Looking at many Open Source blogging systems, WordPress is definitely the standout in my option and I plan to build a personal site with it shortly.
On the other side of the coin, I’d also like to develop blog hosting service for a community but I’m concerned about the current templating architecture from a security standpoint.
Can anyone share any insights they may have into using WordPress in a multi-user situation? (based on the current version, a single MySQL backend with multiple frontends; information or speculation on how multiblog WordPress will function is welcome too)
It seems to me (with the limited time I’ve had to use the system) that any user with templating access is able to execute any code he likes and therefore has complete access to MySQL credentials (for that individual blog), has the ability to increase their user level, etc.
- You must be logged in to reply to this topic.