4 ms·
> Since most people don't seem to be aware: you can use Wordpress as a mostly-static website generator. > Use WP Super Cache, and most of your pages are static
by seanwilson 5y ago
> Since most people don't seem to be aware: you can use Wordpress as a mostly-static website generator.
> Use WP Super Cache, and most of your pages are static anyway.
This isn't "static" in the sense of a static site generator because your web server is still running code, reading/writing files, sending SQL queries, interpreting URL query parameters (e.g. for search results pages) and injecting data into templates when pages are being viewed. There is a much greater attack area and types of possible attacks.
For example, the caching plugin itself you mentioned has had remote code execution and XSS security holes in the last 6 months and others in the past:
https://patchstack.com/database/vulnerability/wp-super-cache https://patchstack.com/database/vulnerability/wp-super-cache
Many of these kinds of attacks aren't possible when your hosted website is only HTML, CSS, JavaScript with a CDN in front. Saying you think securing WordPress is practical is one thing, but there's a huge difference between dynamic and static.
- Tomte 5y ago> Many of these kinds of attacks aren't possible when your hosted website is only HTML, CSS, JavaScript Had you read the other comments, where I have replied to this misconception several times already, you would have seen that the setup I describe is just that: "your hosted website is only HTML, CSS, JavaScript".
- seanwilson 5y agoI'm replying to "Use WP Super Cache, and most of your pages are static anyway", which means PHP is running each request?
- Tomte 5y agoYou need to read past the second sentence where I explain that WP Super Cache can be configured for fully static operation. Or if three sentences are too much for you, you could read any of the other comments, all made hours before you jumped in with your inane "well-actually".
- deleted 5y ago[deleted]
- seanwilson 5y agoCan you link to anywhere that explains more? Pages are only generated when editors make edits and never from requests from visitors? How do you regenerate when you update the theme and what about tag, category and search pages?