#wordpress 2022-03-07

2022-03-07 UTC
#
cambridgeport90[
Interesting. Then again, It probably didn't have any credits whre you were mentioned. That's probably why you didn't see it.
#
GWG
cambridgeport90[: Always happy to look at anything that works with something I worked on.
[tantek] and IntriguedWow[d] joined the channel
#
cambridgeport90[
Has anyone in here heard of a negative security landscape for Wordpress? As mentioned earlier? I was advised that the issues are related to plugins.
#
GWG
cambridgeport90[: Every system has possible security issues. That's why you have to keep it up to date
#
cambridgeport90[
There are four vulnerabilities that have supposedly occurred in 2022 alone in the core CMS.
#
cambridgeport90[
I'm only asking because I was advised against using it in its latest incarnation.
#
GWG
cambridgeport90[: It's not a yes/no question, to be honest
#
GWG
WordPress powers 40% of the identifiable web.
#
GWG
It's a large target
#
GWG
So people are always looking for exploits
#
GWG
When they find them, they get patched.
#
GWG
Wouldn't you be more worried if they weren't?
#
GWG
Some projects aren't as diligent?
#
GWG
And I'm not defending WordPress, I have issues with it also
#
GWG
I just think on a security level, it is unfair to suggest it is more insecure than other platforms.
#
GWG
Admittedly, a static site generator is much more secure, but that's because there is nothing to log into
#
GWG
But it has its own problems
#
cambridgeport90[
I definitely would be more worried, honestly. But I'm trying to find some definitive articles regarding which plugins were affected by whatever issues were cited.
#
cambridgeport90[
Did you guys hear of anything plugin related?
#
GWG
cambridgeport90[: Yes, it wasn't one I used, and they patched it
#
cambridgeport90[
Which one was it?
#
GWG
Updraft Plus
#
GWG
It allowed someone to download a backup of the site
#
GWG
But to do so, they still needed a login, just one of insufficient permissions
#
cambridgeport90[
What the heck is that? LOL No wonder I missed the memo.
#
cambridgeport90[
* Makes sense, then, that I missed it considering I only used the XML backups via manual export.
#
GWG
cambridgeport90[: It's a basic plugin with a premium option for extra automatic backup functionality
#
cambridgeport90[
Oh... yeah. I never used it.
#
GWG
cambridgeport90[: What do you want to do with your site?
#
cambridgeport90[
It's mainly a blog, with lots of notes, and some other post types as well. This previous question was in light of somebody suggesting that I stay away from Wordpress do to security issues and the number of plugins that I have.
#
GWG
cambridgeport90[: I'm not saying I don't understand their point of view, just that it isn't nuanced.
#
cambridgeport90[
I think I'm going to have to get some more details.
#
GWG
cambridgeport90[: They temporarily shut down one of my plugins over improper santization. I think it was an overreaction, but I fixed it. So, the repo does scan plugins regularly.
#
cambridgeport90[
I think that might have been what my friend was referring to, actually. But in a much more general way.
#
GWG
Tell me if I can help in any way
#
cambridgeport90[
I will once I figure out what's happening. Thanks, though!
[fluffy], angelo, kimberlyhirsh[d], jsbach, Silicon[d], corenominal[d], sayanarijit[d], firfe, Asaf_Agranat[d], [KevinMarks], [snarfed], Ramon[d] and mossymaker[d] joined the channel
#
[snarfed]
interesting failure case here, the webmention display on this site ended up inside the h-entry, which confused Bridgy Publish. https://pin13.net/mf2/?url=https://www.digisal.com/2022/03/i-need-to-eat-better/ , https://github.com/snarfed/bridgy/issues/1140
#
[snarfed]
hah it has h-entry on the body element. so yeah they're going to have a bad time
Milana22 joined the channel
#
Milana22
Hello everyone. I am a newbie here and to wordpress. I recently wanted to change the description of some cta buttons, and change the shape and size. When I opened the site in incognito, they changes were not refelcted and one of the pages looked static. I spoke to someone on siteground and they mention that I have json errors which I don
#
Milana22
know how to view or fix
#
Milana22
I was making button changes in elementor. Can anyone help with this issue? Thank you all for your time
[aciccarello], shaunix[d], MarkJR84[d], P1000[d] and maxwelljoslyn[d] joined the channel