8 ms·
I’m not in this space anymore but 15 years ago backdoored wp themes was par for the course. Interesting to see how things have changed.
by throwthere 5y ago
I’m not in this space anymore but 15 years ago backdoored wp themes was par for the course.
Interesting to see how things have changed.
- jacquesm 5y agoMore interesting to see how they didn't!
- tannhaeuser 5y agoPlugin and theme vendors DDOSing each other via their WP plugin code (that is, via your WP site), where one vendor is supposedly selling other vendor's plugin/theme, is a thing [1] (2019), so idk where you get the notion that things have changed ;) The whole "plugin" idea, where customization code can basically modify and monkey-patch whatever functionality it desires, has to go away, in WP and elsewhere. SGML has a concept of declarative pipelined markup stream processors to decorate and augment base HTML in a structured and bounded way. A "theme" should ideally only consist of CSS not arbitrary PHP. But I guess WP is a lost case, and has been for 20 years, in this regard. [1]: https://www.jemjabella.co.uk/2019/security-alert-pipdig-insecure-ddosing-competitors/ https://www.jemjabella.co.uk/2019/security-alert-pipdig-inse...