Hosting af wordpress-side?

Phillip Dyhr Hobbs:

Hello Thomas,

 because one click install = security risk

Phillip, Basicly i have a deep respect for you. I have that weakness that i only truly know the one install wordpress, we use at MaxiWeb - but where do you see the security risk? Why should it be more dangerous, to let the server unpack the latest version of wordpress, and put it to your webhotel, than if you, your self download the latest version of WP, unpack locally, and upload it by ftp? In my head it would give the same?

:-)

Jeg skal lige have noget på det rene. Jeg synes umiddelbart at unoeuro.com virker meget tiltrækkende, men for den pris jeg betaler, kan jeg så kun have én side liggende, eller er det ubegrænset? 

kun én side.

Martin van de Belt:

Phillip Dyhr Hobbs:

= Security risk....

Fx:

No Salt,

No custom Databasefile naming

(I wont go on...)

Det kommer nu helt an på hvilket 1-click installer program man bruger. Jeg er selv tilfreds bruger af Installatron, og dette tilføjer altid tilfældige salts genereret fra WordPress' API, samt installerer med et tilfældigt database-prefix.

Thanks for your comment Jannik,

It looks like its not all that dont add "salts" + WP prefix,

In my limited experience of 1'click installs, those two important steps werent taken :) 

@Martin, Your comment makes perfect sense :)

Phillip Dyhr Hobbs:

@Jannik Hansen

Thanks for your comment Jannik,

It looks like its not all that dont add "salts" + WP prefix,

In my limited experience of 1'click installs, those two important steps werent taken :) 

What prefix are we talking about? In the one-click its the basic install exactly like when you download a new one from Wordpress.org.. So all plugins have to be installed after, exactly like if you did it manually.. So no matter how you turn it around i can only see the one-click install as a time saver..

Phillip Dyhr Hobbs:

See section 6 

In our one-click you have the option to choose that your self... see here

Jeg må holde med Phillip på den her.

Jeg ville heller aldrig bruge en 1-click install.

Der har været stærke mistanker om at den her situation er skabt på baggrund af et Root-kit : 

http://community.websense.com/blogs/securitylabs/archive/2012/03/02/mass-injection-of-wordpress-sites.aspx

http://www.itpro.co.uk/639415/mass-injection-wave-whacks-wordpress-webpages