Is there a Deployment Best Practices Document?

[Obi]

I have installed many Prestashop sites and am working on my 2nd ThirtyBees deployment. However, this one is a touch different in that the primary website is WordPress, and because of ticket sales from that installation, it MUST remain the primary site. My original intention was to deploy the TB "shop" site as a subdomain, primarily for security reasons, but after reading a bit more on recent(?) SEO "best practices", the recommendation seems to be that sub-directories are preferred over sub-domains. An ancillary question that I probably should ask is whether anyone else has information that confirms or contradicts this "recommendation". Note: My website management style does not hinge on every breath depending on google, or any other search engine edict, dictate, or notice - but I do want to at least work within the major framework. My philosophy has always been that PEOPLE spend money on website, not crawlers and bots, so using a "People First" approach has always served me well, but I don't want to miss something important because I'm looking past that something important. 

So the simple question is this: Is there a deployment best practices document anywhere on how one should install ThirtyBees in conjunction with a primary Wordpress site?

Thanks All in advance, for any feedback or assistance.

Edited September 20 by Obi

[the.rampage.rado]

I would not mix WP with other websites on the same hosting or subfolder. If they hack your WP they will infect your thirty bees too. Not saying that thirty bees is 100% secure but it's exposure is much much smaller so less bad-actors play with it.

Otherwise you can run it in subdomain, subfolder, any way you like. SEO-wise I don't think the juice will flow differently between both cases.

[datakick]

I very much agree with @the.rampage.rado 

From security point of view, it's much better to install thirty bees into standalone subdomain. I have seen thirty bees sites that were infected because of wordpress installation. Using subdomains has some additional benefits as well. For example, less cookies will be sent -- thirty bees will not receive wordpress cookies. Or misconfiguration in .htaccess within parent (wordpress) directory will not affect thirty bees web. And I'm sure there are more.

Install in in standalone, isolated, subdomain. 

[Obi]

6 hours ago, datakick said:

I very much agree with @the.rampage.rado 

From security point of view, it's much better to install thirty bees into standalone subdomain. I have seen thirty bees sites that were infected because of wordpress installation. Using subdomains has some additional benefits as well. For example, less cookies will be sent -- thirty bees will not receive wordpress cookies. Or misconfiguration in .htaccess within parent (wordpress) directory will not affect thirty bees web. And I'm sure there are more.

Install in in standalone, isolated, subdomain. 

So that was my first impression as well, but since I've been out of the "security" game for a while, I felt it best to ask. And that was prompted because I was researching SEO questions and was told by an SEO person that the method first described (TB subdirectory under WP at root) would provide better SEO "juice"... Now that I have confirmation that it is as bad an idea as I thought - I'm with you chaps!

Isolated sub-domain is the correct answer!

THANKS!!!