Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

WP has the ability to use (S)FTP to update the files rather than direct file access.

That said, it's intended for the long-tail of sites. If you know how to run an update script, you're already more advanced than a fairly big chunk of the WP userbase, so you probably should be doing updates that way. Many professionally developed sites will be using source control, so autoupdates are disabled anyway.



> WP has the ability to use (S)FTP to update the files rather than direct file access.

Well that doesn't help at all with security.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: