php

You are reading this on NimbusCMS. The post is not special, it is a row in a content collection, and almost everything that makes it feel like a blog lives in one small plugin on purpose.

The first thing I refused to give a NimbusCMS plugin was the one thing you would expect a CMS plugin to have: the ability to read your content. Here is why, and the narrow door I opened when my own app needed it.

Most permission bugs are not exotic. They are a wildcard grant that reached one step further than anyone meant it to. Building a CRM full of personal data, that was the failure I wanted to make impossible.

The hardest question in building a CMS is not which feature to add next, it is whether a feature belongs in the core at all. I stopped guessing and let a real application answer.

NimbusCMS started as a portfolio project, a small PHP CMS an agent could run and a human could read. The turning point was the day I made a rule that stopped me adding features to it.