“Drupalgeddon2” touches off arms race to mass-exploit powerful web servers

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by Roritharr on Sunday April 22, 2018 @04:15AM (#16895238)

That's of course a good solution but then you want your Ajaxy Web 2.0 Things in there, some more complicated forms maybe and you start looking at something that takes quite some effort to build compared to what you get from WordPress/Drupal etc.

Funnily enough, having worked on all kinds of websites for the past 15 years, i'm still at a loss when asked what the all-round good solution is.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by andybak on Sunday April 22, 2018 @04:26AM (#16895265)

Maybe the problem is the phrase "all round". There are trade offs to be made and complex cost/benefit calculations that are required.

To further complicate things, things change. A website that was a perfect fit for a Wordpress template easily grows beyond that. And a site that seemed ideal for a custom Django/Rails backend might eventually settle into the kind of functionality groove where you begin to wonder if an off the peg solution might not have been a better idea.

[ Parent | on HN ]

Re:“Drupalgeddon2” touches off arms race to mass-exploit pow... by jlgaddis on Sunday April 22, 2018 @04:42AM (#16895301)

WordPress at least automatically updates itself. There's been a few times when auto updates broke but, overall, it has been a tremendous help in reducing the number of exploited web servers out there.

[ Parent | on HN ]