News for hackers. Stuff that matters.
Re:WordPress Is in Trouble by treyd on Monday January 13, 2025 @03:16PM (#42688481)
WordPress is a very mature project with a long legacy but I'm surprised that there hasn't been a larger profile attempt to make a spiritual successor to it that can shake the baggage of being PHP and the long history of vulns that have come along with it.

I'm imagining some very pluggable and template driven runtime that you can ship very declarative packages for. The spicy take would be to use a Scheme for the templating around some robust Rust core, but that's probably not the widest appeal. Maybe there would be some clever way to bootstrap it out of PHP so that you can keep using shared PHP hosts and they wouldn't have to bring along a new software distribution.

Re:WordPress Is in Trouble by greggman7 on Monday January 13, 2025 @03:24PM (#42688624)
What would replace it?

PHP is unique in that it makes sharing a server trivial and low-resource compared to almost every other solution.

A simple example might be that you can run 100s of PHP forums on a single machine low memory machine but if you want to use discourse (not written in PHP), it requires 10x 20x the resources for a single forum.

This is true about almost every other solution AFAICT.

Re:WordPress Is in Trouble by smarx007 on Monday January 13, 2025 @04:14PM (#42689458)
https://wagtail.org/who-uses-wagtail/ lists a few companies who would care about low resource use due to the sheer amount of traffic they see.
Re:WordPress Is in Trouble by andix on Monday January 13, 2025 @03:45PM (#42688975)
That's probably the best explanation. There is no real alternative to PHP if you want to host cheap and simple. It's also really easy to deploy WordPress to a shared hoster, just by uploading a few files via FTP/etc and setting up a MySQL connection.

Or is CGI still a thing and a possible alternative for shared webspaces?

Re:WordPress Is in Trouble by ChrisMarshallNY on Monday January 13, 2025 @04:12PM (#42689420)
> Or is CGI still a thing and a possible alternative for shared webspaces?

I think I just threw up a little, in my mouth...

I don't think there's a viable alternative to PHP. The nerds here, hate it (and they aren't really wrong). I hate it, but it is undisputed God Emperor of Cheap Hosting. There's nothing that even comes close, for simplicity, speed, robustness, cost, and ubiquity. There are millions of pages of support, years of support forums, and hundreds of thousands of people that can work with PHP at an expert level. Despite the hate, PHP is a mature, modern language, still very much under development, and supported by many corporations.

The simplest hosting solutions have LAMP ("P" being "PHP"), and there are millions of LAMP servers out there. Every single one can run WP, simply by uploading a few files, creating a MySQL instance, tweaking a config, and Björn Stronginthearm's your uncle. Or, with things like WPE, you can click on a button in your control panel dashboard.

Also, non-HN-readers can manage just about every aspect of a WP server. People have made careers from that.

This sucks. I run a couple of sites. I use WP, because it means that I don't have to waste much time, managing them. I could definitely switch over to a static generator (what I would use, if I didn't do WP), or even write my own sites, using handcoded HTML (I have done that, and have even written my own CMSes, in The Dark Ages).

I am an indifferent (at best) Web designer. Almost every person here, could probably code circles around me. That means that working on Web sites is painful and slow, detracting from what I'm actually good at.

This sucks.

Re:WordPress Is in Trouble by andix on Monday January 13, 2025 @04:36PM (#42689757)
>> Or is CGI still a thing and a possible alternative for shared webspaces?

>I think I just threw up a little, in my mouth...

Sorry ;)

Re:WordPress Is in Trouble by BlueTemplar on Monday January 13, 2025 @08:05PM (#42692068)
What's the issue with CGI ?
Re:WordPress Is in Trouble by ChrisMarshallNY on Monday January 13, 2025 @09:51PM (#42692920)
CGI is fine, but it’s a rather awkward API, and about the worst way to publish a Web site.

I mentioned writing CMSes, and one of them was in Perl (using CGI). I still wake screaming, sometimes, and that was probably 25 years ago.

Re:WordPress Is in Trouble by BlueTemplar on Tuesday January 14, 2025 @09:09AM (#42697382)
Yeah, I roughly got that, but in which specific way is it bad ?
Re:WordPress Is in Trouble by ChrisMarshallNY on Tuesday January 14, 2025 @10:21AM (#42698285)
It looks like you are wanting to argue on some specifics. I probably won't be able to give you what you are looking for.

With me, it had to do with the languages I wrote (C and Perl), that required CGI to publish. CGI did fine, but it's fairly primitive. Just another system text pipe (which, TBH, is pretty much what is going on, under a Webserver).

But for most folks, CGI is unapproachable. That's what PHP gives people. It was so easy to use, that anyone that could edit an HTML file, could also write powerful programs in PHP. It was integrated into the Webserver, not the system (as far as the user was concerned).

At the time I first encountered PHP, ColdFusion was an industry standard for that kind of thing, but it was a commercial product, locked to a single vendor. PHP gave hosting companies a fairly simple package (for free) they could compile into their Webserver, that would give their customers that power.

Nerds have no issue, using things like CGI, but most folks aren't nerds, and we sometimes have a real hard time, understanding that. Nerds that do, often become rich.

Re:WordPress Is in Trouble by BlueTemplar on Tuesday January 14, 2025 @02:31PM (#42702522)
You misunderstand, it's more that I have a very limited knowledge of web programming : besides dumb HTML+CSS, only a small project using JQuery and (then bleeding edge) async JavaScript on the frontend, Python on the server, and... CGI for the communication between them.

So I was literally trying to know more. (And I understand a bit better now, thanks.)

Re:WordPress Is in Trouble by ChrisMarshallNY on Tuesday January 14, 2025 @02:48PM (#42702811)
Sorry. I consider CGI to be sort of a “failed experiment of the past,” sort of like Server-Side Includes (shtml). What CGI does, is let anything that can write to a pipe, publish on the Web (you could write a web app with Bash).

I think that anything that will interact with remote browsers, should go through a Webserver. Many utilities actually have their own built-in webservers (not sure that’s always a good thing).

Re:WordPress Is in Trouble by BlueTemplar on Thursday January 16, 2025 @06:13AM (#42723886)
But why is it a failed experiment ?

Because the simplicity results in various footguns, just like most programmers probably shouldn't use C these days ?

("Webserver" sounds like an extra layer on top, like how Python allows you to (mostly) forget about memory handling issues ?)

Is it also because simplicity either doesn't add performance here, or is it just because the performance is rarely needed ?

Re:WordPress Is in Trouble by ChrisMarshallNY on Thursday January 16, 2025 @06:35AM (#42724005)
Let me rephrase that: It’s not “failed,” per se, but it is inaccessible.

It’s what systems programmers would like, because we don’t like things that get in the way. However, most folks aren’t systems programmers. They want padding and safety nets.

Re:WordPress Is in Trouble by bsimpson on Monday January 13, 2025 @04:06PM (#42689330)
When Wordpress first came up, PHP was something anyone with $5 could administer, and Python/Ruby required a lot more money and expertise that put them outside the reach of junior hobbyists.

This was before the days of PaaS solutions like AppEngine.

Re:WordPress Is in Trouble by andix on Monday January 13, 2025 @04:36PM (#42689749)
I don't know any PaaS solution that is not at least a magnitude more complex than a simple PHP shared hoster.

As much as I hate PHP, the typical LAMP shared hosting is by far the most simple kind of PaaS.

Re:WordPress Is in Trouble by Nectar0516 on Tuesday January 14, 2025 @12:12AM (#42693926)
These days everything that would've been CGI is now FastCGI (even PHP). Or in other words, run one server whose only job is to reverse-proxy requests to another server over a slightly different protocol.

It can be used in shared scenarios, but it's nowhere near as automatic as "every file with a particular extension" like PHP...

Re:WordPress Is in Trouble by adolph on Monday January 13, 2025 @04:16PM (#42689479)
> [PHP] makes sharing a server trivial

Is that still a thing? Why would an application on a server share anything other than the kernel?

Re:WordPress Is in Trouble by lkrubner on Monday January 13, 2025 @11:22PM (#42693597)
Many graphic designers don't know how to work with the template systems of CMSs that attempt to serve multiple websites from a single app instance. Wordpress is kept alive, in part, by designers who feel it is easier to hack than any other system.
Re:WordPress Is in Trouble by Danieru on Tuesday January 14, 2025 @12:15AM (#42693940)
Riddle me this: if my web page is for a local cafe and I've uploaded 5 images and 7 paragraphs is there anything I shouldn't share?

Wordpress optimized hosts will have "servers" sharing the apache, the kernel, the php libs, even the DB instance. The effective burden of an additional host is tiny. Which is perfect for a local cafe's webpage which might be lucky to get a hit an hour.

Now how do you think you'll compete on price by using containers when your competitor can host a 100x the cafe web pages? The cafe owner does not care that they are sharing a php lib instance. They care that their 7 paragraphs appear when the page loads.

Re:WordPress Is in Trouble by Sharlin on Tuesday January 14, 2025 @06:44AM (#42696125)
Because containers don't really solve any problems in this use case (or many others, honestly) and instead make everything more difficult.
Re:WordPress Is in Trouble by munchler on Monday January 13, 2025 @03:56PM (#42689146)
What is it about PHP that makes this low-resource scenario possible?
Re:WordPress Is in Trouble by magicmicah85 on Monday January 13, 2025 @04:05PM (#42689309)
I would say the biggest reason might be that PHP doesn't have to worry about the web server aspect. Apache (or another webserver) serves the requests, PHP just returns the page to Apache. This is one of the ways that Apache can serve hundreds of PHP based sites, cause there's no need to spin up another web server and Apache is pretty fast at what it does.
Re:WordPress Is in Trouble by JodieBenitez on Tuesday January 14, 2025 @03:06AM (#42694878)
PHP being low-resource is a fallacy. You either:

- use mod_php which must start an interpreter instance for each request and has to dump all associated resources (db handle and the like) and memory when the request is served

- use something like FPM that has a pool of workers ready to communicate with the web server, which is more or less what every other languages do, if not via fast-cgi just by proxying an application server

Another way is event-driven, async PHP application server, but again it's not any different than similar solutions in other languages.

Now why people think PHP is low-resource ? That's all rose tinted glasses, because back in the days when everyone just used mod_php on cheap shared hosting for low-traffic websites, the execution model made it possible to get away with leaky apps since all memory was flushed at the end of the request.

If you want to go low-resource, use something like Go which is both much faster than PHP and has a lower memory footprint or choose an execution model that shares resources between requests (available in any JS, Python, Ruby, whatever you like).

Re:WordPress Is in Trouble by jjk7 on Monday January 13, 2025 @03:58PM (#42689196)
That's just CGI. You could theoretically do the same with any other language, but PHP is just the most popular.
Re:WordPress Is in Trouble by greggman7 on Monday January 13, 2025 @04:10PM (#42689391)
PHP integrates with the server. It does not have the spawn a new process per request like CGI
Re:WordPress Is in Trouble by Suppafly on Monday January 13, 2025 @05:34PM (#42690421)
I don't understand the distinction you're trying to make.
Re:WordPress Is in Trouble by nicce on Monday January 13, 2025 @05:58PM (#42690691)
The difference in resource consumption is huge.
Re:WordPress Is in Trouble by Nectar0516 on Tuesday January 14, 2025 @12:14AM (#42693933)
Not having to spawn a new process greatly decreases the time it takes to process a request, which greatly increases the amount of requests you can serve with a given amount of hardware.
Re:WordPress Is in Trouble by jopsen on Monday January 13, 2025 @11:38PM (#42693705)
I think dreamhost runs php as fcgi.

I'm actually not sure that fcgi is that bad, even for other languages, but most shared hosts will probably limit what you can do in terms of resources.

Re:WordPress Is in Trouble by lkrubner on Monday January 13, 2025 @11:19PM (#42693575)
This. If Symfony or Ruby on Rails or Django or Quarkus or NextJS could replace Wordpress, then they would. I myself wrote Symphony for many years (2008 to 2014) and I was certain it could kill Wordpress, but it failed.

The combination of Wordpress's defaults, its ease of use by designers, and the ability for one server to handle hundreds of installments, means that almost nothing can replace it.

Re:WordPress Is in Trouble by hombre_fatal on Monday January 13, 2025 @03:21PM (#42688559)
It's just a reminder how much "right place at the right time" plays into the phenomenon of ubiquity, from Wordpress to Harry Potter to Zoom to Javascript.

There are countless efforts to make the next Wordpress out there, yet no combination of Scheme and Rust is going to make up for the critical missing ingredient of "right place at the right time".

Re:WordPress Is in Trouble by nottorp on Monday January 13, 2025 @03:27PM (#42688666)
You mean there aren't already 20 unfinished projects reimplementing Wordpress in Rust?
Re:WordPress Is in Trouble by treyd on Monday January 13, 2025 @05:18PM (#42690229)
Not yet there aren't. Perhaps we should form a committee to start a few and ensure that none of them actually have thr critical mass go succeed!
Re:WordPress Is in Trouble by nottorp on Monday January 13, 2025 @06:21PM (#42690939)
There's no need. Most "rewrite in Rust" projects implement some basic functionality and miss the other 90%, get posted here for self promotion and then get abandoned don't they?
Re:WordPress Is in Trouble by andrewmcwatters on Monday January 13, 2025 @03:24PM (#42688614)
This is the right time. Strike while the iron is hot. People are angry and concerned. Someone just needs to come forward with an attractive way to capitalize on the situation.
Re:WordPress Is in Trouble by hombre_fatal on Monday January 13, 2025 @03:29PM (#42688702)
But the problem is that if Wordpress disappears overnight, you're left with a sea of alternatives that's 100x larger than when Wordpress rose to popularity.

Ex-Wordpress users are just going to diffuse into all the other decent options that already exist. Or stick with a Wordpress fork that caters to them. Though note that Wordpress isn't going away. How many Wordpress users even know who Mullenweg is?

The idea of cobbling together yet another blog platform that will somehow capture these users better than Wordpress plus all the decent incumbents is some good ol fashioned developer hubris. :P

Re:WordPress Is in Trouble by munchler on Monday January 13, 2025 @04:01PM (#42689248)
There are many examples of an entrenched incumbent being displaced by a new killer app. All it takes is the right new features and perhaps a path from the old to the new.
Re:WordPress Is in Trouble by raverbashing on Monday January 13, 2025 @03:27PM (#42688669)
And honestly WP is a great product. No other CMS managed to get so much community around, so many plugins etc

Right timing absolutely, but there was also great product sense there

Drupal feels like it's a bureaucrats paradise. Other CMSs never got there neither

Re:WordPress Is in Trouble by samuell on Monday January 13, 2025 @03:30PM (#42688725)
As I understand, the vulns come because of a big messy codebase and the idea to solve everything with another 3rd party plugin.

Processwire OTOH is fantastic in this regard. Super small and generic core with minimal, close to non-existent attack surface, and a programmatic API that lets you solve custom functionality with a few calls to the content API instead of another plugin.

Leads to practically maintenance free sites.

Almost the security of a static site, with the flexibility and dynamic features of a proper cms.

After having the nightmare of maintaining a dozen WP and Drupal sites in the past, I can now just let the sites chug along for years without intervention.

Re:WordPress Is in Trouble by kemayo on Monday January 13, 2025 @03:51PM (#42689082)
> shake the baggage of being PHP

PHP is why WordPress was a success. PHP is available basically everywhere, for cheap. You can get a $5/month hosting plan that'll give you a VPS with mod_php and mysql and you'll be able to install WordPress. (Also, WordPress put some actual effort into having a quick-and-simple setup process. If you can upload some files onto a server, it can take it from there.) Thus anyone can trivially install WordPress.

There's "better" languages, but even today they tend to require more of you to get a working site deployed.

Re:WordPress Is in Trouble by jopsen on Monday January 13, 2025 @11:42PM (#42693735)
It's actually a bit surprising that no other languages tries to make server pages the way php and asp3 did.

Of course the model is flawed, but so easy to get started with :)

Re:WordPress Is in Trouble by ValentineC on Monday January 13, 2025 @03:49PM (#42689040)
> I'm surprised that there hasn't been a larger profile attempt to make a spiritual successor to it that can shake the baggage of being PHP and the long history of vulns that have come along with it.

I imagine that a spiritual successor would have a one-click install in many web hosts, which is all but impossible if not still written in PHP, and then installable through the various turnkey web hosting reseller stacks (e.g. Softaculous).

Then, replicating many of the popular plugins, and getting a whole community of contributors onboard who already make their living off WordPress and have little incentive to adopt something with little traction.

WordPress isn't a code framework; it's a very complete application with a massive ecosystem of plugins that serves as its moat.

Re:WordPress Is in Trouble by pessimizer on Monday January 13, 2025 @03:32PM (#42688767)
> a spiritual successor to it that can shake the baggage

Plenty of people have made better CMSes, Wordpress is big because it got big, and a lot of people depend on it. And since an enormous number of people are involved with it, your upstart system will never have the capability of Wordpress. Whatever capability you come up with, somebody will have already made a horrible module to install on Wordpress to do it that after 10 years has become almost alright, or at least all of the flaws have been posted on messageboards and everybody knows how to work around them.

Wordpress isn't wordpress because it's good, it's wordpress because it was good enough at the time, and its competition was Drupal and Joomla (or something not PHP.) PHP baggage? PHP isn't PHP because it's good, it's PHP because of mod_php, and cheap hosts. To repeat, your choices: Wordpress, Joomla, Drupal, or figuring out how to run another language on your cheap host, or having to pay to upgrade your hosting account. By far the best option for most people was Wordpress.

If you want to compete with Wordpress, first get a time machine, then go back to that time and write something better in PHP.

Re:WordPress Is in Trouble by dylan604 on Monday January 13, 2025 @04:55PM (#42689961)
meh, if you're gonna cheat with a time machine, then just bring a floppy disc with the various versions of wordpress. as PHP gets updated, just release the newer version of wordpress. it's open source, right?
Re:WordPress Is in Trouble by dageshi on Monday January 13, 2025 @03:33PM (#42688778)
Every time I read a comment like this about replacing WP and PHP with a successor it just sounds so incredibly out of touch.

I mean no offense OP but it's obvious you have no clue at all about who actually uses WP and why they do it.

Re:WordPress Is in Trouble by levocardia on Monday January 13, 2025 @06:07PM (#42690792)
Yes, I always see people post comments like "why not just use (some crazy stack of CLI tools, markdown, source control, and CDNs) it's way better for XYZ reason" not realizing that the people behind most WP sites--which constitute something like 25% of the internet--are in general extremely nontechnical people who are posting recipes, sharing knitting patterns, writing travel blogs, archiving family photos, etc., and who have ZERO interest in anything that looks like source code.

And I don't blame them! I run wordpress sites and I sigh with frustration any time I have to insert a custom HTML block, and I am technical. When I'm writing on WP I want it simple and easy.

WP is also not just a CMS where you can drop in something else. It's a colossal ecosystem of plugins, themes, and so on. Some sites run on entire mini-ecosystems within the WP ecosystem, e.g. generatepress/generateblocks/generatecloud.

Re:WordPress Is in Trouble by marcolussetti on Monday January 13, 2025 @11:14PM (#42693537)
WordPress is to creating website what Excel is to generic business calculations.
Re:WordPress Is in Trouble by nicce on Monday January 13, 2025 @05:57PM (#42690676)
There is Ghost at least: https://ghost.org/ https://github.com/TryGhost/Ghost

However, it has recently shifted to more limited audience. (payed subscription-based content with different tiers)

Re:WordPress Is in Trouble by notatoad on Monday January 13, 2025 @05:57PM (#42690678)
the baggage is the selling point. there's so many other ways to build a website that aren't wordpress and replicate the core functionality, the reason it sticks around is the huge legacy of plugins written in php that can't be easily replicated.