Comment by john-shaffer | Hacker News Reader

Comment by john-shaffer | Hacker News Reader

Parent Full thread

It's often a requirement that non-devs be able to edit the website. WordPress is okay if you have a site that you don't really care about and isn't worth hacking, or if you can afford to pay Wordfence $99/mo and take the time to make it reasonably performant.

Gatsby is not a CMS. It would be very nice to have a well-designed and supported CMS that is actually secure and efficient by default.

> How much more complicated can it get then "Here is HTML, CSS and JS put it on a webserver."?

My favorite so far is the combination of WordPress and Gatsby in such a way that you get the worst of both worlds. E.g. building a single page requires creating 10-20 posts in WP, with zero ability to see what changes will look like without actually deploying the site. All this complexity instead of just setting rel="preload".

> WordPress is okay if you have a site that you don't really care about and isn't worth hacking

Unfortunately all sites are worth hacking to host phish kits (fake login pages for phishing), and hosting one will get your website added to browser warn lists and flagged by search engines. There seem to be automated bots scanning for vulnerable WordPress sites so it's possible to become a target without much attention from the attacker.

This is true, but I would hope that readers here know enough to at least keep WordPress up-to-date. Most attacks target old exploits. There are millions of small WordPress sites that may never get hacked if they stay updated. If you become big enough, however, you become a much more likely target for zero-days. In that case, you probably don't want to be running WordPress any more than you want to be running Windows.

Totally agreed. There is room for something better. More modern than foundations than Wordpress without going too far into the JavaScript black hole.

We agree as well. Thats why we made tipe. We are focused on deeper, low code / no code integrations with frameworks that still allow fluid customizations.

Reply on news.ycombinator.com