Conversation
Notices
-
Caved to the wordpress demon
-
@pwm bad decision
Check the plugins you download, if they haven't had updates for months, forget about it
-
@coolboymew I don't need plugins. Just a few content pages. It's so someone else can work on making it look nice because my aesthetic sense is geared towards gopher site circa 1999 and that's not great for business with giga normies
-
@pwm no plugins? It's probably gonna be okaaaaay
Keep in mind that even freaking themes can be an attack vector
Be sure to properly isolate it on the server on its own user with no other permissions than wordpress or else it really can wreak havoc if something happens
Be sure to have AIDE32 installed that scans the wordpress files to see if there's something weird that dropped somewhere
-
@coolboymew other than HAVING to use mariadb because there's too much technical debt for them to make things work with postgres, it was pretty straightforward.
-
@coolboymew yeah it doesn't even have file system access (for now), so I'm not *terribly* worried about it.
I would have used a static site for this tbh but my webdev-fu is not up to snuff to make something that isn't concentrated extra-strength normie-repellant and one of my people offered to do it if I set up wordpress, so I wasn't going to leave free shit on the table.