Posted on September 14, 2009
This post is a response to a blog post by Jeff Chandler at Weblog Tools Collection titled:
Are You Responsible Enough To Run WordPress?
As Jeff mentions, the advent of such a powerful blogging framework lowers the bar of entry significantly for web publishing, but to blame the end users for a failure on their part to update their WP installations is unfair. While I don’t think WordPress themselves are in any way to blame, I don’t agree with the implications of expecting content authors to also be website administrators.
I think WP publishers are no different to end users of the Windows operating system. What WordPress and the massive developer community around it has achieved is unprecedented in the history of the web, but to ask end users of this product to see themselves as having some measure of technical responsibility for their site will require a significant paradigm shift.
You can’t just upload WordPress, perform a bunch of customizations, install 50 plugins, 50 themes, and think everything will be fine from that day forward.
Yet this is exactly what WP users are doing and nothing in the installation process really makes someone pay attention to the community around WP development or stay informed with product development. Anyone who buys hosting space and sets up WordPress immediately falls into “end user” mode. It’s like expecting your average Excel user to keep updated with Microsoft Office security bulletins.
Yes, WordPress is incredibly easy-to-use, easy-to-install and a walk in the park to customise, but there’s still plenty of room for improvement. I believe the developers of an application have a responsibility to make sure the users are being properly educated on their obligations, so why aren’t people installing WordPress told more about security, why aren’t people installing plug-ins or themes being told (perhaps they need to be told more forcefully) about how these installations can impede their upgrade options and the security ramifications that can result?
You don’t have to be a fan of Microsoft or Apple to recognise that they got rich by buffering end-users from the technical details underlying the technology we use every day.
The sentiment from some sections of this community; that people without the technical knowledge to manage Apache configuration, understand PHP code or perform an SVN merge have no business running a website is something that needs to die (in a fire).