation)

Use an FTP client like FileZilla or your hosting file manager.

 

Database Credentials

Most hosting panels let you create a MySQL database and user. You’ll need:

• Database name

• Database username

• Database password

• Database host (usually localhost)

 

Code Editor (for development)

Visual Studio Code, Sublime Text, PHPStorm, etc.

 

WordPress Installation Methods

Choose the method that best fits your technical comfort and hosting environment.

One-Click Installer (cPanel / Hosting Panel)

Most shared hosts provide a one-click installer.

Steps:

1. Log into your hosting control panel (cPanel).

2. Find the WordPress Installer icon.

3. Click Install.

4. Fill in:

• Choose Protocol: https:// or http:// (use https if SSL is set up).

• Choose Domain: Select your domain or subdirectory.

• Site Name: Your website title.

• Site Description: Tagline.

• Admin Username: Choose a strong username (avoid “admin”).

• Admin Password: Strong password.

• Admin Email: Your email.

5. Click Install.

6. Once complete, you’ll receive the admin URL (usually yourdomain.com/wp-admin).

 

Manual Installation via FTP or File Manager

This method gives you full control and is useful if your host doesn’t offer one-click installs.

Step 1: Download WordPress

Go to Wordpress.org and download the latest ZIP file.

Step 2: Upload Files

• Extract the ZIP on your computer.

• Using FTP (FileZilla) or cPanel File Manager, upload all contents of the extracted wordpress folder to your web root directory (often public_html, www, or htdocs).

Step 3: Create a Database

1. In cPanel, go to MySQL Databases.

2. Create a new database (e.g., wp_db).

3. Create a new MySQL user (e.g., wp_user) with a strong password.

4. Add the user to the database and grant All Privileges.

Step 4: Run the Installation Script

1. Visit http://yourdomain.com (or the folder where you uploaded).

2. WordPress will detect missing wp-config.php and guide you.

3. Click Let’s go!.

4. Enter database details:

• Database Name

• Username

• Password

• Database Host: localhost (unless your host specifies otherwise)

• Table Prefix: wp_ (you can change for security, e.g., wp123_)

5. Click Submit.

6. Click Run the installation.

7. Fill in site title, admin credentials, email.

8. Click Install WordPress.

 

Local Installation (XAMPP, WAMP, LocalWP)

Developing locally is recommended before going live.

Option A: Local by Flywheel (Easiest)

1. Download and install LocalWP.

2. Click Create a new site.

3. Follow the wizard: choose environment (Preferred), set site name, username, password.

4. Local automatically sets up a local server (PHP, MySQL) and installs WordPress.

5. Access your site via the provided local URL (e.g., mysite.local).

Option B: XAMPP / WAMP (Manual)

1. Install XAMPP (Apache + MySQL + PHP) or WAMP.

2. Start Apache and MySQL modules.

3. Download WordPress and extract into htdocs (XAMPP) or www (WAMP) folder, e.g., C:\xampp\htdocs\mysite.

4. Create a database via phpMyAdmin (http://localhost/phpmyadmin).

5. Visit http://localhost/mysite and follow the manual installation steps from above.

Installation Using WP-CLI (Advanced)

WP-CLI is a command-line tool for managing WordPress. Ideal for developers and automation.

Install WP-CLI (Linux/Mac):

bash

curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar

chmod +x wp-cli.phar

sudo mv wp-cli.phar /usr/local/bin/wp

Install WordPress:

bash

# Download core

wp core download --path=/path/to/site --allow-root

 

# Create wp-config.php

wp config create --dbname=wp_db --dbuser=wp_user --dbpass=password --dbhost=localhost --path=/path/to/site --allow-root

 

# Install database

wp core install --url=http://example.com --title="My Site" --admin_user=admin --admin_password=strongpass --admin_email=admin@example.com --path=/path/to/site --allow-root

 

Initial WordPress Configuration

After installation, you may need to edit wp-config.php (located in your WordPress root). Open it with a text editor.

Security Keys (Salts)

WordPress uses salts to encrypt login cookies. Generate fresh ones from WordPress Salt Generator and replace the placeholder lines.

 

Table Prefix

Changing the default wp_ prefix can improve security. If you have already installed it, you can change it manually in the database and wp-config.php (risky). For new installs, set it during installation.

Debug Mode

Enable debugging during development:

php

define( 'WP_DEBUG', true );

define( 'WP_DEBUG_LOG', true ); // Logs errors to wp-content/debug.log

define( 'WP_DEBUG_DISPLAY', false ); // Hide errors from screen

 

Increase Memory Limit

If you encounter memory errors:

php

define( 'WP_MEMORY_LIMIT', '256M' );

 

Force HTTPS (if SSL is active)

Add to wp-config.php:

php

define( 'FORCE_SSL_ADMIN', true );

And update site URL in Settings > General to use https://.

 

Logging In and Basic Settings

Log in at yourdomain.com/wp-admin using your admin credentials.

General Settings

• Site Title and Tagline: Your brand name and description.

• WordPress Address (URL) & Site Address (URL): Ensure both use https://.

• Administration Email Address: Where notifications go.

 

Permalinks

Go to Settings > Permalinks. Choose Post name (https://yourdomain.com/category/sample-post /) for SEO-friendly URLs. Save changes.

 

Reading Settings

• Your homepage displays: Choose a static page (recommended for business sites) or latest posts.

• Search engine visibility: Keep unchecked unless you want to discourage indexing (staging).

 

Discussion Settings

Configure comment moderation, avatars, etc. If not using comments, disable them.

 

Media Settings

Set thumbnail sizes, or leave defaults. Enable Organize my uploads into month and year-based folders if desired.

 

Delete Default Content

• Delete the “Hello World” post and “Sample Page”.
• Remove default plugins if unnecessary (e.g., Hello Dolly). 

 

Choosing and Installing a Theme

The theme controls your site’s design and layout. You can install via Appearance > Themes > Add New.

Free vs Premium Themes

You can search UI and Theme marketplaces online for 

Installation Steps:

1. Go to Appearance > Themes > Add New.

2. Search or upload a ZIP file.

3. Click Install and then Activate.

 

Creating a Child Theme

A child theme allows you to modify a parent theme without losing changes when the parent updates.

Steps:

1. Create a new folder in wp-content/themes/ named parent-theme-child.

2. Inside, create a style.css file with:

css

/*

 Theme Name:   Parent Theme Child

 Theme URI:    http://example.com/parent-theme-child/

 Description:  Child theme for Parent Theme

 Author:       Your Name

 Author URI:   http://example.com

 Template:     parent-theme-folder-name

 Version:      1.0.0

*/

3. Create a functions.php file:

php

<?php

add_action( 'wp_enqueue_scripts', 'my_child_theme_styles' );

function my_child_theme_styles() {

    wp_enqueue_style( 'parent-style', get_template_directory_uri() . '/style.css' );

}

4. Activate the child theme in Appearance > Themes.

Now you can override template files and add custom functions in the child theme.

 

Essential Plugins for Every Site

Plugins extend functionality. Install only what you need to avoid bloat.

Installation: Go to Plugins > Add New, search plugin name, click Install Now, then Activate. Configure each plugin according to your needs.

 

Developing Your WordPress Site

Now you’ll build actual content and, if desired, custom functionality.

Pages, Posts, Menus, and Widgets

Creating Pages

1. Go to Pages > Add New.

2. Enter title and content using blocks.

3. Set featured image, page attributes (parent, template).

4. Publish.

Creating Posts

Similar to pages, but with categories and tags. Use posts for blog articles or news.

Menus

1. Go to Appearance > Menus.

2. Create a new menu, add pages, posts, custom links.

3. Assign to a location (e.g., Primary Menu).

Widgets

Go to Appearance > Widgets. Drag widgets (e.g., Recent Posts, Search) into sidebars/footer areas. With block themes, widgets are managed via Appearance > Editor.

 

Using the Block Editor (Gutenberg)

Gutenberg uses blocks for all content. Each paragraph, image, heading, etc., is a block.

Common Blocks:

• Paragraph, Heading, Image, Gallery, List, Quote, Code, Table

• Columns, Group, Cover, Media & Text

• Buttons, Embed (YouTube, Twitter), Shortcode

• Custom HTML

Reusable Blocks: Save frequently used blocks for reuse across pages.

Block Patterns: Pre-designed layouts accessible from the inserter.

 

Custom Post Types and Custom Fields

For advanced content types (e.g., Portfolio, Testimonials, Products), create custom post types.

Register Custom Post Type (in child theme functions.php or custom plugin)

php

function create_portfolio_cpt() {

    register_post_type( 'portfolio',

        array(

            'labels' => array(

                'name' => __( 'Portfolios' ),

                'singular_name' => __( 'Portfolio' )

            ),

            'public' => true,

            'has_archive' => true,

            'menu_icon' => 'dashicons-portfolio',

            'supports' => array( 'title', 'editor', 'thumbnail', 'excerpt' ),

            'rewrite' => array( 'slug' => 'portfolio' ),

        )

    );

}

add_action( 'init', 'create_portfolio_cpt' );

Custom Fields

Use plugin Advanced Custom Fields (ACF) for easy GUI, or code manually using add_meta_box() and update_post_meta().

Example with ACF:

1. Install and activate ACF.

2. Create a field group, assign to post type.

3. In template files, retrieve with:

php

$value = get_field('field_name');

if( $value ) { echo $value; }

 

Theme Development Basics

If you’re building a custom theme from scratch, you’ll need these core files:

• style.css - Main stylesheet with theme header.

• functions.php - Theme functions and setup.

• index.php - Fallback template.

• header.php - Site header.

• footer.php - Site footer.

• sidebar.php - Sidebar.

• single.php - Single post template.

• page.php - Page template.

• archive.php - Archive listings.

• search.php - Search results.

• 404.php - Not found page.

• front-page.php - Front page.

Basic functions.php setup:

php

<?php

function mytheme_setup() {

    // Add title tag support

    add_theme_support( 'title-tag' );

    // Add featured image support

    add_theme_support( 'post-thumbnails' );

    // Register navigation menu

    register_nav_menus( array(

        'primary' => __( 'Primary Menu', 'mytheme' ),

    ) );

    // Add HTML5 support

    add_theme_support( 'html5', array( 'search-form', 'comment-form', 'comment-list', 'gallery', 'caption' ) );

}

add_action( 'after_setup_theme', 'mytheme_setup' );

 

Hooks, Actions, and Filters

WordPress’s core is event-driven. Hooks allow you to modify behavior without editing core files.

• Actions: Do something at a specific point.

• Filters: Modify data before it’s used.

Example Action:

php

add_action( 'wp_footer', 'add_custom_footer_code' );

function add_custom_footer_code() {

    echo '<p>Custom footer text</p>';

}

Example Filter:

php

add_filter( 'the_content', 'add_text_after_post' );

function add_text_after_post( $content ) {

    if ( is_single() ) {

        $content .= '<p>Thanks for reading!</p>';

    }

    return $content;

}

 

Enqueuing Scripts and Styles

Never hardcode CSS/JS links in header/footer; use wp_enqueue_scripts.

In functions.php:

php

function mytheme_scripts() {

    // Enqueue main stylesheet

    wp_enqueue_style( 'mytheme-style', get_stylesheet_uri(), array(), '1.0.0' );

 

    // Enqueue JavaScript

    wp_enqueue_script( 'mytheme-script', get_template_directory_uri() . '/js/custom.js', array('jquery'), '1.0.0', true );

}

add_action( 'wp_enqueue_scripts', 'mytheme_scripts' );

 

Creating a Custom Plugin

If functionality is not theme-specific, create a plugin.

Steps:

1. Create a new folder in wp-content/plugins/ e.g., my-custom-plugin.

2. Create a main PHP file my-custom-plugin.php with plugin header:

php

<?php

/**

 * Plugin Name: My Custom Plugin

 * Description: Adds custom features.

 * Version: 1.0.0

 * Author: Your Name

 */

3. Add your functions/hooks.

4. Activate in Plugins.

 

Using the WordPress REST API

The REST API allows you to interact with WordPress data using JSON. Useful for headless setups or external apps.

Example GET request: https://yourdomain.com/wp-json/wp/v2/posts

Create custom endpoint:

php

add_action( 'rest_api_init', function () {

    register_rest_route( 'myplugin/v1', '/custom', array(

        'methods' => 'GET',

        'callback' => 'my_custom_endpoint',

    ) );

});

function my_custom_endpoint() {

    return array( 'message' => 'Hello World' );

}

 

Testing and Debugging

Enable Debugging

In wp-config.php:

php

define( 'WP_DEBUG', true );

define( 'WP_DEBUG_LOG', true );

define( 'WP_DEBUG_DISPLAY', false );

define( 'SAVEQUERIES', true ); // For database query analysis

 

Use Query Monitor Plugin

Install Query Monitor to inspect database queries, hooks, PHP errors, and performance.

 

Staging Environment

Create a staging copy of your site (many hosts offer one-click staging). Test updates and changes there before pushing to production.

 

Browser Developer Tools

Use Chrome DevTools (F12) to inspect console errors, network requests, and CSS issues.

 

PHPCS and Coding Standards

Install PHP_CodeSniffer with WordPress Coding Standards to check code quality:

bash

composer global require "squizlabs/php_codesniffer=*"

phpcs --standard=WordPress myplugin.php

 

Performance Optimization

A fast site improves user experience and SEO.

Caching

• Page Caching: Use WP Rocket, W3 Total Cache, or LiteSpeed Cache.

• Browser Caching: Set expires headers via .htaccess or hosting config.

 

Image Optimization

• Compress images before upload (TinyPNG, Squoosh).

• Use plugins like Smush or ShortPixel to auto-optimize.

• Use modern formats (WebP) via plugin or CDN.

 

Content Delivery Network (CDN)

Cloudflare (free), StackPath, or KeyCDN to serve static assets from global servers.

 

Database Optimization

• Delete spam comments, post revisions, transients using WP-Optimize.

• Limit revisions in wp-config.php:

php

define( 'WP_POST_REVISIONS', 5 );

 

Minification and Concatenation

• Use caching plugins to minify CSS/JS and combine files.

• Or use Autoptimize for lightweight optimization.

 

Choose a Fast Hosting and Lightweight Theme

Avoid bloated page builders if not needed. Use a performance-optimized theme like GeneratePress or Astra.

 

Security Hardening

Strong Credentials

• Use a unique admin username (not “admin”).

• Use a strong password (mix uppercase, lowercase, numbers, symbols).

• Enable two-factor authentication (2FA) via plugin (e.g., Wordfence, Google Authenticator).

 

Keep Everything Updated

Regularly update WordPress core, themes, and plugins. Enable auto-updates for minor core releases and plugins if possible.

Backups

Set up automatic backups with UpdraftPlus to remote storage (Google Drive, Dropbox, S3). Test restore periodically.

 

Limit Login Attempts

Use Wordfence or Limit Login Attempts Reloaded to block brute force.

 

Change Login URL

Plugins like WPS Hide Login can change wp-login.php or /wp-admin/ to a custom slug.

 

File Permissions

Set correct permissions:

• Directories: 755

• Files: 644

• wp-config.php: 600 (or 440)

 

Disable File Editing

Add to wp-config.php:

php

define( 'DISALLOW_FILE_EDIT', true );

 

Security Headers

Add via .htaccess or hosting:

text

Header set X-Content-Type-Options "nosniff"

Header set X-Frame-Options "SAMEORIGIN"

Header set Referrer-Policy "strict-origin-when-cross-origin"

 

Use SSL

Install an SSL certificate (Let’s Encrypt is free) and force HTTPS.

 

Monitor Activity

Install a security plugin like Sucuri or Wordfence to log and alert on suspicious activity.

 

SEO Optimization

Install an SEO Plugin

Rank Math or Yoast SEO. We recommend Rank Math Configure:

• Set site meta title and description templates.

• Generate XML sitemap.

• Enable breadcrumbs.

• Connect to Google Search Console.

 

Optimize Content

• Use H1 for page title, H2/H3 for subheadings.

• Write meta titles under 60 characters, meta descriptions under 160.

• Include keywords naturally.

• Use alt text for images.

• Internal linking.

 

Permalink Structure

Use “Post name” permalinks. Avoid changing permalinks on an established site without redirects.

Avoid changing URL structures often, they must be set once at the very start properly and must not break or change when scaling

 

Mobile Responsiveness

Ensure your theme is responsive. Test with Google’s Mobile-Friendly Test.

 

Site Speed

Page speed is a ranking factor. Follow performance optimizations in section 10.

 

Structured Data

Use schema markup via SEO plugin or manually add JSON-LD for rich snippets.

 

Submit Sitemap to Search Engines

Submit your XML sitemap (e.g., sitemap_index.xml) to Google Search Console and Bing Webmaster Tools.

 

Pre-Launch Checklist

Before making your site live or after major changes, run through this checklist:

• All content proofread and finalized.

• All images optimized and have alt text.

• Forms tested (contact, newsletter).

• Checkout process tested (if e-commerce).

• SSL certificate active, all URLs use HTTPS.

• Permalinks set to Post name.

• XML sitemap generated and submitted.

• Search engine visibility enabled (Settings > Reading unchecked).

• Caching enabled.

• Security plugin active and configured.

• Backups scheduled and a current backup exists.

• 404 page customized.

• Legal pages (Privacy Policy, Terms) added.

• Analytics installed.

• Browser testing (Chrome, Firefox, Safari, Edge).

• Mobile testing on actual devices or emulator.

• Page speed test (Google PageSpeed Insights, GTmetrix).

• Remove dummy content, unused plugins/themes.

• Change admin email to your real email.

 

Maintenance and Ongoing Development

WordPress requires regular maintenance to stay secure and performant.

 

Regular Updates

• Update WordPress core, themes, and plugins as soon as updates are available.

• Test updates on staging if possible.

 

Monitor Uptime and Security

• Use uptime monitoring (Jetpack, UptimeRobot).

• Review security logs weekly.

 

Database Optimization

Run database cleanup monthly (WP-Optimize).

 

Content Audits

Update outdated content, fix broken links (use Broken Link Checker).

 

Performance Checks

Run speed tests monthly and after significant changes.

 

Backup Testing

At least quarterly, restore a backup to a test environment to verify integrity.

 

Continuous Development

• Use version control (Git) for custom theme/plugin development.

• Keep a local development environment in sync with production.

• Document custom code and hooks.