First of all, Wordpress is known to fix security issues quickly and platforms with many developers have more eyes on the code so it's only natural that they have a LOT of reported vulnerabilities. This does not mean that it's "inherently" insecure.<p>A static site can't enable...<p>- User management (Members)<p>- On-site-comments (That Search engines can find)<p>- Voting (Polls & Ratings are very popular on Wordpress!)<p>- Carts (For selling products)<p>- Any user submitted content<p>...without 3rd party services that rely on JS.<p>This means that you rely on several external services for the site to have these features and in the end, the costs will be higher than running it on Wordpress.<p>But it could possibly be easier to maintain, be more secure, have higher performance and the dynamic parts wouldn't all fail at the same time so the uptime of the core site could be better.
The most uninformative article I've ever read that was on the home page of HN. It's full of misconceptions and assumptions (that every WP based site can be be replicated with static site generators, that 'WP is inherently insecure' and so on).
I would love to maintain our websites with a static site generator and manage updates via pull requests to our version control system.<p>I don't have a single user who would understand that sentence. That's why we use WordPress.
> WordPress itself is an inherently insecure platform.<p>Linking to regular security updates for a system is proof that that system takes security seriously, not that it is insecure. I'd worry about an open source project that didn't have regular security updates.<p>Also, "inherent" is silly to use in this context.
I generally disagree with most of the arguments here, but the last part of this article makes a good point that the business owner (person buying website) usually doesn't make the decisions about the technology that gets used. This is especially true for SMBs (I'm excluding the DIY/hacker-types here).<p>I built a WordPress plugin inside of HubSpot called Leadin (it's now their HubSpot Marketing Free product). The idea was to build light weight marketing automation for Very Small Businesses. We started on WordPress because most small businesses use it. We incorrectly assumed in the beginning the business owners would be the decision makers on whether or not to use our product. We quickly found out it was usually the web development agency/consultant they worked with who would install it for them, then explain the value of the product. We eventually shifted our marketing to focus heavily on agencies which became our main acquisition source.<p>Agencies like to use WordPress because it's customizable enough to easily build what their clients need, is the same interface across every site and has a huge ecosystem of the add-ons that their clients what. Until you can replicate the WordPress 3rd party developer ecosystem it will remain the dominant player. Also, static sites can't do all the things WordPress does, like polling, comments, shopping carts, etc. you'd have to rely on a third party for those components and when you add up all those, I'd think that would be more than $100/year in subscriptions. It's easier and cheaper to have it all centralized in WordPress which is why agencies choose to use it. If you can charge a retainer too, the holy grail for agencies because it's reoccurring, predictable revenue, you're essentially getting paid to just keep things updated and make sure they don't break or get hacked.
I wrote a post about a Serverless CMS architecture that is a good follow up to this article: <a href="https://www.aerobatic.com/blog/a-serverless-cms-architecture/" rel="nofollow">https://www.aerobatic.com/blog/a-serverless-cms-architecture...</a>
I believe Medium is the next Wordpress because not only allows you to publish but also to consume in an elegant and productive way. The recommendation engine is quite good and the daily newsletter sent by email is good enough to make me want to check the stories right away. They make an extensive use of images that really adds to the user experience.<p>I used to be a Wordpress fan but now Medium has caught my attention.<p>So in essence it is not about the technical platform, it is about effective production and consumption, and Medium hits the nail on both.
Wordpress isn't just a thing that people use. It's a gravity well of humanity's non-technical web authoring aspirations; matter keeps accreting there in the form of plugins and feature additions. Escaping it at this point is going to be difficult for most people, similar to how sending satellites into orbit is infeasible for most small businesses.
It's more precise to say "problem" when you mean something bad, and not "issue," which is neutral. I am pretty sure that "issue" is a bureaucratic euphemism.<p>It seems the higher up you go, the worse language gets:<p><pre><code> Technician: "The server is on fire!"
Manager: "Uh . . . the server has a 'problem.'"
Senior Director: "Ahem, the service has an 'issue.'"
Owner: "You mean my server is on fire?"
</code></pre>
Actually, maybe it's middle management.
I would like to see a simple but extendable cms which would be mostly static but the non static parts would be handled by aws lambda or gce functions or something similiar.
Just adding DatoCMS (<a href="https://www.datocms.com/" rel="nofollow">https://www.datocms.com/</a>) to the list of CMS specifically designed for static websites (shameless plug)!<p>Here Netlify is listing all the available products in this niche, both commercial and open-source: <a href="https://headlesscms.org/" rel="nofollow">https://headlesscms.org/</a> Things are moving.. slowly :)
> Lektor is file-based by default, so updating content does not require a cloud server at all but merely access to the root file itself, which can be stored on a service like Dropbox or Google Drive. A developer can use a local server to generate dynamic content and a full-featured site, but the CMS, which is currently a simple Mac app, simply updates the original file.<p>This. This would be something phenomenal. The problem with WordPress and services like it, is that they take your content, package them into something they can understand and hides them under their pillows.<p>Inverting the control, like what the OP says -- where the user <i>owns</i> the content, that can be plugged into layers like WordPress, looks like the path towards the future.<p>I made <a href="http://hexopress.com" rel="nofollow">http://hexopress.com</a> with a similar vision. It is not yet a full blown shape of what I have in mind, but it cuts the concept well.
I was recently considering creating an IDE specifically for WordPress with built-in completion, tips and mapping for people who are skilled at programming but new to WP development. Would anyone use it?