The 8
                     Don'ts
                     of WCM
                     An Insider's Perspective




                                                                                Cédric Hüsler
Photo: Craig Allan




                      OVUM Butler Group Web Content Management Strategy Briefing - Nov 2009 - London
Cédric

       Cédric Hüsler
                                                                Marketing
                                           Directo r of Product
                                   er
                       Cédric Hüsl
                                    .com
                       cedric@day



     @keepthebyte

In Web Content Management since 1999.
Headquarter in Basel [Switzerland] and Boston [US]
Founded 1993 - publicly traded since 2001 [DAYN]
World-wide 130 employees
+200 customers
#fail

#fixwcm
#futurewcm
Not talking about:
You don’t know what you want
Ever-changing goals
People on the job don’t have the skills
Doing project management via e-mail
Product has bugs and bad documentation
Trying to get the cheapest deal and then complain
1.
     Content Editing
     Apply Formating
     WYSIWYG
     In-context
In-Context Editing?
Can you find the difference?
2.
     URLs
     Links
     Stateless
     REST
http://maps.google.com/maps?
   f=q&source=s_q&hl=en&geocode
     =&q=Barf%C3%BCsserplatz,
   +Basel&sll=47.46217,8.06375&ssp
   n=0.540356,1.098633&ie=UTF8&hq
    =&hnear=Barf%C3%BCsserplatz,
      +Basle,+Switzerland&z=16

                  vs.
http://map.search.ch/basel/barfuesserplatz
.../product.jsp?id=12346

                Mistake 1  :          Mistake 2:         Mistake 3:
          Addressing the        .jsp? What the
                         “Script”              heck? Does it have a name?




    /cars/audi/s4.details.html

your IA                                  what to display      format -
                                                        ?    what a PDF?
3.
     Permissions
     Moderation
     UGC
     XSS Attack
Permissions drive Primary
Content/Navigation Structure?

 1   Less permissions are better


 2   Instead better review of changes [workflow?]
Moderation of UGC?

                      DMZ                          Intranet
                 Production                        Authoring

     user generated            propagate content
            content     to authoring environment


                              publish approved
                              content
             displays
            clean co only
                    ntent
                                                     full workrtow
                                                              fl
                                                         suppo
#1 Attack Vector on Web-Apps:
Cross Site Scripting (XSS)

<div class=”comment”>
  Check out this site
            <a href=”javascript:alert(‘ha’)”>this</a> site
</div>


<div class=”comment”>
  Look at my profile <img src=”javascript:alert(‘ha’)”>
</div>


<div class=”comment”>
  Cool <b>stuff</b>
       <b onload=”alert(‘ha’)”>stuff</b>
</div>
4.
     is anybody here
     Statistics
     Feedback
     Comments
Stats Hero
   Office of the CTO
                       miles   Author
                                 real-life
Let your prospect decide.


      Your rs
    designe

                      Your s
                      HiPPO

       Your it
     f avour
5.   Navigation
     Tagging
     Search
Quiz:
Are You a Filer or a Piler?




 A filer is a person who organizes information using a rigid structure, and a piler
   is someone who maintains a mostly unstructured information organization.
6.
     Setup
     Backup/Restore
     Disaster Recovery
...but you install only once!



        my laptop             eval-server          dev1           dev2




        quality               integration       production     production
       assurance                                  author         publish




               clean             having fun       packing my    cq5 including
       install to reproduce   at home with cq
             an issue                              own app       custom app
Disaster Recovery
Process?
           “Ostrich”-style
7.
     Dev: PHP
     Author: .Net
     Live: Java
     You ?
1   Run the same platform in authoring and live


2   In-house skills inline with technology used?
8.
     Collapse
     Load-testing
     Finger Pointing
     Performance
Project   System   Business     Java      Product
 Manager   Admin     Owner     Developer   Vendor




     The Grand

Finger Pointing
“The performance Dialogs”


 Developer
  performance lab
                         miles         User
                                       real-life



                    bridging the gap




    built-in profilers
4000 mil




  2000 mil




     0 mil
                              Jan     April   July


How many     do I order in January?
Use Cloud Computing
What do you think?
(      ...more information on
                      http://www.day.com         )


Agility Matters.
For Business, For Authors, For Developers, For Infrastructure



                    Cédric Hüsler
            (      cedric@day.com                )

The 8 Don'ts of WCM

  • 1.
    The 8 Don'ts of WCM An Insider's Perspective Cédric Hüsler Photo: Craig Allan OVUM Butler Group Web Content Management Strategy Briefing - Nov 2009 - London
  • 2.
    Cédric Cédric Hüsler Marketing Directo r of Product er Cédric Hüsl .com cedric@day @keepthebyte In Web Content Management since 1999.
  • 3.
    Headquarter in Basel[Switzerland] and Boston [US] Founded 1993 - publicly traded since 2001 [DAYN] World-wide 130 employees +200 customers
  • 4.
  • 5.
    Not talking about: Youdon’t know what you want Ever-changing goals People on the job don’t have the skills Doing project management via e-mail Product has bugs and bad documentation Trying to get the cheapest deal and then complain
  • 6.
    1. Content Editing Apply Formating WYSIWYG In-context
  • 7.
  • 8.
    Can you findthe difference?
  • 9.
    2. URLs Links Stateless REST
  • 10.
    http://maps.google.com/maps? f=q&source=s_q&hl=en&geocode =&q=Barf%C3%BCsserplatz, +Basel&sll=47.46217,8.06375&ssp n=0.540356,1.098633&ie=UTF8&hq =&hnear=Barf%C3%BCsserplatz, +Basle,+Switzerland&z=16 vs. http://map.search.ch/basel/barfuesserplatz
  • 11.
    .../product.jsp?id=12346 Mistake 1 : Mistake 2: Mistake 3: Addressing the .jsp? What the “Script” heck? Does it have a name? /cars/audi/s4.details.html your IA what to display format - ? what a PDF?
  • 12.
    3. Permissions Moderation UGC XSS Attack
  • 13.
    Permissions drive Primary Content/NavigationStructure? 1 Less permissions are better 2 Instead better review of changes [workflow?]
  • 14.
    Moderation of UGC? DMZ Intranet Production Authoring user generated propagate content content to authoring environment publish approved content displays clean co only ntent full workrtow fl suppo
  • 15.
    #1 Attack Vectoron Web-Apps: Cross Site Scripting (XSS) <div class=”comment”> Check out this site <a href=”javascript:alert(‘ha’)”>this</a> site </div> <div class=”comment”> Look at my profile <img src=”javascript:alert(‘ha’)”> </div> <div class=”comment”> Cool <b>stuff</b> <b onload=”alert(‘ha’)”>stuff</b> </div>
  • 16.
    4. is anybody here Statistics Feedback Comments
  • 17.
    Stats Hero Office of the CTO miles Author real-life
  • 19.
    Let your prospectdecide. Your rs designe Your s HiPPO Your it f avour
  • 20.
    5. Navigation Tagging Search
  • 21.
    Quiz: Are You aFiler or a Piler? A filer is a person who organizes information using a rigid structure, and a piler is someone who maintains a mostly unstructured information organization.
  • 22.
    6. Setup Backup/Restore Disaster Recovery
  • 23.
    ...but you installonly once! my laptop eval-server dev1 dev2 quality integration production production assurance author publish clean having fun packing my cq5 including install to reproduce at home with cq an issue own app custom app
  • 24.
    Disaster Recovery Process? “Ostrich”-style
  • 25.
    7. Dev: PHP Author: .Net Live: Java You ?
  • 26.
    1 Run the same platform in authoring and live 2 In-house skills inline with technology used?
  • 27.
    8. Collapse Load-testing Finger Pointing Performance
  • 28.
    Project System Business Java Product Manager Admin Owner Developer Vendor The Grand Finger Pointing
  • 29.
    “The performance Dialogs” Developer performance lab miles User real-life bridging the gap built-in profilers
  • 30.
    4000 mil 2000 mil 0 mil Jan April July How many do I order in January?
  • 31.
  • 32.
  • 33.
    ( ...more information on http://www.day.com ) Agility Matters. For Business, For Authors, For Developers, For Infrastructure Cédric Hüsler ( cedric@day.com )