I use wordpress for a lot of websites. I like it and the search engines love it.
But like prof said, it’s buggy. It’s slow, it’s insecure, the password for the database connection is kept in the live website root directory, etc. There was an “injection bug” that someone used to hack and mess up my site.
Thats the way all database connections are. I didn’t know they had an injection bug but that has nothing to do with the password in that file just bad coding. SQL Injection is when someone enters sql queries into a form (such as a login form).