Choose a supported combination
Check compatibility between WordPress, PHP, the database and plugins. Use maintained sources and keep staging close to production. A control panel does not replace patching or backup responsibilities.
Arrange data and permissions
Give the site a separate database account with required privileges only. Restrict administration and avoid unrestricted directory write permissions. Back up uploads and the database consistently; verify upload limits, scheduled tasks and outbound email configuration.
Test anonymous and signed-in users
Evaluate caching for public pages. Exclude carts, checkout, account pages and personalized responses according to plugin guidance. Use two accounts to ensure private content is never shared through a cache. Measure query and plugin time before optimizing.
Complete functional acceptance
Check HTTPS, permalinks, forms, password resets, search and mobile layout. Test commerce order states in the payment provider test mode before following its production activation process. Maintain a plugin inventory and rehearse restoration and updates in staging.