35 ms·

any cms as widely used as wordpress is going to have regular RCE vulnerabilities. Wordpress core is well-debugged, and no matter how much better engineered a re

any cms as widely used as wordpress is going to have regular RCE vulnerabilities. Wordpress core is well-debugged, and no matter how much better engineered a replacement is, it's going to have more bugs, even security bugs, for at least a year. A replacement would be valuable if it could provide a better templating/plugin system that reduced the opportunity for bugs in template/plugin code.

malandrew 13y ago
Maybe. Choose the right language and "framework" (which for WordPress is Apache), and that language may enforce enough constraints to eliminate many many of the bugs possible and common on abstractions such as Apache, MySQL and PHP. I know Apache is not a Framework, but a webserver. Here I'm using framework to mean operating system abstraction. Apache, being file-based and not data based first, means that it is full of abstraction holes that, while right for serving files, is all wrong for serving data and instead overly exposes the operating system for this world of dynamic web experiences we currently live in. If you knew back in the early 90s that the web would be more about streaming, real-time content, you would have designed a webserver that was designed for serving static, discretely changed content in a way that took advantages of as many features and benefits of the design of the Unix/Linux operating system (stdutils, etc.)