Posted on August 06, 2008 by Jonathan Hensley
Build a Secure Family Blog with Wordpress

Just before the arrival of my 2nd daughter I launched a new Wordpress site so we’d be able to keep family and friends up to date with the latest pictures and goings on. We’d previously tried this but after a couple weeks it would start to fizzle to one post a week, then one a month and so on to basically a dead site.
The first couple sites were ones I was building in Dreamweaver with static pages that all had to be updated by hand. Part of the reason in the past that we didn’t just use a blog site was because we wanted pictures and sensitive information to be password protected. Family blogs are different in that respect. You aren’t looking to get huge viewership, you just want to be able to share private photos, videos and stories that you wouldn’t share with the entire world.
Long story short it was never easy enough to post, much less for my wife to be able to post, there were security issues and password communication problems with family, etc. There were just too many obstacles to overcome to create a successful family blog… until now.
Finally! This time we got it right.
Thanks to the help of this post on Simply Basic, I decided on Wordpress and a pile of
plugins. Surprisingly it works nearly flawlessly, is easy to use, my wife can post with ease (and therefore posts more often), it’s secured, family can all have their own login, and much, much, more.
Here are some more details on setting up your own secure Family Blog.
How it all works:
When we publish a new post on our family site we use the Email Users plugin to notify user of the new post. You can choose to email a specific user, users or everyone (the user can optionally opt out of these emails in their user configuration panel).
When someone goes to my family site the Members Only plugin redirects to the Wordpress login screen which displays BM Custom Login which shows my custom login page. Users can login with their account or register for one. When a user registers for an account Force User Field Registration asks them for their first and last name in addition to the default request for username and email address (you need this so you know exactly who is registering so you know whether or not you want to approve their account).
When the user submits the request for an account, WP User Moderation intercepts the request and instead of immediately emailing the user their password it emails me asking me to approve the account. Once I approve the account in the Wordpress admin panel the user gets their password email.
When the user logs into the site they are now able to view all the posts on the site. The user can access their account to change their email address, etc. Hide Dashboard prevents the user from seeing the Wordpress Dashboard.
The Plugins:
- BM Custom Login
Display custom images on the Wordpress login screen. - Email Users
Allows the site editors to send an e-mail to the blog users. - Force User Field Registration
Forces new users to register additional fields such as First & Last name, etc. - Hide Dashboard
Hide Dashboard from non-Administrators - Login Logger
Log the most recent successful login for each user, as well as all unsuccessful logins - Members Only
Allows you to make your WordPress blog only viewable to users that are logged in. You can also protect your Feeds whilst allowing registered user access to them by using Feed Keys. - WP User Moderation
Allows to make registration requests to your Wordpress Website subject to Approval.
(One thing to note is the fact that this setup utilizes 3rd party plugins and therefore won’t work on Wordpress.com but you need to get a hosted site that offers Wordpress.org. But if you want to do anything other than a basic blog Wordpress.org is a given.)
Once the plugins are installed, customization is easy. Most of the plugins just do their job out of the box. You can customize the email users get with their account info, customize the login page graphics, etc. One other thing I did was create accounts for the close family and friends that I knew would want them. Once I approved the account it emailed everyone their username and password.
I consider this setup a solid configuration and recommend it to anyone who wants a private family site. It’s simple to use and it works great. If you are interested in setting up this type of family site feel free to contact me if you have questions or if you just want me to set the whole thing up.
Find out what I am doing right now by following me on Twitter! If you like this post then please consider subscribing to my full feed RSS. You can also subscribe by Email and have new posts sent directly to your inbox.


[...] Build a Secure Family Blog with WordPress→ [...]
Posted on 6 Aug 2008 at 7:58 pm
Great post! I can’t wait to try this out.
I’m still looking for a way to make just a single category on my blog protected only to users. Rolescoper seems to provide functionality like this, but I imagine most users would find it a bear to set up.
Have you looked into per-category permissions?
J
Posted on 8 Aug 2008 at 1:54 pm
I haven’t seen a way to protect categories.
I have seen people create a “private” section of their blog for themselves using .htaccess permissions, or you could mark individual posts as private to hide them non-privleged accounts. Editors and Administrators can see private posts.
Posted on 8 Aug 2008 at 3:26 pm
Excellent recommendations for securing a family blog! Thanks.
For private areas in an otherwise public blog, you should look at Post Levels found at http://fortes.com/projects/wordpress/postlevels
Posted on 18 Aug 2008 at 7:09 am
Good find Bill.
Posted on 18 Aug 2008 at 7:19 am
I have been developing a plugin for sometime now to make WordPress easier to use - it’s called Post Control and is over at http://wp-cms.com/our-wordpress-plugins/post-control-plugin/
It allows complete control over the display of the write post/page options, allowing you to hide the stuff that most authors don’t use or just find plain confusing! It also allows you to control uploader type, post revisions and auto saves all from a handy control panel.
I’ve found it instantly makes WordPress easier to use for new authors and hides away stuff that often just confuses them.
Posted on 5 Sep 2008 at 6:36 am
pravelno written:)
Posted on 5 Nov 2008 at 9:02 pm