News for hackers. Stuff that matters.

A comment on I tried to use WordPress with GitHub Pages.

Re:I tried to use WordPress with GitHub Pages by mozak1111 on Sunday August 16, 2020 @08:32PM (#24182623)
What we really need is a good static output generation built-in wordpress that actually works and downgrades successfully. Instead, the team decided to work on a page builder (Gutenberg) which was/is far behind Elementor and the rest. Static generation is an absolutely essential feature in my opinion for having the peace of mind regarding security. I tried EVERY SINGLE one of the static generation plugins out there for a client project (avada theme/elementor/wpml) and none of them worked. (But apparently they do work if you use the SaaS version, not tried it myself)

So I guess Automattic will not solve it as it would hurt their wordpress.com business and if somebody comes up with a good static generation option will just turn into another SaaS offering.

[ Parent | on HN ]
Re:I tried to use WordPress with GitHub Pages by mdu96 on Sunday August 16, 2020 @11:43PM (#24183700)
Can you elaborate more on why you say static generation is an essential feature for peace of mind w.r.t. security?
[ Parent | on HN ]
Re:I tried to use WordPress with GitHub Pages by mozak1111 on Monday August 17, 2020 @08:00AM (#24186380)
Yes. Of course. Most of the problems with Wordpress websites are because of bugs in programs written in PHP. When you no longer serve PHP and are just serving a bunch of HTML/CSS files then there is nothing left to hack. (unless you want to target the webserver [such as Apache, etc.) but 9/10 times it is some sort of an outdated software or just some previously unknown bug in some plugin. Less attack surface, more peace of mind.
[ Parent | on HN ]
Re:I tried to use WordPress with GitHub Pages by aheckler on Monday August 17, 2020 @05:18AM (#24185463)
Not the GP, but I'm guessing they prefer static sites simply because they are much more difficult to hack or compromise in some way. There's no database to defend from injection attacks, etc.
[ Parent | on HN ]