4 ms·
Years ago (2006-2013) I ran a personal site that used Wordpress for its front page/blog, with the remainder using very simple hand-rolled PHP templating and tex
by kitsunesoba 7y ago
Years ago (2006-2013) I ran a personal site that used Wordpress for its front page/blog, with the remainder using very simple hand-rolled PHP templating and text files. The front page was a constant source of trouble — if I didn’t stay perfectly on top of keeping Wordpress up to date I’d get hit with the same kind of hidden link stuff mentioned in the article. Crazy thing is that my site barely even had an audience to speak of… can’t imagine what it must be like for more popular blogs.
If I were to spin up a new personal site I think it’d be with something like gohugo.io deployed on Netlify, making it as static as possible with no room for exploits.
- walshemj 7y agoHappened to some of the sites I looked after - its when your SERP snippet changes and you see traffic for pharma and porn terms.
- lunchables 7y agoI think security is one of the reason that static CMS have become so popular. Also it lets you easily separate content from the CMS (in the form of markdown, asciidoc, rst) and, maybe most importantly, it makes it very, very fast and makes it easy (and cheap) to host almost anywhere. I use hugo with aws s3 bucket static web hosting + cloudfront currently. Costs me absolutely nothing with the AWS free tier (5GB of S3 and 50GB of cloudfront free per month). Generate the site in hugo then use the aws cli tools to sync to s3. Because it's almost entirely html with very few images I don't think I could ever hit those AWS free tier limits. edit: I actually just checked and the free tier is only 12 months. My last months bill total was $0.01 for s3.