3 ms·

For static site generators take a look at Jekyll. For a CMS, maybe consider CraftCMS. I personally wouldn’t touch WordPress. It is easy to install but i’ve Fo

For static site generators take a look at Jekyll. For a CMS, maybe consider CraftCMS. I personally wouldn’t touch WordPress. It is easy to install but i’ve Found it near impossible to change (spaghetti code by design) and don’t trust the plugin code malware-wise and security-wise.

mattbgates 9y ago
WordPress 4.9... no longer allows you to edit any code through their editor. You have to edit it through FTP. This change screwed my site up badly to the point where I had it so customized, I basically spent a weekend just finding a theme, only uploading bits and pieces of the database at a time, just to get it working again. I was about ready to switch to Medium.com to let them handle my website... but the did away with custom domains. But it is pretty much now.. I cannot customize anything on WordPress anymore the way I am used to.. and everything has to be done with plugins. I don't mind a few plugins, but there were just some plugins that were unnecessary and I could just write the script myself to handle certain things. So... I am still using WordPress, this move was done basically to protect people from themselves. But I feel it should have been optional.. don't force me to be unable to edit certain files, especially in the WordPress editor itself. I certainly miss the freedom of being able to write scripts and do as I please with my WordPress install. That is why I'm not on WordPress.com and opted for my own website. Not saying I can't still do some of it, but going forward with WordPress updates.. nothing can guarantee that my scripts will work from version to version.
- Hoasi 9y ago
  > WordPress 4.9... no longer allows you to edit any code through their editor. WordPress 4.9 still allows you to edit your templates through the editor. Although it shows you a warning if you want to do so it is still possible to change and save your templates.
  - mattbgates 9y ago
    I was never able to edit after... always had the spinning wheel and then tells me that I need to edit it via FTP.
BjoernKW 9y ago
One of my clients currently is moving from CraftCMS to WordPress because the former is too hard to use and maintain. WordPress is for users who precisely don't want to change code themselves but rather rely on plugins for providing additional features. There's a huge number of high quality WordPress plugins just as there's an even larger number of not so high quality or downright shady or malicious plugins. Caveat emptor, as with any software you install on your devices. There are resources that help with selecting trustworthy plugins. If you install plugins without so much as a thought though that's a huge security risk because unlike modern operating systems or app stores WordPress itself doesn't really protect you against malicious code.
- andrei_says_ 9y ago
  Can you point me to resources for trustworthy plugins? IMO trustworthy would likely mean inspectable code.
  - BjoernKW 9y ago
    Sure. From the top of my head: https://wordpress.org/plugins/wp-super-cache/ https://wordpress.org/plugins/wp-super-cache/ https://wordpress.org/plugins/limit-login-attempts https://wordpress.org/plugins/limit-login-attempts https://wordpress.org/plugins/wordfence/ https://wordpress.org/plugins/wordfence/ https://wordpress.org/plugins/google-authenticator/ https://wordpress.org/plugins/google-authenticator/ For all of these - and I suppose this applies to most other WordPress plugins as well - the source code can easily be inspected.

mattbgates 9y ago

WordPress 4.9... no longer allows you to edit any code through their editor. You have to edit it through FTP. This change screwed my site up badly to the point where I had it so customized, I basically spent a weekend just finding a theme, only uploading bits and pieces of the database at a time, just to get it working again. I was about ready to switch to Medium.com to let them handle my website... but the did away with custom domains. But it is pretty much now.. I cannot customize anything on WordPress anymore the way I am used to.. and everything has to be done with plugins. I don't mind a few plugins, but there were just some plugins that were unnecessary and I could just write the script myself to handle certain things. So... I am still using WordPress, this move was done basically to protect people from themselves. But I feel it should have been optional.. don't force me to be unable to edit certain files, especially in the WordPress editor itself. I certainly miss the freedom of being able to write scripts and do as I please with my WordPress install. That is why I'm not on WordPress.com and opted for my own website. Not saying I can't still do some of it, but going forward with WordPress updates.. nothing can guarantee that my scripts will work from version to version.

Hoasi 9y ago
> WordPress 4.9... no longer allows you to edit any code through their editor. WordPress 4.9 still allows you to edit your templates through the editor. Although it shows you a warning if you want to do so it is still possible to change and save your templates.
- mattbgates 9y ago
  I was never able to edit after... always had the spinning wheel and then tells me that I need to edit it via FTP.

BjoernKW 9y ago

One of my clients currently is moving from CraftCMS to WordPress because the former is too hard to use and maintain. WordPress is for users who precisely don't want to change code themselves but rather rely on plugins for providing additional features. There's a huge number of high quality WordPress plugins just as there's an even larger number of not so high quality or downright shady or malicious plugins. Caveat emptor, as with any software you install on your devices. There are resources that help with selecting trustworthy plugins. If you install plugins without so much as a thought though that's a huge security risk because unlike modern operating systems or app stores WordPress itself doesn't really protect you against malicious code.

andrei_says_ 9y ago
Can you point me to resources for trustworthy plugins? IMO trustworthy would likely mean inspectable code.
- BjoernKW 9y ago
  Sure. From the top of my head: https://wordpress.org/plugins/wp-super-cache/ https://wordpress.org/plugins/wp-super-cache/ https://wordpress.org/plugins/limit-login-attempts https://wordpress.org/plugins/limit-login-attempts https://wordpress.org/plugins/wordfence/ https://wordpress.org/plugins/wordfence/ https://wordpress.org/plugins/google-authenticator/ https://wordpress.org/plugins/google-authenticator/ For all of these - and I suppose this applies to most other WordPress plugins as well - the source code can easily be inspected.