4 ms·
That is why WordPress should save you from that. The WordPress team has had an awful attitude about security. They encourage a culture of free templates shared
by lkrubner 16y ago
That is why WordPress should save you from that. The WordPress team has had an awful attitude about security. They encourage a culture of free templates shared widely, without much regard for warning users of the dangers. Most users of WordPress are non-technical, the WordPress team knows this and shows no particular concern about it. WordPress needs to get serious about offering some security checks.
- ceejayoz 16y agoStart checking templates and plugins for `base64_decode` and they'll just start using a new technique to hide these things. The solution is one they've already implemented - a trusted source for templates and plugins on WordPress.org, and the WordPress.com site for folks who really shouldn't be administrating a LAMP environment anyways.
- lkrubner 16y agoThere are several solutions that can be tried, and most of them have been mentioned in this thread already. There is whitelisting, various automated checks, trusted sources, encryption, warnings, attempts at education, etc. None of these suggestions are worth a damn until the WordPress team acknowledges that WordPress security is a major problem, one that should be a top priority for them.
- deleted 16y ago[deleted]
- photomatt 16y agoSecurity is a major issue and it is a top priority for us.