3 ms·

Can't reply to stephenr because comment thread is too deep, but it's perfectly possible to run WordPress without write permissions anywhere near executable code

Can't reply to stephenr because comment thread is too deep, but it's perfectly possible to run WordPress without write permissions anywhere near executable code and then to schedule automatic updates at a different privilege level. Since this is done extremely rarely, that leads me to believe that its more of a cultural problem (perhaps with the WordPress team, even) than a technical one. Spent 5 years in shared PHP web hosting, can confirm that most of the people are muddling through with the bare minimum of understanding to get WordPress going.

stephenr 8y ago
> schedule automatic updates at a different privilege level That is inherently not the default for wordpress, and at that point you may as well be installing via deb/rpm. I didn’t say scheduled updated are bad I said a self writable web app is a fucking security nightmare.
reificator 8y ago
> Can't reply to stephenr because comment thread is too deep I've found that clicking a comment's timestamp to view a permalink to it will usually allow replying.