Things I’d want to see improved in WordPress core • Hacker News Board

Re: Things I’d want to see improved in WordPress core

#41

Post by photomatt » Tue, May 24, 2022, 1:16 AM UTC

Neil44 wrote: post #19

I would like as much as possible of the php source moved out of the webroot. e.g. to ../ All day long bots are firing queries and POSTs at any and all php files causing massive server load and security headaches. Just include them from the core and route to them via the core, taking care of sanitation in the process preferably.

You can do this! Support article here: https://wordpress.org/support/article/giving-wordpress-its-o...

Re: Things I’d want to see improved in WordPress core

#42

Post by photomatt » Tue, May 24, 2022, 1:19 AM UTC

Some very neat suggestions here, thank you to the OP and everyone who has commented so far. :) We're far from perfect, but we're about to celebrate 19 years of steady iteration, and I hope to continue iterating to bring you great open source software as long as I'm physically and mentally able. — Co-founder of WordPress

Re: Things I’d want to see improved in WordPress core

#43

Post by 7speter » Tue, May 24, 2022, 1:33 AM UTC

BusySkillFool wrote: post #3

dmje wrote: post #2

The thing I want to see, above all else (and it is coming, but slowly and without any kind of apparent over-arching strategy - which it badly needs) is designer / developer control. Gutenberg gives remarkable agency to editors, which from one angle is great - lovely to be able to add a column, shift a block upwards, pad that image over to the right without any technical skills. On the other... I don't know a web desi…

For me at least, Craft CMS answers many of the problems you describe here. I can't see WP as anything but a dumpster fire in comparison.

I remember reading through books teaching wordpress and all of them had a variation of the line to not to go trying to change or tinker too much with the inner files that make up wordpress. It kind of reminded me of how the obelisk aliens from the 2001: A space odyssey’s sequel 2010 tells humans that they can have everything in the solar system except Jupiter.

Re: Things I’d want to see improved in WordPress core

#44

Post by aaaaaaaaata » Tue, May 24, 2022, 1:36 AM UTC

billpg wrote: post #29

Since everyone else is posting their wish-list, here's mine. Use a database like SQLite so I can back-up a website into a ZIP without being concerned about keeping a separate MySQL database backup in sync. (I wrote about this three years ago: https://billpg.com/dear-wordpress-please-stop-using-mysql/ ) Include TOTP one-time-password login in the core. (I hate having to deal with plug-ins.) Full backup in the core. Wh…

> Include TOTP one-time-password login in the core. (I hate having to deal with plug-ins.)

What's everyone currently using for this?

Re: Things I’d want to see improved in WordPress core

#45

Post by knob » Tue, May 24, 2022, 1:43 AM UTC

cultofmetatron wrote: post #23

skrowl wrote: post #10

Port it to a modern language so PHP can finally die, add support for PostgreSQL and MS SQL

not a fan of php either but I wouldn't go that far. I'd love to see it reimplemented with modern conventions over Laravel. As much as i dislike php in general, I have to admit the laravel guys have done some amazing stuff.

Absolutely love Laravel!!

Re: Things I’d want to see improved in WordPress core

#46

Post by tyingq » Tue, May 24, 2022, 1:48 AM UTC

billpg wrote: post #29

Since everyone else is posting their wish-list, here's mine. Use a database like SQLite so I can back-up a website into a ZIP without being concerned about keeping a separate MySQL database backup in sync. (I wrote about this three years ago: https://billpg.com/dear-wordpress-please-stop-using-mysql/ ) Include TOTP one-time-password login in the core. (I hate having to deal with plug-ins.) Full backup in the core. Wh…

Static site deployment without plugins would probably be popular too.

Re: Things I’d want to see improved in WordPress core

#47

Post by mgkimsal » Tue, May 24, 2022, 2:06 AM UTC

Perhaps a separate 'session' database table for... database-backed sessions vs storing stuff in wp_options? Last I looked that still seemed to be the default. For low volume scenarios perhaps it's not a big issue, but... session data isn't an 'option', so it doesn't really even make semantic sense to put it there. Why not just put all 'post' data in wp_options as well?

Re: Things I’d want to see improved in WordPress core

#48

Post by jolux » Tue, May 24, 2022, 2:13 AM UTC

Just from digging through the WordPress source, and knowing it's a frequent source of CVEs, I think it urgently needs large-scale refactoring and rewriting. If that can't be done because of how many things depend on it, is the backwards compatibility really worth the continuous stream of security problems? From one perspective it seems kind of wrong to be encouraging people to keep using a platform that is so broken at its core. When asked professionally I tell people to use WordPress.com or another reputable managed host or just avoid the product entirely.

Re: Things I’d want to see improved in WordPress core

#49

Post by weird-eye-issue » Tue, May 24, 2022, 2:21 AM UTC

billpg wrote: post #29

Since everyone else is posting their wish-list, here's mine. Use a database like SQLite so I can back-up a website into a ZIP without being concerned about keeping a separate MySQL database backup in sync. (I wrote about this three years ago: https://billpg.com/dear-wordpress-please-stop-using-mysql/ ) Include TOTP one-time-password login in the core. (I hate having to deal with plug-ins.) Full backup in the core. Wh…

Not what you were asking for but btw with Cloudways their automatic backups will create a zip with the MariaDB dump included. I then rsync this to rsync.net

Re: Things I’d want to see improved in WordPress core

#50

Post by weird-eye-issue » Tue, May 24, 2022, 2:22 AM UTC

mszmszmsz wrote: post #6

The biggest mess IMO is the media library. Unsustainable, chaotic, impossible to keep in order if you happen to publish more than just a few images. It’s not a library. It’s a file dump. If you want to reuse an asset on a non-trivial site, it’s easier to reupload the file rather than to find it in a flat list of thousands of thumbnails. Folders, please. And the four hopeless fields to provide an image with textual me…

We have over 8000 images and growing. If you name them properly and use alt text the searching works okay. But we also don't reuse images that much (not because they are hard to find)