WordPress.org is self-hosted (you download the software and install it on your own hosting). You have full control, unlimited customization, and can monetize freely. You need to pay for hosting (₹1,500-₹6,000/year).

WordPress.com is a hosted platform where WordPress manages the hosting for you. It's easier to start but has limitations on customization and monetization on free plans. You can upgrade to premium plans for more features.

Recommendation: Use WordPress.org for serious websites and businesses.

The recommended permalink structure is "Post Name" which creates URLs like: yoursite.com/sample-post

Why it's best:

• Clean and readable URLs
• Includes keywords for SEO
• Easy to share and remember
• Preferred by search engines

How to set it: Go to Settings → Permalinks → Select "Post name" → Save Changes

Important: Set this BEFORE publishing content to avoid broken links!

Here are the 5 essential plugins every WordPress site should have:

1. Yoast SEO or Rank Math - For search engine optimization
2. Wordfence Security - For website security and firewall protection
3. UpdraftPlus - For automated backups and easy restoration
4. WP Rocket or W3 Total Cache - For caching and speed optimization
5. Contact Form 7 or WPForms - For creating contact forms

Bonus: Smush (image optimization) and Akismet (spam protection) are also highly recommended.

Minimum Cost (DIY Approach):

• Domain Name (.in): ₹500 - ₹800/year
• Shared Hosting: ₹1,500 - ₹3,000/year
• Free SSL Certificate: ₹0
• Free Theme: ₹0
• Free Plugins: ₹0

Total Minimum: ₹2,000 - ₹3,800/year

Recommended Budget (Better Quality):

• Domain Name (.com): ₹800 - ₹1,200/year
• Good Shared Hosting: ₹3,000 - ₹6,000/year
• Free SSL: ₹0
• Premium Theme (one-time): ₹3,000 - ₹5,000
• Premium Plugins (optional): ₹3,000 - ₹8,000/year

Total First Year: ₹9,800 - ₹20,200

Subsequent Years: ₹6,800 - ₹15,200 (no theme cost)

The top 5 security measures for WordPress:

1. Use Strong Passwords & 2FA
   • Minimum 12 characters
   • Mix of uppercase, lowercase, numbers, symbols
   • Enable two-factor authentication
2. Keep Everything Updated
   • WordPress core updates
   • All plugins and themes
   • PHP version on server
3. Install Security Plugin
   • Wordfence or Sucuri Security
   • Enable firewall protection
   • Regular malware scanning
4. Regular Automated Backups
   • Daily backups using UpdraftPlus
   • Store off-site (cloud storage)
   • Test restore process monthly
5. SSL Certificate (HTTPS)
   • Encrypt data transmission
   • Required for SEO ranking
   • Free via Let's Encrypt

Speed Optimization Techniques:

1. Use a Caching Plugin
   • WP Rocket (paid, ₹4,000/year)
   • W3 Total Cache (free)
   • WP Super Cache (free)
2. Optimize Images
   • Compress before uploading
   • Use Smush or ShortPixel plugin
   • Convert to WebP format
   • Lazy load images
3. Use a CDN (Content Delivery Network)
   • Cloudflare (free plan available)
   • StackPath or BunnyCDN
   • Delivers content from nearest server
4. Minimize Plugins
   • Delete unused plugins
   • Keep only essential ones active
   • Limit to 15-20 plugins maximum
5. Choose Lightweight Theme
   • Astra, GeneratePress, or OceanWP
   • Avoid bloated multipurpose themes
6. Database Optimization
   • Clean up post revisions
   • Remove spam comments
   • Use WP-Optimize plugin

Target: Aim for page load time under 3 seconds!

Security Tip: Only give Administrator access to trusted people. Use lower roles whenever possible.

Easy Method (Using Plugin):

1. Install Duplicator Plugin on old site
2. Create Package: Duplicator → Create New → Scan → Build
3. Download: Both installer.php and archive.zip files
4. Upload to New Host: Via FTP or File Manager
5. Run Installer: Visit yoursite.com/installer.php
6. Follow Wizard: Enter new database details
7. Test Site: Verify everything works
8. Update DNS: Point domain to new host

Manual Method:

1. Export database from phpMyAdmin (old host)
2. Download all files via FTP
3. Create new database on new host
4. Import database to new host
5. Upload files to new host
6. Update wp-config.php with new database details
7. Search-replace old URL with new URL in database
8. Test and update DNS

Recommended Plugins for Migration:

• Duplicator (Free/Pro)
• All-in-One WP Migration (Free/Pro)
• UpdraftPlus (with Migration add-on)

Immediate Steps (Emergency Response):

1. Stay Calm & Assess Damage
   • Don't panic and delete everything
   • Document what you see
   • Take screenshots
2. Take Site Offline (Maintenance Mode)
   • Protect visitors from malware
   • Use coming soon plugin
3. Change All Passwords
   • WordPress admin password
   • FTP/cPanel password
   • Database password
   • Hosting account password
4. Scan for Malware
   • Install Wordfence or Sucuri
   • Run complete scan
   • Identify infected files
5. Restore from Clean Backup
   • Use backup from before hack
   • Test backup first
   • Restore carefully
6. Update Everything
   • WordPress core
   • All themes and plugins
   • Delete unused themes/plugins
7. Harden Security
   • Install security plugin
   • Enable firewall
   • Limit login attempts
   • Enable 2FA
8. Monitor Continuously
   • Check logs regularly
   • Set up alerts
   • Regular security scans

Prevention (Better than Cure):

• Regular backups (daily)
• Keep everything updated
• Use strong passwords + 2FA
• Install security plugin
• Use SSL certificate
• Limit login attempts
• Hide WordPress version
• Regular security audits

When to Hire Professional: If you can't clean the site yourself or hack is severe, hire a WordPress security expert (cost: ₹5,000 - ₹20,000).