4 ms·
Seriously, any flavor of WordPress is just a breach waiting to happen. It's not a question of "if", it's a question of "when". I understand that it's easy to u
by Turing_Machine 5y ago
Seriously, any flavor of WordPress is just a breach waiting to happen. It's not a question of "if", it's a question of "when".
I understand that it's easy to use from a writer's point of view (after you get it installed, or if someone else is installing it for you), and that there are all kinds of third-party plugins and support available, but man, that codebase is a gigantic steaming pile of technical debt.
- tyingq 5y agoIt is much better than it used to be. They seem to have finally gotten automatic updates of the core and plugins working reasonably. But, yes, there's some pretty ugly stuff in there. Like things that appear to be proper parameterized SQL queries, but are not if you look behind the curtain: https://github.com/WordPress/WordPress/blob/807cba060e30a6707aa7ffc7baafa60da4b4e0ba/wp-includes/wp-db.php#L1334 https://github.com/WordPress/WordPress/blob/807cba060e30a670...
- collinmanderson 5y agoStill no 2FA out of the box though :/ Emailing a code is way better than nothing.