4 ms·

> The world doesn't need 60,000+ badly-written buggy insecure WordPress plugins. The world might not, but site operators think they do. It's the biggest appeal

• Gordonjcp 4y ago
  You're right, and "think" is doing a lot of work there. Everyone wants their very own special magic guestbook plugin or some damn thing, and they're often very much a "my first PHP module" thing. So it's hardly surprising that they're not the best code or written with particularly safe practices in mind. Guddling about on some old disks a few months ago I found some of the very first PHP3 code I ever wrote, and it's one big SQL injection from start to finish. The 90s were a simpler time... Roughly half the 404s on the forum I run are some attempt to access WordPress admin pages, which I guess must tell us something.
• unity1001 4y ago
  > The world might not, but site operators think they do Well. Considering how WP is basically ~50% of all websites on the planet, that would indeed classify its 'the world' who thinks that they need those 'badly-written' (whatever that means), buggy (is there non-buggy code anywhere), insecure (any software that gets used by 50% of the Internet without security issues?) WordPress plugins. ... Really, his/her perspective just feels like a junior dev's perspective. Or the perspective of a senior dev who never had to take at least a position like a tech lead. And god forbid any kind of actual interaction with the end users in a given ecosystem.