Hi,

I shouldn't laugh but am quite hardly. I have avoided WordPress and it's followers of wannabe script kiddies for a long time. Though for sure there are some great DEV's for WP.

For years it has been probably the most simple and well known script to have multiple holes and annoyances. Buying themes/plugin's from young guys/kids or even being given them without knowing the coding language yourself is a risky business. I have found themes in the past where the hacker was so lame they simply base64()'d their malicious code, and Joe Public wouldn't have a clue. So after minimal issues with a mini blog I use for news on a larger site (WP3) I decided to start beta testing v4.. and have been for a couple of weeks now having much fun defending the script and files.. If not for email alerts telling me files had been accessed in the second beta the test site would of been toast.

I'm quite happy now running 4.1-alpha-20140905 but still getting attacked by idiots trying to brute force the fake admin page, for days now... there are some helpful security plugin's but none of them do everything. No offence but WP has "hack me for fun" written all over it. So many flaws that only a hacker mind would see. Either way.. check your code and don't buy from random's people.

I'm back to carry on work at my test site and see what they can come up with next.

I may be sticking around the WP community as I have surprised myself with what can actually be done with it, you would never guess it is a blog now. Arcade plugin incoming soon :)

Regards,
AC