Hacker News new | ask | show | jobs
by stephenr 3219 days ago
Right. Doesn't this just make your "admin" site the target then?
1 comments
zener79 3219 days ago
The "admin" lives in a random-generated subdomain, is basic-auth protected and is alive only for the time needed for the editor to make the changes through the dashboard. For the rest of the time WordPress simply doesn't exist.
link
spleenteo 3217 days ago
brilliant
link