About wp plugins : there is no quality control whatsoever in plugins published on wordpress.org . One should review the code before installing one. Unfortunatl

About wp plugins : there is no quality control whatsoever in plugins published on wordpress.org . One should review the code before installing one. Unfortunatly, because of the architecture of Wordpress and PHP , there is not "sandboxing" possible for plugins. However , always separate a wordpress blog or any downloaded scripts from the rest of your apps. they should not have access to anything but their space and their own database on the server. A good architecture for a plugin system would be that the plugin uses some kind of DSL(like a template language , so no direct php) , and the core should be able to manage plugin rights ( like : "can read database" , "can write database" , "can write files" , ... ). A slideshow plugin should not be able to write files, or ever write to the database. I'm really thinking about trying to develop such a system , with security at the core, which is not the case of Wordpress.