5 ms·

I only briefly experimented with WooCommerce, so please correct me if any of this is incorrect. My general issue with WooCommerce is being locked into Wordpres

by cepth 8y ago

I only briefly experimented with WooCommerce, so please correct me if any of this is incorrect. My general issue with WooCommerce is being locked into Wordpress. I’m not a Wordpress expert, and it’s very difficult to determine when a security vulnerability (http://www.cvedetails.com/vulnerability-list.php?vendor_id=2337&product_id=4096&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&month=0&cweid=0&order=1&trc=277&sha=f7e9f236634d1e8f8f1588d8b60868d41a0af790 http://www.cvedetails.com/vulnerability-list.php?vendor_id=2...) is serious enough to justify upgrading my WP version, which may break compatibility with not-yet-updated plugins. Small and medium is also in the eye of the beholder I guess. If you’re selling less than a dozen items, with no need for configurable products, advanced pricing rules, bulk discounts etc, then Magento is probably overkill.

pacifika 8y ago
Prioritise upgrading WordPress over badly maintained plugins.
partiallypro 8y ago
Simple fix, always keep your Wordpress up to date, I don't know why people in the CMS world have fallen into the trap of not upgrading. Drupal for example is notoriously hard to upgrade on point releases, Magento isn't much easier. Wordpress is fairly seamless, couple that with Cloudflare and your site is pretty secure from attack. I also don't see how you can be "locked into" Wordpress either, it's actually one of the easiest CMSs to migrate into and out of. It gets flack for being widely used and running on PHP (so does Magento,) but it's widely used for a reason.
- cepth 8y ago
  So, for an extension like Shipstation, which is how many ecommerce sites manage postage and labeling, I see that they haven't updated their extension since last year: https://woocommerce.com/products/shipstation-integration/ https://woocommerce.com/products/shipstation-integration/. The listed compatibility is with WooCommerce 3.3. Put yourself in the shoes of an ecommerce site operator. When a Wordpress minor release like 4.9 comes out, do I upgrade or not? How do I balance the security patches with the potential of breaking a critical part of my workflow? EDIT: I meant WC 3.3. 4.1.19 was actually the plugin version

by cepth 8y ago

pacifika 8y ago

Prioritise upgrading WordPress over badly maintained plugins.

partiallypro 8y ago

Simple fix, always keep your Wordpress up to date, I don't know why people in the CMS world have fallen into the trap of not upgrading. Drupal for example is notoriously hard to upgrade on point releases, Magento isn't much easier. Wordpress is fairly seamless, couple that with Cloudflare and your site is pretty secure from attack. I also don't see how you can be "locked into" Wordpress either, it's actually one of the easiest CMSs to migrate into and out of. It gets flack for being widely used and running on PHP (so does Magento,) but it's widely used for a reason.

cepth 8y ago
So, for an extension like Shipstation, which is how many ecommerce sites manage postage and labeling, I see that they haven't updated their extension since last year: https://woocommerce.com/products/shipstation-integration/ https://woocommerce.com/products/shipstation-integration/. The listed compatibility is with WooCommerce 3.3. Put yourself in the shoes of an ecommerce site operator. When a Wordpress minor release like 4.9 comes out, do I upgrade or not? How do I balance the security patches with the potential of breaking a critical part of my workflow? EDIT: I meant WC 3.3. 4.1.19 was actually the plugin version