4 ms·

I'd give it two weeks until it's hacked. Anybody using Wordpress is asking for trouble.

by pwmanagerdied 17y ago

jeff18 17y ago
I switched away from WordPress to a custom app engine blog package mainly because of this, and the fact that you need to install and maintain at least the SuperCache plugin if you want your WordPress to handle even a modest traffic surge.
- ryanwaggoner 17y ago
  Which takes all of ten clicks to setup and one click every few months to upgrade to the new version.
  - jeff18 17y ago
    My criticism wasn't actually about the plugin installation process, it was about the fact that WordPress requires these fundamental plugins in the first place. "Handling traffic" is kind of a core feature. However, shame on you for encouraging people to install third party plugins without backing up their site. If you want to actually upgrade responsibly, it's a little more than a few clicks: http://codex.wordpress.org/Upgrading_WordPress_Extended http://codex.wordpress.org/Upgrading_WordPress_Extended
    - ryanwaggoner 17y ago
      I was referring to upgrading WP Super Cache. Although upgrading WP itself is pretty easy as well. I have automated rotating backups of files and db that get sent to S3 daily, so I just snapshot them right before the upgrade, which is much easier since WP 2.7
ryanwaggoner 17y ago
You know, I hear this all the time, but can you elaborate on exactly what makes Wordpress so inherently insecure?
- stilist 17y ago
  As a guess: track record?
  - nir 17y ago
    WP have been around for a while, is hugely popular, and many of its vulnerabilities have been discovered and dealt with. Its track record makes it more secure, not less.
filosofo 17y ago
That's not really fair. There have been very few exploits in up-to-date versions of WordPress, and the ones that are found are quickly patched. The news-making hacks of WordPress are almost always of sites running versions significantly outdated.

4 ms·

I'd give it two weeks until it's hacked. Anybody using Wordpress is asking for trouble.

by pwmanagerdied 17y ago

I'd give it two weeks until it's hacked. Anybody using Wordpress is asking for trouble.

jeff18 17y ago
I switched away from WordPress to a custom app engine blog package mainly because of this, and the fact that you need to install and maintain at least the SuperCache plugin if you want your WordPress to handle even a modest traffic surge.
- ryanwaggoner 17y ago
  Which takes all of ten clicks to setup and one click every few months to upgrade to the new version.
  - jeff18 17y ago
    My criticism wasn't actually about the plugin installation process, it was about the fact that WordPress requires these fundamental plugins in the first place. "Handling traffic" is kind of a core feature. However, shame on you for encouraging people to install third party plugins without backing up their site. If you want to actually upgrade responsibly, it's a little more than a few clicks: http://codex.wordpress.org/Upgrading_WordPress_Extended http://codex.wordpress.org/Upgrading_WordPress_Extended
    - ryanwaggoner 17y ago
      I was referring to upgrading WP Super Cache. Although upgrading WP itself is pretty easy as well. I have automated rotating backups of files and db that get sent to S3 daily, so I just snapshot them right before the upgrade, which is much easier since WP 2.7
ryanwaggoner 17y ago
You know, I hear this all the time, but can you elaborate on exactly what makes Wordpress so inherently insecure?
- stilist 17y ago
  As a guess: track record?
  - nir 17y ago
    WP have been around for a while, is hugely popular, and many of its vulnerabilities have been discovered and dealt with. Its track record makes it more secure, not less.
filosofo 17y ago
That's not really fair. There have been very few exploits in up-to-date versions of WordPress, and the ones that are found are quickly patched. The news-making hacks of WordPress are almost always of sites running versions significantly outdated.