Comment on Tumblr to move its half a billion blogs to WordPress

• Goodie@lemmy.world ⁨2⁩ ⁨months⁩ ago

  is it decades of hacky code, or decades of battle tested code?

  I haven’t touched wordpress in… many years, but I’ve seen far too many developers look at old code and call it junk… only to break things horrifically when they attempt a rewrite.

  source

  • catloaf@lemm.ee ⁨2⁩ ⁨months⁩ ago

    Hacky.

    Wordpress has a reputation for the most moronic security issues. Especially when it’s built on PHP, which has its own reputation for moronic security issues. And that’s saying nothing about the quality of plugin developers or plugin code.

    I’ve worked on Wordpress sites, plugins, and themes. That was many years ago now, but I doubt it’s changed that much. If anything, it’s mostly benefited from improvements to PHP.

    source

    • fake@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

      Has to rank as one of the most exploited pieces of software ever.

      Definitely be not aided by the fact it’s targeting an audience without the skills or knowledge to adequately configure, maintain and monitor it. And the plugin community only makes the vulnerability exposure worse.

      source

      • sugar_in_your_tea@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

        Yup. I imagine a lot of users install a lot of plugins they don’t actually need, which just expands the attack surface.

        source
      • webhead@lemmy.world ⁨2⁩ ⁨months⁩ ago

        Kind of the old Windows vs Mac problem though. It gets so many exploits because it is so ridiculously popular. No one is going to bother looking for exploits in shit that no one uses right? I’m sure they’ve got problems like any project but I’m not convinced they’re THAT bad. Not to mention a lot of exploits you see are plugins doing dumb shit, not WP itself.

        source
  • chilicheeselies@lemmy.world ⁨2⁩ ⁨months⁩ ago

    Both honestly. Very spaghetti, but noone can deny that it just works from a user perspective. Would I want to maintain the code? Hell no! Do use it as an end user? Hell yeah!

    source

    • sugar_in_your_tea@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

      Nah, not touching that with a 10’ pole. There have been far too many exploits for me to feel comfortable putting any of my important data on it. And it’s not just that it’s popular, the level of sophistication for these attacks are… alarmingly low.

      source

      • MangoPenguin@lemmy.blahaj.zone ⁨2⁩ ⁨months⁩ ago

        It’s a public site that’ll be backed up regularly, what kind of important data would you be putting out publicly?

        source

        • -> View More Comments
• eager_eagle@lemmy.world ⁨2⁩ ⁨months⁩ ago

  my thoughts exactly. Who in their sane mind sees WordPress as a solid foundation for anything?

  source

  • Peepolo@lemmy.world ⁨2⁩ ⁨months⁩ ago

    Most large publishing companies, the white house and various government departments all use WordPress for their main sites. Its the third party integrations that cause security issues, not the core code.

    source

    • sugar_in_your_tea@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

      Yet the third party integrations are pretty much the whole point of WordPress.

      source

      • Peepolo@lemmy.world ⁨2⁩ ⁨months⁩ ago

        Indeed, but using poor ones is what causes the wrong opinions that WordPress isn’t solid.

        source

        • -> View More Comments
• jedibob5@lemmy.world ⁨2⁩ ⁨months⁩ ago

  Not as familiar with WordPress, but if that’s the case, yeah, I don’t have high hopes for this going well…

  source

  • Woovie@lemmy.world ⁨2⁩ ⁨months⁩ ago

    Every comment in this thread might as well be hearsay. I wouldn’t take it too seriously. I think I’ll trust the corporation that runs wordpress.com and maintains the open source WordPress project instead to know what they’re doing with WordPress.

    source