What is the best way for a non-techie to get a business website?

@Kintaro Yes - but that doesn't mean WP itself anywhere near "secure".

About hosting, that doesn't change if a software is secure or not.
If you expect reparations or anything in case something goes wrong, I can promise you they won't pay (see eg. 14 and 17 of https://en.wordpress.com/tos/). And if someone uses your blog to offer problematic content of any sort, or uses your domain for anything bad, in most jurisdictions you are at fault. Not Automattic.
 
@Kintaro Yes - but that doesn't mean WP itself anywhere near "secure".

I think that's true of any legacy web application out there that has not been rewritten from scratch in the last 3-5 years or factored in webapp security as part of their requirements in the last 7-10 years
 
....to repeat what I initially said:
Going by statistics, yes.
Sure, problems are everywhere, but WP is by far the worst on this list.

If other programs have bugs (that do or do not get abused) doesn't excuse anything of Wordpress.

Anyone who just insists on WP, use it. But then don't cry if you get hacked, sued by angry customers, sued by people receiving malware from your domain, imprisoned because of greedy film companies, shot by idiotic government staff that misread the text on your site, or whatever. WP was convenient, so what? lol

(yes, all these things happen, including the last one)
 
Last edited:
....to repeat what I initially said:


If other programs have bugs (that do or do not get abused) doesn't excuse anything of Wordpress.

Anyone who just insists on WP, use it. But then don't cry if you get hacked, sued by angry customers, sued by people receiving malware from your domain, imprisoned because of greedy film companies, shot by idiotic government staff that misread the text on your site, or whatever. WP was convenient, so what? lol

(yes, all these things happen, including the last one)

Any of those are true for having a website - whether it be powered by wordpress or not. One can leverage your server, domain, subdomain, cloud, etc.
 
eg. amount of compromised WP installs (both total number, and percentage of WP installs (or course that are estimations, based on crawler data and so on, but still)), or number of known security bugs per 1000 sloc, or...

...
As I said repeatedly, I'm not trying to evangelize here, I'm just warning. I did that, done, period.

In case anyone has more arguments like "bugs are everywhere" and so on, I know that already.

If someone doesn't want to believe me, it's ok.

And you can't convince me that WP is secure, so no need to try. As said already, statistics, and I even found bugs myself (sql injections = beginner level problem, and it was found less than an hour after looking at a WP download the first time).
 
Last edited:
eg. amount of compromised WP installs (both total number, and percentage of WP installs (or course that are estimations, based on crawler data and so on, but still)), or number of known security bugs per 1000 sloc, or...

...
As I said repeatedly, I'm not trying to evangelize here, I'm just warning. I did that, done, period.

In case anyone has more arguments like "bugs are everywhere" and so on, I know that already.

If someone doesn't want to believe me, it's ok.

And you can't convince me that WP is secure, so no need to try. As said already, statistics, and I even found bugs myself (sql injections = beginner level problem, and it was found less than an hour after looking at a WP download the first time).

No one needs to evangelize anyone - this is merely a questioning of presumptions and statements that are potentially being viewed by others in the future who may view it as fact.

Regarding the number of compromised WordPress installs, it is reasonable that there would be a higher number of WordPress sites compromised because there is a lot more WordPress sites out there.

According to @digitalpoint's cookie data at this very point in time (https://tools.digitalpoint.com/cookie-search), WordPress makes 73% of the marketshare today on blogging platforms. The next closest one is blogger - which is hosted by google at 16.0%, followed by Joomla at 8.1%.

One could very well argue that the number of vulnerabilities being identified is simply a result of marketshare and the rest of the platforms out there is not so much because the applications are coded more securely - but rather no one is really looking. It's merely security through obscurity.
 
it is reasonable that there would be a higher number of WordPress sites compromised because there is a lot more WordPress sites out there.

....luckily that doesn't matter for percent values, which I explicitly mentioned.
(compromised wordpress sites) / (compromised sites) VS (wordpress sites) / (sites)

One could very well argue
Sure - and while that has to be a factor, a) there's no way to prove a high/low amount of influence, and b) it doesn't really matter for the real-world risk of a random person choosing a software. As long as the majority values convencience over security and privacy :D I can't see WP losing it's leading market share in the next years; it will remain interesting for attackers.
 
Last edited:
Suggesting Drupal for a non-techie is not going to go well.

This question at hand is for sites that are good for non-techies.

I'd suggest Wordpress and someone to maintain it.

https://www.todo10.com/en/wordpress-monthly-maintenance/

Although $1200 a year seems like a lot.
I thought todo10 had a better prices. Weird.

1200 is way out of budget for this friend. I asked him if $50 a month was ok and he said no.

The culprit isn't always WordPress directly itself. From my own experience, it has a lot more to do with the WordPress plugins and themes.

Ya. I try to say that but all the themes depend on them and it's hard to convince him to go with something more drab even if it is safer.
 
Back
Top Bottom