3 ms·
My experience of WordPress is that the core is now very secure. These days, it's easier to find exploits in the plugins and templates.
by blowski 10y ago
My experience of WordPress is that the core is now very secure. These days, it's easier to find exploits in the plugins and templates.
- goatherders 10y agoAgreed. I tell people often that properly applying updates and using plugins and themes from trusted developers in conjunction with a service like Sucuri or WP Extra Care makes your site as close to impenetrable as is realistically possible.
- pbhjpbhj 10y agoOr on shared hosts via a genuine account on the same server?
- dangerboysteve 10y agoVery true! if you every look at http error logs on a WP site it's full of bots trying plugin paths.
- stephenr 10y ago> the core is now very secure I wouldn't call inventing their own user-land parameterised queries "secure": https://github.com/WordPress/wordpress-develop/blob/master/src/wp-includes/wp-db.php#L1291 https://github.com/WordPress/wordpress-develop/blob/master/s...