Comment on Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack
Anon518@sh.itjust.works 4 months agoWhat would you use instead?
Wordpress does a lot of things. You need to specify which things you want to do in order to narrow down a replacement. For example:
The more you can narrow your requirements, the easier it will be to find a secure solution.
static site? - Hugo, Jekyll, etc - just generates regular HTML
These are either vastly more limited, or they require you to be able to code.
ecommerce? - consider nopCommerce or OpenCard
I’ve never heard of these, but I have seen people say that if you want to do ecommerce you should only use Shopify, because even small differences can result in people not purchasing your products.
Yes, Jekyll and Hugo are vastly more limited, that’s the point. There’s no dynamic content, you just write in Markdown (the same thing Lemmy uses), pick a theme, and you’re good to go. No need to code anything, just a couple config files and Markdown.
Shopify is fine if you want something hosted. But since we were talking about WordPress, I assumed self-hosting was a desired quality. All of the platforms I mentioned are self-hosted, open source, and at least one from each category is compatible with PHP-only hosting providers, just like WordPress.
If we’re optimizing for easy, Squarespace should be on the table for static websites as well. I assumed we were talking about direct replacements for WordPress, not hosted alternatives.
you just write in Markdown (the same thing Lemmy uses), pick a theme, and you’re good to go
That is far too basic for most websites. It’s absurd to suggest that’s a valid alternative for something like Wordpress + Elementor.
Squarespace should be on the table for static websites as well.
How so? It’s not static that I’m aware of, unless you’re exporting it to a file after using the UI to create it?
I assumed we were talking about direct replacements for WordPress, not hosted alternatives.
Well, as you said, Wordpress does a lot of things. Shopify, Wordpress, Squarespace, etc., are certainly interchangeable/competitors to a large degree. Wordpress has hosted options and is a default/main option for many hosting companies.
You can build a full website with every major function and design option with Wordpress. You can’t with Jekyll and Hugo unless you can code.
555_1@lemmy.world 4 months ago
Something that gets built on my machine and pushed up to the site and doesn’t allow third party code to execute on the backend.
It really depends on what the website is.
If you have a use case, I can be more detailed.
MaximilianKohler@lemmy.world 4 months ago
How about a basic Squarespace business website? lemmy.world/post/12989654
555_1@lemmy.world 4 months ago
Cheap, easy, good.
Pick two. This is how most things in life are.
Personally, I’m a fan of static sites. But, being a web developer myself, setting up a simple form isn’t a big deal.
If dynamic content is required and you’re not a developer, you are at a crossroads. You can host your own Wordpress and get hacked eventually, or pay a cloud service like squarespace or wix, etc. but you’re at the mercy of price increases and a la carte features.
To be fair to Wordpress, they’ve come a long way. The core product isn’t horrible. However, they have no way to control 3rd party code, and that’s where all the malicious stuff comes from.