3 ms·

> it allows you to not update immediately to patch a vulnerability, because the site is not the one publicly accessed? Exactly. You can never update a vulnerab

> it allows you to not update immediately to patch a vulnerability, because the site is not the one publicly accessed? Exactly. You can never update a vulnerable plugin if you don't want to.

stephenr 9y ago
Right. Doesn't this just make your "admin" site the target then?
- zener79 9y ago
  The "admin" lives in a random-generated subdomain, is basic-auth protected and is alive only for the time needed for the editor to make the changes through the dashboard. For the rest of the time WordPress simply doesn't exist.
  - spleenteo 9y ago
    brilliant
deleted 9y ago
[deleted]