Any One Familiar With Php Script Installations ?

Muhatrima

Power Member
Joined
Dec 20, 2020
Messages
778
Reaction score
491
So, I have been learning and building on just Wordpress, recently i have started experimenting with PHP scripts.

Could You Share Your Knowledge On Few Questions That I have Came Across.

1: How does one add google ads And Analytics Codes to PHP script ? "in WordPress I had to put Verification Code Between <Head></.Head >Of the theme" Either From Wordpress Backend/ By SEO Plugin Or Even By Theme File, and I am not sure if there is a common place that the HEAD or Body Codes are located in PHP scripts, if there is such file, which file should I be looking for ?

2: It seems that PHP Scripts, At least The ones I have tested So Far have somewhat smooth feeling to them!, although Wordpress website Speed can be optimized to the maximum 100% Page speed, but still PHP script has this smooth feeling from user experience side, not necessarily from page speed tests, So I was wondering If there is a criteria or niches on which PHP scripts are familiar for outperforming WordPress websites ?
For Eg : It is Never A good Idea To Build Forum Website With Wordpress, So is there some niche websites that PHP Scripts Excel ?

3: Finally, As I am Testing through these scripts and I have to Download Them Free before Deciding To purchase, What is the worst case scenario that Infected PHP Script Could Have On My Hosting ? Like How Much Administration Access Could Be Acquired Through Infected PHP script ? If I Delete the who installation path, and Database isn't it over ? And can it effect on other Sites Hosted on the same Server ?

Thanks In Advance.

I have learned a lot through this wonderful Community Forum, A lot that I would have never learned from any where else.
 
So, I have been learning and building on just Wordpress, recently i have started experimenting with PHP scripts.

Could You Share Your Knowledge On Few Questions That I have Came Across.

1: How does one add google ads And Analytics Codes to PHP script ? "in WordPress I had to put Verification Code Between <Head></.Head >Of the theme" Either From Wordpress Backend/ By SEO Plugin Or Even By Theme File, and I am not sure if there is a common place that the HEAD or Body Codes are located in PHP scripts, if there is such file, which file should I be looking for ?

2: It seems that PHP Scripts, At least The ones I have tested So Far have somewhat smooth feeling to them!, although Wordpress website Speed can be optimized to the maximum 100% Page speed, but still PHP script has this smooth feeling from user experience side, not necessarily from page speed tests, So I was wondering If there is a criteria or niches on which PHP scripts are familiar for outperforming WordPress websites ?
For Eg : It is Never A good Idea To Build Forum Website With Wordpress, So is there some niche websites that PHP Scripts Excel ?

3: Finally, As I am Testing through these scripts and I have to Download Them Free before Deciding To purchase, What is the worst case scenario that Infected PHP Script Could Have On My Hosting ? Like How Much Administration Access Could Be Acquired Through Infected PHP script ? If I Delete the who installation path, and Database isn't it over ? And can it effect on other Sites Hosted on the same Server ?

Thanks In Advance.

I have learned a lot through this wonderful Community Forum, A lot that I would have never learned from any where else.
To answer your 1st question:
What I prefer to use is the Theme's provision for custom Js or Css code in the settings. I don't ever directly edit theme files to add something so simple.

For Question 2:
Well it really depends on the individual preference and what kind of website you are designing. For example: I love using WordPress for basic Websites like business sites, E-commerce, Landing pages etc. But when designing a web application with specific functionality, I prefer to do it without WP because I do not like WordPress spaghetti APIs

However, there are people that love WordPress APIs and would use WordPress for everything. Including forums which you claim is never a good idea. Remember, WordPress is just a PHP CMS. Opensource. THere is nothing PHP can do that WP cannot.... well because it is PHP.

There are even people that would use WordPress as the Backend to a Mobile App. (Headless WordPress). As much as I dislike WordPress APIs, I'll tell you the truth: It comes down to you. The choice is yours.

For me, WordPress is not suitable for things that require creating too many custom plugins. To others, it is perfect.

Question 3
Short Answer

Worst case is that the attacker clear your entire server and hold your data as ransom.
But from my personal experience, you hardly find dangerous malware like that in online PHP scripts. The kind you find are the ones that could redirect your web traffic to a different website or automatically place Backlinks on your website.

Some might even do their thing only when Googlebot visits etc. Usually, removing the entire script solves the problem

Long Answer
It depends on how the Web Server is configured. Shared Servers should properly isolate each VirtualHost. A good config will make it seem like that VirtualHost is in it's own Jail Cell. Meaning that if the script gets hacked, then it affects only that Website.

Also, the PHP process should be run as that VirtualHost user. So even if there is poor config and the PHP process can come out of its Jail cell, it will not be able to do much because it is just a user.

Some poor config makes PHP process run as root. Meaning if any website on that server gets compromised, they can basically play god on your server.
 
I find the hackers are always trying to find PHP and even try to install PHP on web servers so they can hack into everything.
If you check your system logs you will find this is true. I stay away from PHP if I were you. There are other better languages
out there that aren't so hackable, especially because they are less well known.
 
Back
Top