no mention of security... good luck. i stopped using wordpress after i got hacked. good reason that static sites are the rage.
was it due to the core or a plugin?
his admin creds were probably
admin / abcd123!
Things I’d want to see improved in WordPress core
11–20 of 63 posts
Re: Things I’d want to see improved in WordPress core
#12Port it to a modern language so PHP can finally die, add support for PostgreSQL and MS SQL
If all you're worried about is Core: https://apps.peachpie.io/Item?id=PeachPied.WordPress.AspNetC...
> All of WordPress as a .NET Standard assembly, without PHP.
Mentions both performance and security benefits.
Re: Things I’d want to see improved in WordPress core
#13Port it to a modern language so PHP can finally die, add support for PostgreSQL and MS SQL
Some of us like PHP. I'd even go so far to say there are dozens of us... DOZENS!
Re: Things I’d want to see improved in WordPress core
#14Port it to a modern language so PHP can finally die, add support for PostgreSQL and MS SQL
[deleted]
Re: Things I’d want to see improved in WordPress core
#15Earlier quoted context omitted.
was it due to the core or a plugin?
his admin creds were probably admin / abcd123!
Guessing passwords? You don't even have to try that hard. Have you seen the list of WordPress CVEs?
Here is one just from January of this year,
https://www.debian.org/security/2022/dsa-5039
"Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks."
Re: Things I’d want to see improved in WordPress core
#16Port it to a modern language so PHP can finally die, add support for PostgreSQL and MS SQL
I've not played with it yet but I've heard good things about the newest version of PHP, could anyone confirm?
Re: Things I’d want to see improved in WordPress core
#17Port it to a modern language so PHP can finally die, add support for PostgreSQL and MS SQL
Care to point out what bothers you in the latest versions of PHP?
Re: Things I’d want to see improved in WordPress core
#18Support for PostgreSQL and SQLite -- that's all I want. (For now.)
https://github.com/stokry/wp-sqlite
Not official though. Submitted a few days ago (97 comments)
Re: Things I’d want to see improved in WordPress core
#19I would like as much as possible of the php source moved out of the webroot. e.g. to ../
All day long bots are firing queries and POSTs at any and all php files causing massive server load and security headaches.
Just include them from the core and route to them via the core, taking care of sanitation in the process preferably.
Re: Things I’d want to see improved in WordPress core
#20Earlier quoted context omitted.
his admin creds were probably admin / abcd123!
Guessing passwords? You don't even have to try that hard. Have you seen the list of WordPress CVEs? Here is one just from January of this year, https://www.debian.org/security/2022/dsa-5039 "Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks."
Sure have! Mentioning the admin creds were more so tongue in cheek because there are a lot of folks who use the default 'admin' username.