MAMEWorld Forums - The Loony Bin - Re: Best/favorite website design software?

> Wordpress is a hacker magnet because it's one of the most widely used content
> management systems. Don't even think of using it unless you intend to really, really,
> really stay on top of any patches and security updates. If you're not up to that, you
> can get a managed hosting solution where they take care of the updates for you.
> Either way, you'll still probably get hacked. That's just life with Wordpress.

Wordpress security isn't as bad as it used to be, most of the attacks these days can't pwn a site immediately. You can also avoid the worst of them with mitigation strategies, including not allowing the web server to write to the Wordpress installation directories (you lose automated updates, but hacks can't trick it into replacing scripts with malicious versions), never moderating comments as an admin user (most or the recent vulnerabilities depend on this to do script injection), and forcing HTTPS for login and admin areas.