Comment

Comment by falcolas

Simplicity? Perhaps in its use, but not the code. The code and hosting requirements are, frankly, Frankenstein's monster levels of frightening.

~~You have to~~ WP expect you to install it such that it can modify its install folders - all of them. Security-fucking-nightmare.

It will use incoming requests to trigger "cron" jobs (which can include self-upgrades), via a non-loopback HTTP request.

It falls apart under any kind of load, both because of unoptimized DB queries, and because of PHP. You have to put a cache in front of it to be able to handle getting on HN, let alone Reddit.

Arbitrary plugin installation, in a non-sandboxed environment (see prior point about an application-writable install). Need more be said?

You really have to dedicate an admin to it if you want to keep it secure and performant. I still get angry remembering my experience installing, securing, and setting up caching in front of it.

parent falcolas 5 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton