Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Switching to WordPress felt like a visit to the Ferengi homeworld

lasselaursen.com

Post reply on HN
Print view View original

21–30 of 78 posts

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#21

Post by Aloha »

sonicanatidae wrote: post #19
josefresco wrote: post #12

Earlier quoted context omitted.

I manage a network of 300+ WordPress sites. These vulnerabilities, are they in the room with you now? I'm joking of course but like Windows, WordPress is attacked because it's ubiquitous. Yet, here I am running a network of 300 sites with over 600 deferent plugins and hundreds of themes over a span of almost a decade without major issue. How is this possible? Should I pick some obscure CMS instead? (aka security thro…

It hasn't happened to mine, so it's all bullshit. FTFY. Quick, now tell us how secure Adobe products are.

I'd agree with you that wordpress core of 10+ years ago had constant security issues, now, its mostly in plugins, and even then, not as often.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#22

Post by Aloha »

josefresco wrote: post #12
sonicanatidae wrote: post #7

Let's not forget the horrific number and level of vulns identified in WordPress.

I manage a network of 300+ WordPress sites. These vulnerabilities, are they in the room with you now? I'm joking of course but like Windows, WordPress is attacked because it's ubiquitous. Yet, here I am running a network of 300 sites with over 600 deferent plugins and hundreds of themes over a span of almost a decade without major issue. How is this possible? Should I pick some obscure CMS instead? (aka security thro…

also, modern WP and WP from 10 years ago are very different beasts. Now most of the risk is in plugins, and if you're careful about plugins - it all works okay, without security issues.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#24

Post by josefresco »

sonicanatidae wrote: post #19
josefresco wrote: post #12

Earlier quoted context omitted.

I manage a network of 300+ WordPress sites. These vulnerabilities, are they in the room with you now? I'm joking of course but like Windows, WordPress is attacked because it's ubiquitous. Yet, here I am running a network of 300 sites with over 600 deferent plugins and hundreds of themes over a span of almost a decade without major issue. How is this possible? Should I pick some obscure CMS instead? (aka security thro…

It hasn't happened to mine, so it's all bullshit. FTFY. Quick, now tell us how secure Adobe products are.

"mine"

That critique would be fair if I was talking about my one WordPress site but I'm talking about hundreds, maybe even a thousand if you count sites I've built that came and went. It's a pretty decent sample size (IMHO) both for the number of instances but also the time period (10+ years). And it's also not 300 clone sites, each one was built unique, and each has their own mix of plugins & themes.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#25

Post by sovietmudkipz »

I honestly like the Wordpress developer model. I’ve written themes and plugins. I’ve learned how to write tests for both. I like how they released the “wp-cli” so I can manage Wordpress outside the web GUI. It sometimes does feel a little janky in a lot of ways but it offers a lot of value as a framework.

Wordpress gets a lot of undue hate, imo. It just works, at least for me and my workloads. I worry I’ll encounter some legendary source of friction that turns many devs off to Wordpress but so far I haven’t. YMMV.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#26

Post by josefresco »

Aloha wrote: post #22
josefresco wrote: post #12

Earlier quoted context omitted.

I manage a network of 300+ WordPress sites. These vulnerabilities, are they in the room with you now? I'm joking of course but like Windows, WordPress is attacked because it's ubiquitous. Yet, here I am running a network of 300 sites with over 600 deferent plugins and hundreds of themes over a span of almost a decade without major issue. How is this possible? Should I pick some obscure CMS instead? (aka security thro…

also, modern WP and WP from 10 years ago are very different beasts. Now most of the risk is in plugins, and if you're careful about plugins - it all works okay, without security issues.

I've been deploying WordPress for 10+ years and would agree. WordPress is much safer and mature, it's the plugins and sometimes the themes that are the problem now. But we monitor, and patch. No big deal.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#27

Post by Vox_Leone »

Allow me to note that you only get to using plugins after upgrading your tier. Strangely, their lower tier plan is called 'Premium'.

Another fundamental thing requiring upgrade is access to the canonical address if you're using a custom domain. Control over canonical address configuration should be integral part of any paid plan, in any platform.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#29

Post by jrm4 »

Tell me you don't understand the difficulty of maintaining a really useful and complex free tool without...you know.

All the writer has done here is screamed their ignorance (which, to be fair, is not at all simple) of the complexities of using free/open source and also maintaining something huge and complex WITHOUT being huge jerks about it.

I do wish there was a simpler way to essentially do two tiers of "service" -- but for now, "you either 'pay' in terms of digging in and learning or you 'pay' with real money" seems pretty reasonable.

Re: Switching to WordPress felt like a visit to the Ferengi homeworld

#30

Post by scarecrowbob »

As someone who is on a, uh, "sabbatical" from programing after 10 years making WP work for gov, edu, and various businesses I have worked on many hundreds of WP sites.

I still use it for my personal blog and for marketing my various projects.

The article doesn't have a lot of meat, but I think the title alone was interesting.

My primary issue with the WP ecosystem is how folks end up paying for GPL software.

Leaving aside my opinions about the actual legal weight of commercial plugins in that ecosystem, having a bunch of systems with un-patchable software (until you pay for the latest release) has caused a whole lot of problems for the world.

There are other problems with WP of course. I'm completely burned out on trying to fix things with it, so hopefully I can find some other work when I get done trying to be a musician.

However, I find the community is quite unique in its lack of tolerance for the idea that GPL means GPL.

Post reply on HN