Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WordPress now runs a quarter of the web

w3techs.com

Post reply on HN
Print view View original

91–100 of 114 posts

Re: WordPress now runs a quarter of the web

#91

Post by keithpeter »

jonesb6 wrote: post #74
rmdoss wrote: post #64

And WordPress itself is NOT insecure. It is in fact the most secure CMS you can find out there. The issue is that its simplicity and easy installation, brought a lot of non-technical people to use it and develop for it. So you get a lot of bad written themes and plugins that lead to all sort of security issues. On the other hand, Drupal and Joomla, all had SQL injections on their core discovered lately: https://www.d…

I learned a lot about security on the web by poking around wordpress sites in school. While I believe what you're saying is true it's hard to believe that the perception alone of wordpress's 'hackability' doesn't make it much more of a security risk. "Oh they run wordpress? I can probably get into that." "Runs wordpress vulnerability scanner script" "Oh hey look ~wp-config.php!"

Yup: so I moved my low traffic vanity site back to static html when I worked out that I was spending more time reinstalling WordPress because of security advisories than actually writing anything.

As the chap who runs pinboard put it [1] people like me should not be running web applications like WordPress on live server space.

So I ran WordPress locally and harvested the html pages. Then realised that I was using a poky little text area to write when I could just use a text editor...

[1] http://idlewords.com/2009/09/how_to_not_get_your_blog_hacked...

Re: WordPress now runs a quarter of the web

#92

Post by robtaylor »

jjoe wrote: post #48
Dachande663 wrote: post #7

WordPress is like the Kalashnikov of the web. You can use it for pretty much anything, run it anywhere, do god knows what to it and it'll still happy hum along (albeit behind a very big varnish cache). A few of our clients have millions of pageviews running off of a couple t2.small instances and the single biggest factor for them is the UI and the security of knowing they're not tied into a bespoke platform.

We have clients running multisite with 150MM+ page views per month but on dedicated hardware and Varnish running in front of it. The latter is a must in a setup like this. You save on MRC for server rentals, which is a huge value proposition.

what kind of costs are involved?

I run a community site that does 1m pv's a month and growing but we get hammered on 'breaking news' as wp-super-cache does not seem to handle post updates well under high use thus interested in possible solutions or alternatives.

Re: WordPress now runs a quarter of the web

#93

Post by girvo »

sopooneo wrote: post #29

Any consultants on here that have to deliver/maintain WordPress sites? If so, mind sharing what your basic workflow is? There are many articles on the web, but they are mostly for very entry level users. The fundamental problem my company runs into with WP is that only a theme can be meaningfully checked into version control. Everything else, including installation of plugins is coupled with entries in the database.…

Themosis Framework is my life saver, along with WP-ORM

Re: WordPress now runs a quarter of the web

#94

Post by pknight »

belorn wrote: post #59
vatotemking wrote: post #5

Earlier quoted context omitted.

citation needed

The problem with wordpress security is mostly attached the insecure developer practices when dealing with themes. Many developers just take a standard theme, copies it , and then attach their own modifications. This piece of code never gets updated and the owner rarely even know that its there until they get hacked, reinstall with a updated wordpress, and then get rehacked a few days later.

Themes rarely have hackable exploits due to what they (are supposed to) do. If there's insecure code in there it's probably code with functionality that belongs in a plugin to start with. Themes that have had vulnerabilities in them tend to be the kinds of commercial themes that are filled with features and 3rd party scripts to satiate users demands. Not really a WordPress core problem, it is a market problem. Although package management is something WordPress lacks in.

Re: WordPress now runs a quarter of the web

#95

Post by csixty4 »

sopooneo wrote: post #29

Any consultants on here that have to deliver/maintain WordPress sites? If so, mind sharing what your basic workflow is? There are many articles on the web, but they are mostly for very entry level users. The fundamental problem my company runs into with WP is that only a theme can be meaningfully checked into version control. Everything else, including installation of plugins is coupled with entries in the database.…

At 10up, we open sourced our Engineering Best Practices[1]. And we welcome issues & pull requests from the WordPress community.

[1] https://10up.github.io/Engineering-Best-Practices/

Re: WordPress now runs a quarter of the web

#96

Post by jacquesm »

nogridbag wrote: post #49

I recently looked at Hugo[1] as a WP alternative and have been very impressed. It's a static website generator written in Go and features its own server with live-reload so you can see changes to your content instantly in the browser. I was looking for something that a non-techie might be able to maintain and since Hugo offers prebuilt binaries the only requirements for the maintainer is to drop hugo.exe into the wor…

Another vote for Hugo, it's lightning fast on the generation side and the support is amazing. I came across a subtle bug in the generator and within a day or two there was a fix in the works.

Re: WordPress now runs a quarter of the web

#97

Post by jjoe »

robtaylor wrote: post #92
jjoe wrote: post #48

Earlier quoted context omitted.

We have clients running multisite with 150MM+ page views per month but on dedicated hardware and Varnish running in front of it. The latter is a must in a setup like this. You save on MRC for server rentals, which is a huge value proposition.

what kind of costs are involved? I run a community site that does 1m pv's a month and growing but we get hammered on 'breaking news' as wp-super-cache does not seem to handle post updates well under high use thus interested in possible solutions or alternatives.

It's roughly $90/mo for 1m+ pvs/mo (includes management). With wp-super-cache you're still hitting PHP/MySQL (although not as heavily if you're pulling everything cold).

Whereas with Varnish you're getting hot pages off RAM and on you go.

Re: WordPress now runs a quarter of the web

#99

Post by SHIT_TALKER »

rebootthesystem wrote: post #85

I must admit ignorance here. I've installed WP a couple of times but never went live with it or did anything past poking around. Here's my hangup: I can't understand why one would start with a blogging platform, pound at it with various plugins and transform it into, say, a product/ecommerce website. It feels like starting with a shovel when you need a pick (or some other more applicable analogy). That's the part I d…

On the funny end of the scale, I've seen five page static websites with a landing page, a few info pages and a form done with WP. Unbelievable. Are developers that lazy today that they throw WP at everything? Or is it easier at that level to charge X to do a WP site rather than charging the same for straight-up PHP/HTML/JS?

When the client says they want to be able to update site content themselves.... okay, here's your five page WordPress site with a single form.

Re: WordPress now runs a quarter of the web

#100

Post by robtaylor »

jjoe wrote: post #97
robtaylor wrote: post #92

Earlier quoted context omitted.

what kind of costs are involved? I run a community site that does 1m pv's a month and growing but we get hammered on 'breaking news' as wp-super-cache does not seem to handle post updates well under high use thus interested in possible solutions or alternatives.

It's roughly $90/mo for 1m+ pvs/mo (includes management). With wp-super-cache you're still hitting PHP/MySQL (although not as heavily if you're pulling everything cold). Whereas with Varnish you're getting hot pages off RAM and on you go.

able to email me company url / more info? email in profile
Post reply on HN