4 ms·

Hexadesigns, I don't want to be rude, but, first learn how to spell WordPress properly. You are still using PHP for your website? You can make WordPress secure

• rstupek 5y ago
  How much expertise do you need though? The minute you start installing plugins you're putting in a way to hack the site. WordPress core is pretty well examined for bugs at this point but the ecosystem is rife with security issues
  • pacifika 5y ago
    Remove write access so the web user can’t write files and run a cron job. this is what I run overnight personally: ``` wp plugin update-all; wp theme update --all; wp core update; wp language core update; wp language plugin update --all; wp language theme update --all; wp core update-db --network; ```
    • falcolas 5y ago
      Removing write access creates a metric ton of its own issues, not limited to hosing the ability for content creators to upload data (without specific exceptions). You're also in a space where few actually tread. Even technologists on HN.
  • boudin 5y ago
    It's true about anything having a plugin or module system though, not just WordPress. The age of WordPress + the massive community around it might make the risk higher than some other technologies but that doesn't make this problem specific to WordPress.