Unsure

[innovot]

Hello,

 

we are in a position now where we need to take our services to market and have been following WHMCS closely. We hope to be able to leverage WordPress and use a bridge with WHMCS to open areas up. One area that does concern us before purchase is security exploits. We know that this is part of "game" where any software is open vector target for potential attacks. How do you mitigate it ?

 

Thank you.

[vec]

I would not use word-press and WHMCS together, their is just to much that can be hacked.... my 2 cents

[rwssoccer1]

Agreed! Don't put your billing system on the same machine as the most vulnerable CMS available. We run wordpress for our main site but locked down and stripped of stuff we don't need then have our billing system on a separate server for segregation.

[xxx32r]

You can just maintain WHMCS alone and not have a wordpress site?

 

WHMCS is somewhat flexible to do what you like... my 2c...

[zomex]

Hello,

 

we are in a position now where we need to take our services to market and have been following WHMCS closely. We hope to be able to leverage WordPress and use a bridge with WHMCS to open areas up. One area that does concern us before purchase is security exploits. We know that this is part of "game" where any software is open vector target for potential attacks. How do you mitigate it ?

 

Thank you.

 

Hello,

 

WHMCS will release patches when a security venerability is released. This involves uploading 1 or more files to your installation.

 

In terms of using Wordpress and WHMCS I wouldn't personally say that Wordpress is in-secure, it has some of the skilled developers in the world working on it every day. Wordpress can become insecure if it's not kept up to date and if poorly coded plugins/themes are installed. As long as you follow good maintenance practices it shouldn't be a security issue.

 

If you do use Wordpress make sure it's kept up to date and keep plugins to a minimal. The suggestion of keeping Wordpress and WHMCS on separate domains is a very good idea as it allows you to lock-down WHMCS while being able to benefit from the power of Wordpress. I installed a vBulletin forum about a year ago and registered a new domain for it for the same reason.

 

I wouldn't recommend doing things such as syncing the Wordpress/WHMCS login systems as that could open up potential problems.

 

Jack