2026-09-28 10:21 UTC
How WordPress assumes people do things but don't align with reality at all:
- You actually want to use the Posts feature to write news or blog posts
- Authors and columnists log in themselves to type things into the editor
- Gravatar is a great idea and we all want to use it
- We want to get comments and pingbacks to our sites
- XML-RPC is the way of the future
- Nobody would ever want to lock or delete users from a CMS
- A web app should always have write access to its own runtime files
Replies (1)
-
@jsmall@infosec.exchange 2026-09-28 10:37
@alda@topspicy.social The user management was always interesting to me. That woocommerce users who made an account to buy something get "a wordpress account" on the same table with the same apparent config as a Wordpress Admin with just an ACL preventing them editing the site always rubbed me the wrong way. (information is old and I'm open to be updated)