Secure alternative to Wordpress?

[paalmtree]

Hi guys, a client has 2 dozen of Wordpress microsites. It is hosted with BlueHost on a few separate accounts - a bunch of sites per hosting account.
The malware attacks are endless and Sucuri service is useless. It doesn't clean sites properly and they get reinfected somewhere on the server level.

We are looking for a different platform.
> What secure alternative to Wordpress would you recommend?
Is there anything that is bullet=proof against hackers? (Well, to whatever degree anything can be booklet-proof...)
> What are the costs for what you are suggesting considering that it's dozens of microsites...
> Where would this be hosted?
> How easily would it be to migrate content and designs from Wordpress?
> Does it come with free email addresses, like BlueHost offers (if hosting is native).

Basically what is the best solution for this issue?

Thank you, guys!

 

[Dopious]

The malware attacks are endless and Sucuri service is useless. It doesn't clean sites properly and they get reinfected somewhere on the server level.

If you get server level infections, the real problem is not WordPress. Move and secure your servers instead.

 

[paalmtree]

Hi guys, a client has 2 dozen of Wordpress microsites. It is hosted with BlueHost on a few separate accounts - a bunch of sites per hosting account.
The malware attacks are endless and Sucuri service is useless. It doesn't clean sites properly and they get reinfected somewhere on the server level.

We are looking for a different platform.
> What secure alternative to Wordpress would you recommend?
Is there anything that is bullet=proof against hackers? (Well, to whatever degree anything can be booklet-proof...)
> What are the costs for what you are suggesting considering that it's dozens of microsites...
> Where would this be hosted?
> How easily would it be to migrate content and designs from Wordpress?

Basically what is the best solution for this issue?

Thank you, guys!

If you get server level infections, the real problem is not WordPress. Move and secure your servers instead.

Bo it actually is, the Wordpress vulnerabilities are a doorway to all sort of stuff...
It's site level for sure, and then it becomes server level issues, not sure what exactly, but they for sure want to change the platform...

 

[Project Limitless]

Moving to a different platform won't solve your issues entirely. Each one comes with their own issues. They only real solution is to custom code a website.

 

[paalmtree]

Moving to a different platform won't solve your issues entirely. Each one comes with their own issues. They only real solution is to custom code a website.

Well, for 50 websites that are just test pages I can't imagine it to be a solution...

What about Wix or any similar ones?

 

[BassTrackerBoats]

Bluehost is your problem if it is on their garbage shared hosting.

I'd move them, clean them up and send your client a bill.

 

[Dopious]

Bo it actually is, the Wordpress vulnerabilities are a doorway to all sort of stuff...
It's site level for sure, and then it becomes server level issues, not sure what exactly, but they for sure want to change the platform...

So set them up on a VPS and make sure you don´t install unsecure plugins then. I never had a WP site hacked, so WP itself is secure.

 

[TheMarquis]

Bluehost is your problem if it is on their garbage shared hosting.

I'd move them, clean them up and send your client a bill.

This. Avoid anything under EIG's umbrella as much as you can.

 

[paalmtree]

So set them up on a VPS and make sure you don´t install unsecure plugins then. I never had a WP site hacked, so WP itself is secure.

Well, what do we call "unscure plugins". The client does use a bunch of plugins, many are free. And I don't webmaster the sites, neither is the client. They don't have time and the sites are not money makers, just various tests... So, they don't want to allocate a resource to someone who will keep updateing gazillion plugins on gazillion dead sites, but they also don't want to delete them, keep them just in case...

When you say "clean them", that's the problem.
Sucuri supposedly cleans them, yet they are some stupid link redirects and whatever else that it doesn't get rid of...
And there are no clean backups, as backups that they have seem to too already been infected.

 

[Dopious]

Well, what do we call "unscure plugins". The client does use a bunch of plugins, many are free. And I don't webmaster the sites, neither is the client. They don't have time and the sites are not money makers, just various tests... So, they don't want to allocate a resource to someone who will keep updateing gazillion plugins on gazillion dead sites, but they also don't want to delete them, keep them just in case...

Well convert the sites to html then with https://webtozip.com free version and upload them to any webhosting account or directly to a cdn storage solution, fast and secure without any updating. Easy peasy.

 

[paalmtree]

Well convert the sites to html then with https://webtozip.com free version and upload them to any webhosting account or directly to a cdn storage solution then, fast and secure without any updating. Easy peasy.

Wait, but it will be just frontend HTML. What about all the backend? Sorry, I am not technical, so it's confusing to me. Could you please explain?
Also, what is Cloudfare here for?

Just to clarify, many websites are active, only some are dead ones...

 

[Dopious]

Wait, but it will be just frontend HTML. What about all the backend? Sorry, I am not technical, so it's confusing to me. Could you please explain?

If the client does not want to maintain them, then html pages is the way to go. If the want a backend WordPress is still the way to go, but in their case maybe with a Managed Hosting that make sure they are up to date and secure.

Also, what is Cloudfare here for?

Who mentioned Cloudflare?

 

[paalmtree]

If the client does not want to maintain them, then html pages is the way to go. If the want a backend WordPress is still the way to go, but in their case maybe with a Managed Hosting that make sure they are up to date and secure.



Who mentioned Cloudflare?

You mentioned cdn storage and I googled it, Cloudfare came up Obviously I don't know what cdn storage is

Managed hosting. ... Who would be the cheapest (yet reliable) provider if we are talking about multiple sites?

And how do I go about cleaning them? A professional web security company Sucuri doesn't seem to be able to, and they have been paid thousands of dollars in their service... for nothing besides attempting to reclean them every week...

 

[BassTrackerBoats]

You mentioned cdn storage and I googled it, Cloudfare came up Obviously I don't know what cdn storage is

Managed hosting. ... Who would be the cheapest (yet reliable) provider if we are talking about multiple sites?

And how do I go about cleaning them? A professional web security company Sucuri doesn't seem to be able to, and they have been paid thousands of dollars in their service... for nothing besides attempting to reclean them every week...

You are dealing with a situation that is a bit past your knowledge base.

Perhaps hire someone to help this client out as that sounds like it would be best for your client.

 

[Dopious]

You mentioned cdn storage and I googled it, Cloudfare came up Obviously I don't know what cdn storage is

Ok, BunnyCDN would be a cheap and fast one with their multi region storage.

Managed hosting. ... Who would be the cheapest (yet reliable) provider if we are talking about multiple sites?

There is a lot of them, mostly between $10-$20 per site when it comes to multiple sites. Like Rocket.net and so on.

And how do I go about cleaning them? A professional web security company Sucuri doesn't seem to be able to, and they have been paid thousands of dollars in their service... for nothing besides attempting to reclean them every week...

A good Managed Hosting cleans them for you included in the price.

 

[paalmtree]

You are dealing with a situation that is a bit past your knowledge base.

Perhaps hire someone to help this client out as that sounds like it would be best for your client.

They tried.
I need to find the solution for this situation one way or another...
So, could you please help me with answers?

Managed hosting. ... Who would be the cheapest (yet reliable) provider if we are talking about multiple sites?

And how do I go about cleaning them? A professional web security company Sucuri doesn't seem to be able to, and they have been paid thousands of dollars in their service... for nothing besides attempting to reclean them every week...

 

[paalmtree]

They tried.
I need to find the solution for this situation one way or another...
So, could you please help me with answers?

Managed hosting. ... Who would be the cheapest (yet reliable) provider if we are talking about multiple sites?

And how do I go about cleaning them? A professional web security company Sucuri doesn't seem to be able to, and they have been paid thousands of dollars in their service... for nothing besides attempting to reclean them every week...

Oh, sorry, I missed one of your messages above...

 

[MKSKS]

secure alternative to Wordpress

Hire an expert (not just any developer) to code your custom CMS.
Anything that's opensource has certain amount of risk associated as the entire source code is open to public.
Ghost, Blogger, Medium are good options is it's just about content rich websites.
Shopify if it's an ecommerce.

malware attacks are endless

That's mostly server level stuff.
In some case it could be because of poorly coded plugins, themes.
And if they are endless you're surely on a server that's used to these online attacks.
Find a better secure host or build a secure server network on reputed cloud servers.

Wordpress vulnerabilities are a doorway to all sort of stuff...

WordPress core is not always that vulnerable it's mostly the 3rd party plugins and themes.
Use child theme to custom code small features and avoid plugins for every small feature.
Use the least number of plugins and avoid poorly coded unpopular plugins.

 

[paalmtree]

Hire an expert (not just any developer) to code your custom CMS.
Anything that's opensource has certain amount of risk associated as the entire source code is open to public.
Ghost, Blogger, Medium are good options is it's just about content rich websites.
Shopify if it's an ecommerce.

That's mostly server level stuff.
In some case it could be because of poorly coded plugins, themes.
And if they are endless you're surely on a server that's used to these online attacks.
Find a better secure host or build a secure server network on reputed cloud servers.

WordPress core is not always that vulnerable it's mostly the 3rd party plugins and themes.
Use child theme to custom code small features and avoid plugins for every small feature.
Use the least number of plugins and avoid poorly coded unpopular plugins.

Thank you. Yes, for the future it all might work, but for now I am trying to find the cheapest possible solution that will still do what is needed. There ARE 3rd party plugins, but recoding sites that have no commercial value seems to be unwise investment of time and $.
And once I hired a developer on Guru to customize the WP theme, and I am pretty sure he was the one who added some redirect code on the site, which we now cannot get rid of - JustHost tried, Sucuri tried.

 

[paalmtree]

Ok, BunnyCDN would be a cheap and fast one with their multi region storage.



There is a lot of them, mostly between $10-$20 per site when it comes to multiple sites. Like Rocket.net and so on.



A good Managed Hosting cleans them for you included in the price.

So, just spoke to Clowdways (managed hosting. They said :"We do not provide provide application-level support." Well, that wouldn't help, as sites need to be cleaned, and kept clean.