Before a site goes live.
TECHNICAL
PHP version current and supported Required extensions enabled
Limits adequate: memory, execution time, input vars
HTTPS issued and enforced site-wide No mixed content
Permissions correct: 755 and 644, nothing at 777
Configuration files unreachable over HTTP The .git directory removed from the web root
APPLICATION
Debug mode off Error display off, error logging on Test credentials replaced with live ones Search engine indexing enabled, having been disabled on staging Email sending configured through SMTP and tested Cron jobs created and verified
CONTENT AND FUNCTION
Every page type loads Every form submits and delivers Login works Checkout completes, if applicable Tested on a phone
OPERATIONS
Backups configured and verified running Monitoring configured with alerts reaching you Documentation written Rollback procedure known
THE ONE MOST OFTEN MISSED
Search engine indexing left disabled from staging. The site is live and invisible for weeks.
