Re:WordPress 18
by SadWebDeveloper on Friday May 28, 2021 @12:44PM
(#27317604)
Stop using shady shared hosting companies, self-host everything and harden php/apache/mariadb deployment not just Wordpress.
Wordpress is pretty secure but putting everything in a shared hosting with lax security like dreamhost or hostgator et al its asking for trouble.
I think that's the part most people overlook.
I have many wordpress sites, some large, some small, and only 1 was ever hacked and it was on a shared host 10+ years ago. Today I have sites that I haven't updated in 5+ years, no hacks no problems. Good wp depends on good server config and good wp setup.
I am not using shared hosting. It was hosted on a Digital Ocean box using the recommended security updates, settings, file permissions etc and with as few plugins as I could get away with. I also had the "pro" version of Wordfence installed with active monitoring. Yet it was hacked.. multiple times.
It puts too much of a burden on the site owner from a security perspective.
Quite frankly, Wordpress leaks like a sieve. I wish this wasn't true because it is really one of the best/most accessible CMSs around. If they fix the security issues, it would just be wonderful.