Re:WordPress 18
by lmm on Friday May 28, 2021 @04:01AM
(#27312835)
Scaling is famously a good problem to have. Unmaintained wordpress instances are the internet equivalent of toxic waste dumped in the river. I agree that open standards are important, but IMO it's irresponsible to leave someone with a website hosting setup that doesn't have a qualified person responsible for ongoing maintenance. (Fully managed wordpress hosting from a reputable, established company is one possible answer, of course).
[ Parent
| on HN ]
Is it impossible to make a secure CMS? I'd think step 1 would be to not have the admin stuff with the same access as the public website, and step 2 would be to have a way to sandbox plugins, but are those things possible?
Step 1 is possible nowadays (with SNI) but was hard until recently, and I don't think practices have really caught up with that yet.
Step 2 is difficult to even define properly. What is a plugin supposed to be able to do, and what is a plugin supposed to not be able to do? If you can answer that question precisely, then you can solve the problem, but if you can answer that question precisely then you probably don't need plugins in the first place.