> I hope a static site generator comes along with an intuitive UI for non-technical people to easily update their own content.
Does this not exist? Would love to offer that to some of my non-technical team members.
Does this not exist? Would love to offer that to some of my non-technical team members.
My current pick of the crop: https://www.netlifycms.org/
I have no affiliation with Netlify, just my perceived benefits of Netlify CMS:
* Open source
* Static site generator agnostic
* Host the editor UI yourself
* No vendor lock-in
* Git based
P.S. These are all part of the https://jamstack.org/ movement.
I set this up last week and it’s amazing. It costs $0 for my small project.
I’ve aleo rolled out it out to event websites. And they love it too.
No database is a big win for bloggers, who should focus on content and not security.
What specifically about Wordpress makes it a security disaster? Do you mean the plugins or actual Wordpress?
Over the last few years, Wordpress core had gotten quite a bit better (to the point that I have gone back to Wordpress for my personal site). But previously, the core was victim to some embarrassing security issues. In Wordpress' defence, I can't think of a single PHP application as old or as large as Wordpress that did not suffer from similar problems.
Plugins are often an unmitigated security clusterfuck. I've seen things in popular Wordpress extensions that have made me want to trade in my laptop for an abacus and go full luddite. (I've also seen some really wonderful code.) The big problem I see is that a plugin has to be extremely popular before anyone with much of a background in writing relatively secure code will ever read the code. And by that time, it's so popular that it keeps getting hundreds of installs no matter what kind of flaw you find. Some plugin developers/maintainers are incredibly diligent and helpful, but I've also been threatened with legal action (more than once) when I've disclosed some really amateur security issues.
But, due to how the GP seemed to conflate Wordpress, and "everything else" I wondered what was the basis for his comment. I'm pretty clear on the security of WP itself.
> Some plugin developers/maintainers are incredibly diligent and helpful, but I've also been threatened with legal action (more than once) when I've disclosed some really amateur security issues.
Most WP plugins are terrible from a security perspective, and I've found the quickest method to resolution is to send a patch to the devs, solving the problem for them and me.