Earlier quoted context omitted.
citation needed
http://www.cvedetails.com/vulnerability-list/vendor_id-2337/...
200 vulns in 11 years? That doesn't sound awful in perspective. I bet you use software every single day that has significantly more.
WordPress now runs a quarter of the web
81–90 of 114 posts
Re: WordPress now runs a quarter of the web
#82Earlier quoted context omitted.
Quite a lot, considering that some of these brands use (or used to use) WordPress: http://www.wpbeginner.com/showcase/40-most-notable-big-name-... It's fairly common among large media publications.
That's something that gets overlooked in these discussions of wordpress. Wordpress has the unique ability to use a single install and backend to manage hundreds of sites. If you need content cross posted across multiple sites, wordpress can do that. If you want to pull an entire column of articles from one site to another, wordpress can do that. Wordpress has spent a ton of time on multisite features and (as far as I…
I've never used it professionally, but dotCMS is a Java- and Elasticsearch-based CMS that has very impressive multisite features [1]. From what I can tell, a lot of its capabilities stem from a design that treats absolutely everything (data, content, static assets, "themes") as a node in a virtual filesystem, or rather a filesystem-per-site, so everyday filesystem operations cover a lot of use cases. I believe you can even manipulate your site(s) via WebDAV to some extent, e.g. to develop a theme in your IDE of choice while saving directly to the site or, more realistically, saving to a private staging copy of the site that lives on the same server, which you can then copy into production from within the dotCMS admin.
I gave some consideration recently to adopting dotCMS for client work to replace an in-house PHP CMS, but although Java-the-language isn't particularly intimidating and dotCMS itself looks fairly self-contained and straightforward to deploy -- Elasticsearch is embedded rather than requiring separate setup, for example -- it's still tied up in the Java ecosystem (OSGi, maven, XML configuration) so there's a lot to get used to for someone approaching it from outside that realm.
Re: WordPress now runs a quarter of the web
#83Earlier quoted context omitted.
But it does get an inordinate amount of attention from people looking to crack it. At least according to my server logs. So sure... if everything is locked down and up to date and no shaky plugins installed no problem. On the other hand, one careless slip up...
> On the other hand, one careless slip up... And how is it not the same for any other server side software? Most of the WP security issue is related to user not knowing what they are doing or third party plugin/theme. Wordpress vanialla itself is not anymore insecure than other popular CMS or simialar software out there. From my own personal experince from doing at least 70-80 WP installs in different configurations…
Other server side software doesn't get nearly the same number of attacks. At least according to my server logs. Plus, other server side software doesn't let button clickers get into trouble as easily.
Re: WordPress now runs a quarter of the web
#84Matt Mullenweg's post on this is interesting [1].
"The big opportunity is still the 57% of websites that don’t use any identifiable CMS yet, and that’s where I think there is still a ton of growth for us (and I’m also rooting for all the other open source CMSes)."
I wonder what currently runs the remaining 57%.
Re: WordPress now runs a quarter of the web
#85I must admit ignorance here. I've installed WP a couple of times but never went live with it or did anything past poking around.
Here's my hangup: I can't understand why one would start with a blogging platform, pound at it with various plugins and transform it into, say, a product/ecommerce website. It feels like starting with a shovel when you need a pick (or some other more applicable analogy).
That's the part I don't quite understand. Carrying all of that baggage to build something diametrically opposite what the original stated function of the software may have been.
On the funny end of the scale, I've seen five page static websites with a landing page, a few info pages and a form done with WP. Unbelievable. Are developers that lazy today that they throw WP at everything? Or is it easier at that level to charge X to do a WP site rather than charging the same for straight-up PHP/HTML/JS?
Re: WordPress now runs a quarter of the web
#86Earlier quoted context omitted.
If everything is cached, sure, serving static content is cheap. The comparison with a solid machine I find it funny, a bad update in a plug-in can render your site useless for a while and WP's security record is abysmal.
An argument to be made is that it's security record is due strictly to its popularity. Given the choice between the 1000 pound gorilla that everyone uses and has double digit CVEs released every year, and the unknown that nobody uses, I'm going to pick the first one simply because the second one likely has just as many holes - there's just not enough people trying to attack it.
And there are enough users - both well-informed and not - that when a vulnerability is discovered, it's more likely to be fixed and deployed quickly.
Re: WordPress now runs a quarter of the web
#87It's not that surprising to be honest. WordPress' success comes down to the following: 1. It was simple to use in an era where CMS meant 'large, complicated system that was tailored towards technies rather than the general population'. It didn't have a ton of features, but it was easy to use for the average blogger wanting to write posts without worrying about all the setup and coding and what not. 2. You could prett…
I agree with your points, but always wonder why shared hosting is often PHP/MySQL only. E.g. if you are using Python, say Django or Flask, and want to outsource your devops (i.e. shared hosting) you do not have many options. Of course, there is pythonanywhere or you might want to use PAAS like Heroku, but I find it interesting non the less. Is it so much more work for shared hosting providers to provide Python?
I've studied this one a few times and it's very much a positive feedback loop.
Rewind to 2005: Django and Rails had just been released. PHP had already been out for 10 years and there were dozens of large systems - PostNuke, phpBB, WordPress, Drupal - that were already out there being useful.
For many hosts, their customers wanted to get a blog, forum, etc online quickly and easily. The vast majority were written in PHP, so they set up with PHP by default. Throw in the fact that most of these companies deployed Cpanel (or similar) with one-click installers like Fantastico, etc - which dealt with PHP exclusively iirc - and it was a no-brainer.
The availability of apps drove PHP deployments.
The sheer number of PHP deployments drove the installation of the same apps.
Re: WordPress now runs a quarter of the web
#88Matt Mullenweg's post on this is interesting [1]. "The big opportunity is still the 57% of websites that don’t use any identifiable CMS yet, and that’s where I think there is still a ton of growth for us (and I’m also rooting for all the other open source CMSes)." I wonder what currently runs the remaining 57%. [1] http://ma.tt/2015/11/seventy-five-to-go/
Raw [programming language of choice] or custom CMS that someone's nephew hacked together and they don't care enough or have the time/money to replace.
In 2005-2008, I made good money switching people from those systems to Drupal with the simple pitch of plugging into a larger community and being able to shop around for modules and developers who wouldn't have to learn a new codebase.
Re: WordPress now runs a quarter of the web
#89Earlier quoted context omitted.
Themes like Divi seem to compete directly with things like Squarespace, including custom WYSIWYG layout tools etc. http://www.elegantthemes.com/gallery/divi/ Here's a testimonial from an independent web site creator that I found interesting. http://www.elegantthemes.com/blog/customer-spotlight/creatin... (I have no affiliation at all with this nor any other WordPress business, I just think it's interesting—as a count…
It's a fascinating ecosystem, but a little confusing. I was hoping there was an easy(ish) way to develop a custom theme, and use wp.com for hosting -- but as far as I've been able to figure out, there's no way to do that -- to use wp.com is to opt out of any serious customization. On the flip side, you get (presumably) rock solid wp hosting, and few security issues. Every time I've considered wp, I've ended up turnin…
I think WPEngine has the same advantages as wp.com hosting but with more flexibility.
Re: WordPress now runs a quarter of the web
#90and at least 1/10th of the exploits?