4 ms·
How much expertise do you need though? The minute you start installing plugins you're putting in a way to hack the site. WordPress core is pretty well examined
by rstupek 5y ago
How much expertise do you need though? The minute you start installing plugins you're putting in a way to hack the site. WordPress core is pretty well examined for bugs at this point but the ecosystem is rife with security issues
- pacifika 5y agoRemove write access so the web user can’t write files and run a cron job. this is what I run overnight personally: ``` wp plugin update-all; wp theme update --all; wp core update; wp language core update; wp language plugin update --all; wp language theme update --all; wp core update-db --network; ```
- falcolas 5y agoRemoving write access creates a metric ton of its own issues, not limited to hosing the ability for content creators to upload data (without specific exceptions). You're also in a space where few actually tread. Even technologists on HN.
- boudin 5y agoIt's true about anything having a plugin or module system though, not just WordPress. The age of WordPress + the massive community around it might make the risk higher than some other technologies but that doesn't make this problem specific to WordPress.