3 ms·
One of my clients currently is moving from CraftCMS to WordPress because the former is too hard to use and maintain. WordPress is for users who precisely don't
by BjoernKW 9y ago
One of my clients currently is moving from CraftCMS to WordPress because the former is too hard to use and maintain.
WordPress is for users who precisely don't want to change code themselves but rather rely on plugins for providing additional features. There's a huge number of high quality WordPress plugins just as there's an even larger number of not so high quality or downright shady or malicious plugins.
Caveat emptor, as with any software you install on your devices. There are resources that help with selecting trustworthy plugins. If you install plugins without so much as a thought though that's a huge security risk because unlike modern operating systems or app stores WordPress itself doesn't really protect you against malicious code.
- andrei_says_ 9y agoCan you point me to resources for trustworthy plugins? IMO trustworthy would likely mean inspectable code.
- BjoernKW 9y agoSure. From the top of my head: https://wordpress.org/plugins/wp-super-cache/ https://wordpress.org/plugins/wp-super-cache/ https://wordpress.org/plugins/limit-login-attempts https://wordpress.org/plugins/limit-login-attempts https://wordpress.org/plugins/wordfence/ https://wordpress.org/plugins/wordfence/ https://wordpress.org/plugins/google-authenticator/ https://wordpress.org/plugins/google-authenticator/ For all of these - and I suppose this applies to most other WordPress plugins as well - the source code can easily be inspected.