This post is the result of hundreds of hours of experience and trial and error using Woocommerce across many different e-commerce websites selling both physical and virtual products. Specifically for the business owner and/or developer who wishes to build a subscription, membership capable e-commerce website that sells virtual products. I hope to provide a comprehensive roadmap for the process and technical aspects using WordPress and Woocommerce. This guide covers the functionality of the an e-commerce membership site. It does not cover how to install WordPress or how to build a front-end website design.

Table of Contents:

1. Initial Setup and Planning
1.a Assumptions
1.b Why Woocommerce?
1.c Woocommerce Extensions
1.d Costs Involved
2. Getting Started – Installing Woocommerce
2.a Installing Woocommerce Extensions
2.b Installing Woocommerce Extensions
2.c Woocommerce Pages
3. Virtual Content
3.a Hosting Virtual Content
3.b Delivering Virtual Content
4. Products
4.a Downloadable Products
4.b Restricted Products
4.c Membership Products
4.d How Do Customers Receive Membership Products?
5. Creating Groups Restricted Content Pages

1. Initial Setup and Planning

1.a Assumptions: This guide is meant to be comprehensive but it may not suit your specific needs or abilities. It is written with the following assumptions regarding your initial setup and technical abilities:*

• WordPress is installed on your website
• FTP Access to WP install
• Understanding of WordPress and a basic understanding of Woocommerce
• Ability to install and configure WordPress plugins (WordPress username with administrator access)
• Basic knowledge of html and css
• Selling virtual and/or downloadable products (As opposed to physical products)
• Permission to upload and sell the virtual products offered on your website

*Tip: If you have any questions about how to get started, consult an experienced web developer.

1.b Why Woocommerce? Woocommerce has a reputation as a great e-commerce platform for WordPress. I have used it for dozens of sites and it has held up well long term production setting. Assuming all plugins are updated regularly, it will provide you with a good long-term platform with minimal maintenance. We will use this powerful plugin as our starting point.

1.c Woocommerce Extensions: Plugin extensions will allow us to build an e-commerce website with the following capabilities:

• Sell individual virtual products such as e-books, audio, video or images
• Sell membership access to some or all content on your website
• Restrict content pages to members and/or single product customers
• Customer account creation and ‘My Account’ page for accessing files and updating personal information
• Subscription recurring billing

*Tip: Take advantage of Woocommerce support if you have any questions while you are setting up your site. In my experience they have been very helpful and responsive

1.d What are the costs involved? The Woocommerce platform is a free plugin. To accomplish our goal of building a membership site selling subscription memberships and individual product purchases, we will utilize the following plugin extensions*:

• Groups – Free
• Groups Woocommerce – $79.00
• Woocommerce Memberships – $149.00
• Woocommerce Subscriptions – $199.00

Total Plugin Investment: $427.00

*Tip: While these plugins are optimized to work together, they can be used independently of one another to suit your specific needs.

There are 3rd party websites that offer the same plugins for less, However I would recommend purchasing from Woocommerce directly. A year of updates and support are provided with a paid license.

2. Getting Started

2.a Installing Woocommerce: Our first step is to install Woocommerce. On a clean WordPress install*, upload and activate the Woocommerce plugin through the default WordPress plugin installation screen. If prompted to do a database update, do so now.

*Tip: While you can add these plugins to an existing site, for our purposes we will start with a new WordPress install to avoid conflict with other plugins.

2.b – Installing Woocommerce Extensions: After Woocommerce is installed and the necessary data upgrades are made, you can begin installing the extension plugins.

Download and Install Groups, Groups Woocommerce, Woocommerce Memberships, and Woocommerce Subscriptions. To download your plugin files, log into your Woocommerce account and click the ‘Download your Products’ link at the top of the My Account page.

Under the ‘Downloads’ tab, scroll down and download the Groups, Memberships and Subscriptions plugins. Upload the plugin .zip files to WordPress by going to Plugins -> Add New. Alternatively, you can upload the plugin folders via FTP.

The order in which you install the plugins does not necessarily matter, only that they are added after Woocommerce is installed. Don’t attempt to configure the plugins before all of the necessary plugin extensions have been installed. That way you are starting with a clean slate and any dependencies will be in place before we begin configuring the settings.

Install and activate the plugins one at a time. After you activate each plugin, refresh your browser window and look at the front end of your website to make sure the installation was successful. Don’t worry about testing the functionality for now. As with installing any plugin, We want to make sure that it doesn’t crash your website.

It is always good to follow best practices when installing any WordPress plugin. Always create a backup of your entire site and database before you make any changes. If a plugin causes your website to crash or you get the ‘white screen of death’, don’t panic. Log into the WordPress installation on your server via FTP. Navigate to wp-content -> plugins and delete the plugin folder that you just installed. Refresh the site several times and clear your browser cache. If that doesn’t do it, go back into FTP and delete the previous plugin and so on until the website comes back. As a last resort, you can restore your backup on a new WordPress install.

Once Woocommerce and all plugin extensions are installed, activate your licenses in the WordPress dashboard by selecting Woocommerce – > Extensions and selecting the ‘Woocommerce.com Subscriptions’ tab at the top. Here you will be able to connect your Woocommerce.com account and enable automatic updates. You might also see an alert at the top of the page, click ‘activate your product subscriptions’.

2.c Woocommerce Pages: It may be possible that upon installation that the pages required by Woocommerce are not present on your site. If you click ‘Checkout’ and are not redirected to the checkout page or you discover the cart page is missing, you need to install the required pages. In your WordPress dashboard, navigate to Woocommerce -> Status and select the ‘Tools’ tab at the top. Scroll down and click the ‘Install Pages’ button under ‘Install WooCommerce pages’.

3. Virtual Content

Now that we’ve set up Woocommerce and all of the necessary extensions, let’s look at the files you will be offering to your customers. Files can be offered as many different types including documents, audio, video, images or a zip file. However, for downloadable products we are limited to WordPress allowed file types only:

• Documents:
  • pdf (Portable Document Format; Adobe Acrobat)
  • .doc, .docx (Microsoft Word Document)
  • .key (Apple Keynote Presentation)
  • .ppt, .pptx, .pps, .ppsx (Microsoft PowerPoint Presentation)
  • .odt (OpenDocument Text Document)
  • .xls, .xlsx (Microsoft Excel Document)
  • .zip
• Audio:
  • .mp3
  • .m4a
  • .ogg
  • .wav
• Video:
  • .mp4, .m4v (MPEG-4)
  • .mov (QuickTime)
  • .wmv (Windows Media Video)
  • .avi
  • .mpg
  • .ogv (Ogg)
  • .3gp (3GPP)
  • .3g2 (3GPP2)

If you are offering a file type that is not allowed by WordPress, try compressing and offering it as a zip file or embedded on a restricted content page.

3.a – Hosting Virtual Content: Virtual content can vary greatly in file size depending on what type of product you are selling. For most files I always recommend hosting with a third party service like Dropbox or Vimeo. That way you can keep large files off of your server preventing any adverse performance issues.

Using Dropbox as an example, upload your file and click the ‘Share’ button. Select ‘Create a link’ to generate a shareable link for that file. This is the link you will use for your downloadable product or to embed into a content restricted page (See chapter 4).

Make sure to set the file to be accessible to anyone who has the link on the share screen. This will ensure a user won’t be blocked from accessing the link once it is delivered.

3.b – Delivering Virtual Content: After a customer makes a purchase, they are assigned a username and password allowing them to become a user on your site. When they log in they are given access to the ‘My Account’ dashboard included with Woocommerce. Here they will have access to all of the content they purchased as well as payment and account details.

Woocommerce should include a ‘My Account’ page when it is installed. You can also add the dashboard to any page by adding the my account shortcode.

4. Products

Once these plugins are installed, you can start setting up your virtual products. There are three types of virtual products: Downloadable, Restricted and Membership. These three product types are distinguished from one another in the way they are presented and delivered to your customers.

• Downloadable – Presented as static file download products. Delivered as file download links that are provided to a customer’s email address and on a username protected ‘My Account’ page.
• Restricted – Presented as access to a page containing embedded virtual content. A single purchase of a virtual product gives access to a restricted WordPress page. Page access is determined by granting groups access tied to the customer’s username.
• Membership – Customers are granted access to a membership plan. This plan determines what pages or products members have access to.

Products can be offered individually or combined. For example, You could have a product that offers download links and access to a restricted page simultaneously.

Create a new product by going to Products -> Add New.

4.a Downloadable Products: After you create a new product, scroll down to the ‘Product Data’ box on the ‘Edit Product’ screen and set the product type to ‘Simple Product’. Make sure the ‘Virtual’ and ‘Downloadable’ boxes are checked.

Now we need to add the download file links that will be provided to your customer. Files are either uploaded directly to WordPress via the ‘Choose file’ button or added by pasting a third party link from a storage service such as Dropbox or Vimeo.

4.b Restricted Products: After you create a new product, on the ‘Edit Product’ screen scroll down to the ‘Product Data’ box and set the product type to ‘Simple Product’. Then check the ‘Virtual’ and ‘Downloadable’ boxes. This will give you fields where you can add your download links along with access to a restricted page.

WordPress pages containing your virtual content are restricted based on a ‘group’ that the user is assigned to upon purchase. Let’s create a new group by going to Groups -> New Group. For now, we just need to give this new group a name. We’ll call it ‘Restricted’. Leave the capabilities option blank. Save the new group.

Next, we’ll create the restricted product. On the ‘Edit Product’ screen, scroll down to the ‘Product Data’ box and set the product type to ‘Simple Product’ and check the ‘Virtual’ box. You have the option to offer this product with download links by clicking the ‘Downloadable’ checkbox.

Next, we need to make use of the Groups plugin and assign a group to this product. In the product data box on the product edit screen, click the ‘Groups’ tab and select the ‘Registered’ group that we just created under the ‘Add to Groups’ field. You can also specify an amount of time that this group access will be valid. This functionality is useful for trial access to a specific page.

4c. Membership products: The purchase of a membership product will give your customers access to a specific membership plan. This plan will grant access to restricted content pages or products based on the customer’s username and password.

Make sure to set up a membership plan before setting up your product. In the WordPress dashboard, go to Woocommerce -> Memberships and create your new product’s membership plan. Set the ‘Grant access upon’ setting to ‘product(s) purchase’.

Next, click the ‘Restrict Content’ tab on the left side and specify the content page that this membership plan gives access to. Only members of this plan will have access to the pages specified.

You can also set up access restrictions to specific products and customize what users see on their ‘My Account’ page to suit your specific needs.

Once your membership plan is set up, navigate back to your new membership product. Edit it and scroll down to the ‘Memberships’ box. Click the ‘Grant Access’ tab. Here you will specify the new membership plan you just created assigning the purchaser of the product to that plan. Once a membership product is purchased, they will then be allowed to access the page(s) assigned to the membership plan.

4.d How do customers receive virtual products? To deliver products to customers, you can use Woocommerce’s built in ‘My Account’ feature. An account is created when a user walks through the checkout process causing account credentials to be assigned. Once a customer purchases your virtual product or signs up for a membership which gives them group access to a product page, they will receive a link via email with a link to their ‘My Account’ Dashboard.

Downloadable file links will be offered under the ‘Downloads’ page link. You can also include them in the customer’s confirmation email by listing them in the product description box on the product edit screen.

5. Creating Groups Restricted Content Pages

5.a Downloadable Products

Content on this restricted page is where customers will be directed after purchase. Links to the page can also be provided via the customer confirmation email by adding them in the product description box on the product page edit screen.

– Groups
– Woocommerce Groups
– Woocommerce Memberships
– Subscriptions

Once these plugins are installed, you can start setting up your virtual products. There are three types of virtual products: Downloadable, Restricted and Membership. These three product types are distinguished from one another in the way they are presented and delivered to your customers.

• Downloadable – Presented as static file download products. Delivered as file download links that are provided to a customer’s email address and on a username protected ‘My Account’ page.
• Restricted – Presented as access to a page containing embedded virtual content. A single purchase of a virtual product gives access to a restricted WordPress page. Page access is determined by granting groups access tied to the customer’s username.
• Membership – Customers are granted access to a membership plan. This plan determines what pages or products members have access to.

Products can be offered individually or combined. For example, You could have a product that offers download links and access to a restricted page simultaneously.

Create a new product by going to Products -> Add New.

Downloadable Products: After you create a new product, scroll down to the ‘Product Data’ box on the ‘Edit Product’ screen and set the product type to ‘Simple Product’. Make sure the ‘Virtual’ and ‘Downloadable’ boxes are checked.

Now we need to add the download file links that will be provided to your customer. Files are either uploaded directly to WordPress via the ‘Choose file’ button or added by pasting a third party link from a storage service such as Dropbox or Vimeo.

Restricted Products: After you create a new product, on the ‘Edit Product’ screen scroll down to the ‘Product Data’ box and set the product type to ‘Simple Product’. Then check the ‘Virtual’ and ‘Downloadable’ boxes. This will give you fields where you can add your download links along with access to a restricted page.

WordPress pages containing your virtual content are restricted based on a ‘group’ that the user is assigned to upon purchase. Let’s create a new group by going to Groups -> New Group. For now, we just need to give this new group a name. We’ll call it ‘Restricted’. Leave the capabilities option blank. Save the new group.

Next, we’ll create the restricted product. On the ‘Edit Product’ screen, scroll down to the ‘Product Data’ box and set the product type to ‘Simple Product’ and check the ‘Virtual’ box. You have the option to offer this product with download links by clicking the ‘Downloadable’ checkbox.

Next, we need to make use of the Groups plugin and assign a group to this product. In the product data box on the product edit screen, click the ‘Groups’ tab and select the ‘Registered’ group that we just created under the ‘Add to Groups’ field. You can also specify an amount of time that this group access will be valid. This functionality is useful for trial access to a specific page.

Membership products: The purchase of a membership product will give your customers access to a specific membership plan. This plan will grant access to restricted content pages or products based on the customer’s username and password.

Make sure to set up a membership plan before setting up your product. In the WordPress dashboard, go to Woocommerce -> Memberships and create your new product’s membership plan. Set the ‘Grant access upon’ setting to ‘product(s) purchase’.

Next, click the ‘Restrict Content’ tab on the left side and specify the content page that this membership plan gives access to. Only members of this plan will have access to the pages specified.

You can also set up access restrictions to specific products and customize what users see on their ‘My Account’ page to suit your specific needs.

Once your membership plan is set up, navigate back to your new membership product. Edit it and scroll down to the ‘Memberships’ box. Click the ‘Grant Access’ tab. Here you will specify the new membership plan you just created assigning the purchaser of the product to that plan. Once a membership product is purchased, they will then be allowed to access the page(s) assigned to the membership plan.

How do customers receive virtual products? To deliver virtual products to your customers, you can use Woocommerce’s built in ‘My Account’ feature. An account is created when a user walks through the checkout process causing account credentials to be assigned. Once a customer purchases your virtual product or signs up for a membership which gives them group access to a product page, they will receive a link via email with a link to their ‘My Account’ Dashboard.

Downloadable file links will be offered under the ‘Downloads’ page link. You can also include them in the customer’s confirmation email by listing them in the product description box on the product edit screen.

This is a snippet from our upcoming video course ‘Building a Woocommerce Membership Site Selling Virtual Downloadable Products’. Learn the whole process of creating a Woocommerce membership site selling virtual products from start to finish.

Sign up to receive 10% off when the course is released!

Leave this field empty if you're human:

Log into your Google account and visit google.com/business. If you don’t already, you will need to set up a Google My Business account.

If you have never used Google My Business, you will see a welcome screen that looks something like this:


Click ‘Start Now’ and search for the name of the business you want to verify in the search box.


If your business pops up then you know the Google listing for this business already exists and you will need to request access from the account that claimed it. If it doesn’t pop up, then you can set up your new page by submitting the current business information.

If you already have a Google My Business account then click ‘Log In‘ in the upper right. This will bring you to the ‘Business Accounts’ which shows all of the pages you currently manage.

To add add your new business to be verified, click the plus sign in the lower right hand corner of the screen. This will bring you to the same listing map page where you can search for the name of the business to be verified. Note: If you have duplicate listings for the same business, you will need to add each listing in order to request access for them separately. If the business listing already exists, it will pop up. Click the business and it will populate the fields with the current business info. Click continue.

Next, you will see an alert that the page has already been verified with options for requesting access to the page. The partially hidden email address is a clue. Sometimes that’s all it takes to remember which email it is verified under. Click ‘Request Ownership‘.


You will then see the form ‘Someone else manages this business on Google.’. Here you will submit basic info regarding your relationship with the business, your name, email and phone should you want them to contact you. Click ‘Submit‘.



Check old emails addresses and those of past employees that may have created the page. I often find that the notice gets sent to the same person who sent it to an old email that they no longer use or forgot they had. If there is no response, you may have to contact Google to track down the listing.

Make sure you are signed into the google account that you want the business listing to be under before proceeding to the next step.

Step 2: Set Up Google My Business

Navigate to google.com/business while logged into your Google account and click ‘Start Now’.


From there you can claim your business listing by entering the name of the business. Current business listings matching the query will display automatically, and it will give you the option of creating a new listing if nothing is found.

John Podesta recently fell victim to a phishing attack and even had confirmation from his IT staff that his Gmail account was in fact hacked and that he needed to change his password immediately. They now say it was a typo, but the reality is that phishing attacks can fool even the most experienced technical users.

The Attack

The popular WordPress security plugin Wordfence recently put out a great article about the technical aspects of the attack and how it is fooling users at all experience levels. This attack targets Gmail users specifically and uses image attachments and subject lines from trusted email addresses you already recognize that may have been compromised using the same technique.

What you can do to prevent these types of attacks

As a matter of habit, you should always check the address bar especially when singing into anything to make sure it is in fact a legitimate site. In this case, the url does contain the URL ‘accounts.google.com’, but a closer look reveals additional code.

From the WordFence article:

This phishing technique uses something called a ‘data URI’ to include a complete file in the browser location bar. When you glance up at the browser location bar and see ‘data:text/html…..’ that is actually a very long string of text. If you widen out the location bar it looks like this:

There is a lot of whitespace which I have removed. But on the far right you can see the beginning of what is a very large chunk of text. This is actually a file that opens in a new tab and creates a completely functional fake Gmail login page which sends your credentials to the attacker.

As you can see on the far left of the browser location bar, instead of ‘https’ you have ‘data:text/html,’ followed by the usual ‘https://accounts.google.com….’. If you aren’t paying close attention you will ignore the ‘data:text/html’ preamble and assume the URL is safe.

Tom Scott recently tweeted about this same attack that he recieved in his email:

From the WordFence article:

When you sign in to any service, check the browser location bar and verify the protocol, then verify the hostname. It should look like this in Chrome when signing into Gmail or Google:

Make sure there is nothing before the hostname ‘accounts.google.com’ other than ‘https://’ and the lock symbol. You should also take special note of the green color and lock symbol that appears on the left. If you can’t verify the protocol and verify the hostname, stop and consider what you just clicked on to get to that sign-in page.

Enable two factor authentication if it is available on every service that you use. GMail calls this “2- step verification” and you can find out how to enable it on this page.

Enabling two factor authentication makes it much more difficult for an attacker to sign into a service that you use, even if they manage to steal your password using this technique. I would like to note that there is some discussion that indicates even two factor authentication may not protect against this attack. However I have not seen a proof of concept, so I can not confirm this.

How will I know if my account is already hacked?

There is no sure way to know if your account has been hacked. When in doubt, change your password. This is a good practice in general anyway, but will rule out the possibility that someone has access to your account.

In addition, you can check your account activity and see if there has been any suspicious activity: https://support.google.com/mail/answer/45938?hl=en

I’ve chosen to host my audio files on dropbox. Using an external dropbox link to embed audio files on your page is pretty straight forward, but requires some modification to the dropbox link itself. Here’s an example of a typical dropbox file link.

https://www.dropbox.com/s/k473kckq88i0mrf/Amazing.mp3?dl=0

Grab the link from dropbox by clicking the ‘Share’ button on the file you want to embed and clicking ‘copy link’.

In order to use this link with the WordPress audio shortcode, change the ‘www‘ to ‘dl‘. Also, remove the ‘?dl=0‘ from the end of the link.

https://dl.dropbox.com/s/k473kckq88i0mrf/Amazing.mp3

This link will work with the WordPress audio shortcode.

[audio src=”audio-source.mp3″] https://dl.dropbox.com/s/k473kckq88i0mrf/Amazing.mp3 [/audio]

I had a client recently receive a negative review from a customer on Yelp!. Their business listing was complete, verified and overall looked good but because there were no reviews, one negative rating became the primary influencer of the entire listing. It was the first thing people saw when they came to the page. I suggested they tap into their email list and simply ask people to review the business. They sent it in the form of an informal follow-up email asking for a Google plus review of their business along with a direct link to the review form. They also sent a separate email to the other half of their list with a link to their Yelp! page.

After sending the emails, about 90 percent of the people either ignored or replied saying they would review, but never followed through. As a result, the small number of reviews we did receive had a big impact. For the Yelp! listing, four 5 star reviews came in and pushed the negative review off the first page. Google plus received three reviews adding to the others that were already there – and a huge improvement of the overall credibility of the listing.

People are generally glad to review your business

In general, past and current clients are willing and often glad to review your business. One or several positive reviews can instantly increase the credibility and overall efficacy of a business listing. Of course, you want to be discretionary about who you ask. You don’t want to spam your entire email list asking for a review. You want to make sure they had a positive experience with your business and that they may leave a positive comment. Chances are once you start going through your list, names will start popping out.

“You can please some of the people all of the time, you can please all of the people some of the time, but you can’t please all of the people all of the time.”

― John Lydgate

It’s really not too difficult to ask people to review your business. You don’t need a big email list or any email list at all. Open your Outlook address book and get a small list of past clients who you think might be able and willing to give you a positive review. You might be surprised with the feedback you get.

Want to discuss further? Get in touch! We’d be glad to answer any questions.

This is much easier and less technical than it seems. This short blog post covers how to do it.

Step 1: Navigate to your Google Plus business page and copy the URL. It should look something like this:
https://plus.google.com/106985568135521918318/posts

Step 2: Add this to the URL right after ‘posts’ (without the quotes): “?hl=en&review=1”

Your new URL will look like this:
https://plus.google.com/106985568135521918318/posts?hl=en&review=1

This link will take the user to your Google Plus page and will pop open the review box. This link can be shortened and used in an email newsletter blast or shared privately with past clients.

This may seem simple, but the implications are big. When you ask your client to leave a review on your Google Plus page, you are getting real reviews from real people. While some people like to leave reviews on businesses they like, many do not. Sending them this targeted link will eliminate one step and send them directly to the review box.

The circus that is pre-election politics begins no less than one year before a general election. Major network news agencies like Fox News and CNN have been hosting record breaking televised debates. These major news agencies likely spend a lot of money on their website and online marketing. Millions tune into their televised debates and their website, they know that they have to keep the messaging on their website and TV programming in conjunction with one another.

On October 13th, 2015, CNN aired the first Democratic Presidential Debate. As a web interaction designer, I tend to view websites a certain way. Looking at the CNN homepage that night, I noticed a major change in the layout of the CNN homepage during the debate. The changes in layout reflect what information CNN is trying to bring to the viewer’s attention first.

Studies show that “Web users spend 69% of their time viewing the left half of the page and 30% viewing the right half. A conventional layout is thus more likely to make sites profitable.”

CNN has used this principal during important programming like presidential debates to feature it using the large jumbotron image.

Notice the main image on the homepage to the left of the screen. This is where the user’s eyes go first. The user sees the main image featuring CNN’s primetime debate. The news list that normally occupies the left side, goes to the right side of the screen as it is not as important during the debate. The background image changes to a striking dark color to bring additional contrast and emphasis to the programming.

After the debate, the homepage returns to it’s normal layout with the news list occupying the highest converting area of the webpage on the left.

There is no automated way to take care of WordPress and it’s plugins. Updates must be carried out manually and with the watchful eye of a web professional. This is because updates to the WordPress core and updates to plugins can cause site issues. For this reason it is important to have a backup made before carrying out any updates.

“An ounce of prevention is worth a pound of cure.” – Benjamin Franklin

There is a lot of talk on the web and use of scary terms like “Ransom-ware” and “Malware”. These are real threats and deserve real attention, however, don’t let them scare you. Let the web professionals take care of it for you! They are hard at work making sure criminals cant get a hold on their systems. Having a sensible update program and simply being prepared can prevent most serious issues from ever affecting your website.