4 ms·

Not sure why this is the top comment. Set the permissions to read only and update via composer

• burnte 3y ago
  Agreed, Wordpress is one of the leading CMSs, and with proper security it's fine. Any half-baked cache app will do what this commenter recommends anyway. Some people still irrationally hate PHP and WP.
  • javchz 3y ago
    In my experience the vas majority of security attacks to WP sites are plugin related. But blaming WP and php for that is like bashing linux for users installing random binary files with sudo.
    • burnte 3y ago
      Precisely my point as well. Everything is bad when done poorly. :D
• xp84 3y ago
  Seems like a lot of work to still have a slow site, wasting tons of CPU to dynamically generate a site when most such sites stay static for days to months. Yes, you can probably install cache plugins to work around this but everyone is pointing out how you have to be super careful with plugins. If you don’t need a super dynamic site, Wordpress exposed to the Internet is an unnecessary choice. And it does have 0-days sometimes, so just “being perfect about updating, and knowing what plugins are trash and avoiding them” isn’t 100% adequate to keep your WP site secure.