undefined | Better HN

0 pointsrob7y ago0 comments

> but _maintaining_ a WordPress install is not fun and requires constant - almost tiring - oversight.

This isn't true. I've been running and managing 15+ WordPress websites for over 5 years now and not once run into any issues like you're describing, and I certainly haven't lost sleep or become 'tired' over it.

Using a good tool like ManageWP (or InfiniteWP, or any of the others, take your pick) makes managing multiple WordPress websites a breeze (e.g., it alerts you every morning with what updates are available), and with their paid backup/restore functionality there's really nothing to worry about if something did go wrong. Combine all this with a nice WAF or security plugin and you're fine. Or you can use a service like MalCare that combines both.

If you go months and years without updating, then yes you're asking for trouble like any other piece of software.

Too many people used WordPress over 10+ years ago and just stick to the same speech about PHP and WordPress and security and all that and how everything is so bad, and that a different CMS that nobody uses in a obscure language is sooo much better and secure (that won't be here in a couple of years in all likelihood.)

0 comments

jjeaff7y ago

The fact that you even mention that you get security updates "every morning" is an indication of how much work keeping a WordPress site secure can be.

I think it is just wordpress' ubiquiti that has made it a security issue though. Attackers are quick to build exploit bots the moment a new vulnerability is found and they scour the web for unpatched sites.

So if you don't stay on your toes, you will get pwned sooner or later with a wp site.

robOP7y ago

> The fact that you even mention that you get security updates "every morning" is an indication of how much work keeping a WordPress site secure can be.

Sorry for the confusion; I mean if there's a WP/Plugin/Theme update, I get notified every morning so I can go in and update (if needed.)

11235813217y ago

Your last paragraph is wrong. WordPress is a headache for people who keep their CMSes up to date. The speech about why Wordpress is a poor choice for a lot of projects has changed over the last decade, but it’s still true to say — possibly truer than ever. PHP is a lot better than it used to be, but not Wordpress-style PHP. There are great CMS alternatives that are also written in PHP and are better, secure, and set up so that they will be around for years.

j / k navigate · click thread line to collapse