Live data from Hacker News

The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

hanselman.com

61–70 of 102 posts

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#61

Alot if shitty attitudes about Wordpress here. If it is so awful, why is it on over 25% of sites? It has helped alot of people make alot of money, and continues to do so.

"If it is so awful, why is it on over 25% of sites?" If McDonalds is so bad for you, why do they serve 550 million Big Macs every year? WP is 'free', has a low barrier to entry, and for many years non-developers were able to relatively easily add custom functionality (sometimes done well, but often security and performance nightmares). A lot of people make a lot of money from selling illegal drugs, or fatty foods, or…

> "I see with WP is that it doesn't do mauch to encourage most people "developing" on it to ever consider other tools; they just learn to fit more and more jobs in to the same ecosystem, whether it's a good fit or not."

Spot on. I do a fair amount of WP work. I'm a member of a number of WP groups on FB. I see this all the time. For most people WP is a hammer and everything is a nail.

Unfortunately, that's the Kool Aid served by Matt M all the way down. WP isn't an OSS application. It's a cult.

To the majority of the cult members there's nothing else. They know nothing other than WP. Truth be told, most of them don't even know WP.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#62
post #51

Earlier quoted context omitted.

Saying Wordpress is a security nightmare is like saying Windows is a security nightmare. It has broad use, it has tons of people using it with outdated or unmanaged plugins on installs that haven't been updated in years...Some running near extinct PHP versions. If managed properly, put behind a firewall, etc it is quite safe. The hatred of Wordpress is laughable. It has its limits, but it meets most small-medium size…

As a product you're right - Wordpress serves the needs of small business and non-coder users perfectly well, arguably better than any alternative outside of hosted services like Wix (or, obviously, hosted Wordpress.) However, as software , Wordpress deserves the hate it gets. There is no real security or firewalling or permissions limiting of plugins, there is no hint of modern PHP practices like Composer integration…

> "(ease of deployment, ease of extension, ease of configuration, auto-updates, plugins, etc.)"

But those are The Right __and__ The Wrong.

For example, adding Composer to the WP "stack" makes sense. But now you've eliminated 90% (?) of the WP "developers."

That is, in the Universe of WordPress Composer is more friction, not less (i.e., ease of use).

Long to short, for better or worse, WP is Justin Bieber. It will never be Radiohead.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#64

Earlier quoted context omitted.

Jekyll is closer to Wordpress but Django is a library / framework so Photoshop to C++ is kinda close, but a little too far.

I'm thinking "django cms", not just django - sorry. colleague of mine has been doing a lot of work in django cms the last year and I conflate the two sometimes :)

Huh. Django cms actually looks pretty nice.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#65

Earlier quoted context omitted.

> If McDonalds is so bad for you, why do they serve 550 million Big Macs every year? This is an amazingly good comparison because in both cases the initial assumption is wrong . Just like WP, McDonalds is not bad for you intrinsically. It’s poor discipline and usage that causes problems.

There is nothing good for you at McDonalds. Even thier “healthy” options are less healthy and over processed compared to local restaurants.

The apples are okay.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#66

Alot if shitty attitudes about Wordpress here. If it is so awful, why is it on over 25% of sites? It has helped alot of people make alot of money, and continues to do so.

"If it is so awful, why is it on over 25% of sites?" If McDonalds is so bad for you, why do they serve 550 million Big Macs every year? WP is 'free', has a low barrier to entry, and for many years non-developers were able to relatively easily add custom functionality (sometimes done well, but often security and performance nightmares). A lot of people make a lot of money from selling illegal drugs, or fatty foods, or…

A poor comparison. McDonalds is highly variable per location. Just because the one closest to you might be terrible doesn't say anything about the rest of the world.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#67

Earlier quoted context omitted.

"If it is so awful, why is it on over 25% of sites?" If McDonalds is so bad for you, why do they serve 550 million Big Macs every year? WP is 'free', has a low barrier to entry, and for many years non-developers were able to relatively easily add custom functionality (sometimes done well, but often security and performance nightmares). A lot of people make a lot of money from selling illegal drugs, or fatty foods, or…

A poor comparison. McDonalds is highly variable per location. Just because the one closest to you might be terrible doesn't say anything about the rest of the world.

He said terrible for you, not terrible.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#68
post #51

Earlier quoted context omitted.

As a product you're right - Wordpress serves the needs of small business and non-coder users perfectly well, arguably better than any alternative outside of hosted services like Wix (or, obviously, hosted Wordpress.) However, as software , Wordpress deserves the hate it gets. There is no real security or firewalling or permissions limiting of plugins, there is no hint of modern PHP practices like Composer integration…

> "(ease of deployment, ease of extension, ease of configuration, auto-updates, plugins, etc.)" But those are The Right __and__ The Wrong. For example, adding Composer to the WP "stack" makes sense. But now you've eliminated 90% (?) of the WP "developers." That is, in the Universe of WordPress Composer is more friction, not less (i.e., ease of use). Long to short, for better or worse, WP is Justin Bieber. It will nev…

>But now you've eliminated 90% (?) of the WP "developers."

Maybe, but it wouldn't be impossible to rebuild plugins around Composer and PSR standards. And doing so would make them better organized, and make it easier to manage third party dependencies. If you were going to build Wordpress from scratch, today, that's probably what you would do - just make plugins a special case of Composer dependencies.

The only question is, whether you would still have as robust an ecosystem with a more restrictive framework? Probably not, but the quality of plugins would probably be higher.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#69
post #7

Earlier quoted context omitted.

You could take “C#” out of that sentence and still be accurate. Wordpress is not and I imagine never will be anywhere close to “modern design patterns”. It’s not even close to old design patterns, unless Heinz has a namesake software design pattern. Wordpress uses practices that were considered a bad idea a decade or more ago, and still refuses to change.

Do you have any examples of the bad practices you are referring to?

They actively refuse to use parameterised sql queries, opting for their own home baked userland implementation instead.

Re: The Whole of WordPress Compiled to .NET Core and a NuGet Package with PeachPie

#70
post #22

Can this solve the Wordpress security nightmare ? are we going to see hosting services built on PeachPie in the near future ?

Wordpress core has very secure coding practices, and if you can find an 0-day in it, then you've done very, very well.

The problems with Wordpress are mostly:

1. WP installations are often not properly configured or maintained.

2. The plugin ecosystem is a mess of vulnerable and/or malicious code, or simply dead code that isn't maintained yet still deployed in the wild.

Post reply on HN