Hacker News new | ask | show | jobs
by alexpatin 3431 days ago
Ever used the WP-API? It is a REST API and you can bypass the native templating system and even the WP admin entirely. There are plenty of people are building web apps with WP/WP-API as the back-end. WordPress is a lot more than it used to be.
2 comments

The Wordpress backend still has scaling issues with many popular plugins. Helping a site with 100,000 customers in a woocommerce database migrate to a more robust ecommerce solution because it takes 15 minutes to log in currently.
Last time I used the API it was incomplete and slow. The "multi request mode" also exposes all sorts of resource exhuastion attacks. I had a ton of sites go down from "bundled" login attempts where they tried something like 100 passwords at once. I usually end up blocking it completely