Is WordPress right for eCommerce?

Categorized under:

,
Photo of author
Written By Beka Rice

39 thoughts on “Is WordPress right for eCommerce?”

  1. Great post, Beka. It’s a question that a lot of people ask, and there truly isn’t an easy answer. Choosing the correct e-commerce platform definitely depends on your business goals and how much responsibility you want to assume in running your site. There are trade-offs and it’s important to spend enough time investigating your alternatives. Test out the free trials that most hosted solutions offer and see if you can live within their framework. If more customization is needed, then WordPress can be a great way to go. Thanks for an interesting article; I will definitely be sharing it!

  2. The primary reasons I don’t recommend using WordPress as an ecommerce platform is financial and legal. When you run an ecommerce operation you have to manage complex multi-jurisdictional tax systems and you have to care about privacy and PCI compliance, none of which is easy or usually considered by startup companies. These issues are colossally complex and change based on where you are located, where your company is legally registered, and where you are selling products to.

    One legal example: If you collect customer data as part of your site (credit card, shipping address, anything else) you are now under privacy law. In most areas these laws demand strict control over how this data is handled, stored, and who has access to it. Very few off-the-shelf hosting solutions on which WordPress is usually hosted have the capability of providing this type of security out of the box. This may seem like a non-issue for smaller businesses, but it can come back to you years or even decades later when someone discovers their data was not well enough secured.

    I am not a lawyer so I can’t go into more detail. Suffice it to say I have worked with tax and privacy lawyers who focus on this area and they are crystal clear in their recommendation to not go it on your own but hand the heavy lifting off to someone who does this and nothing else.

    When you offload your ecommerce to a 3rd party these challenges more or less go away because the 3rd party takes on those responsibilities.

    Just my 2 cents.

    • Morten,

      I agree with your assessment of the attitude of most startup companies towards legal compliance: they don’t consider it important, or consider it at all.

      However, you said that “[v]ery few off-the-shelf hosting solutions on which WordPress is usually hosted have the capability of providing this type of security out of the box.”

      I don’t think there’s a single WordPress ecommerce plugin out there that stores credit card data—data which naturally carries the most legal responsibility. Storing this data is carried out by third-party processors. With processors like Stripe, this data never even touches the store’s server—it is passed directly from the customer’s browser to Stripe’s servers.

      You even said, “When you offload your ecommerce to a 3rd party these challenges more or less go away because the 3rd party takes on those responsibilities.” This is precisely what WordPress ecommerce platforms do with the most sensitive data – offload it to 3rd party processors.

      Regarding other sensitive data, I do agree that store owners should ensure compliance with applicable regulations. Out of the box, mildly sensitive data (you mentioned shipping data) is typically viewable by any administrator of the site.

      I’d love for you to take a look at my WordCamp Asheville talk—I discussed these topics and more and would love to get your feedback.
      http://wordpress.tv/2014/09/06/josh-levinson-wordpress-e-commerce-ecommerce-ecommerce/

      • @Josh and Brent: More than credit card data which if done right will be collected off-site, I was thinking of the other data collected about a buyer – name, address, telephone, email, purchase history, etc. All these are protected under stringent privacy laws and this information must be kept secure and restricted from the outside.

        Online privacy is a complex field of law that is being built out as we write this. A lot of surprising data has come forward, like the fact that in some cases publishing a privacy policy may make you more liable to be investigated for it and that tracking user behavior on the site (recently viewed items etc) can be classified as spying if the user is not explicitly notified of this. One legal paper on this that is well worth a read for anyone venturing into the field is this one: http://cyber.law.harvard.edu/olds/ecommerce/privacytext.html

    • By the way, I hope I didn’t sound pompous in my reply. I realize you probably know all of these things; my response served the purpose of allowing me to vent more than it served as a rebuttal 🙂

    • @morten this can actually be a point in favour or WordPress eCommerce.

      Although it might be difficult for small store owners to comply with relevant laws in their jurisdiction on a self-hosted platform, it might also be *impossible* to comply using a hosted solutions that don’t support those laws.

      Hosted solutions comply with laws in major markets, like US, UK, DE, etc. but they may fail to comply with laws in markets they don’t service, either due to language barriers or because it doesn’t make financial sense.

  3. Hello Beka.

    Loved your article and the house analogy used. I know it wasn’t intended on your article but you could have a made a mention to Magento. If WordPress is a tank than Magento is a battleship. Perhaps one day you can make an article about this one and compare it to WordPress.

  4. Good one,

    I agree that for small eCommerce WordPress can be a good solution, SEO, custom posts, customization… But if you want a big eCommerce platform with ERP integration, complex filtering, user ranges for example, WordPress cannot compete with Magento.

  5. In my experiences, all self-hosted e-commerce software sucks, including those built on WordPress. I try to off-load e-commerce stuff elsewhere whenever possible.

    • I’m curious to hear the last time you tried it. I find it to be quite a decent experience, personally.

      • It will depend on what exactly you are trying to do. In the past, I’ve had issues with the plugins being either too complex or too simple. The UI on the front-end has been very difficult to make it work well with simple solutions I’ve required and been very difficult to make it accommodate more complex projects which ended up being farmed off to Magento projects.

        The last time I tackled anything with e-commerce was a few months ago I think.

  6. Beka,

    Excellent analysis and well written. It lead me to asking you a question.

    We have a self-hosted blog and want to add a store to sell food products. However, the product is shipped overnight by federal express so the customer needs to schedule the exact day for arrival. Do you know of any plugin for a calendar that would allow the customer to schedule the day for delivery but allow us as the merchant to black out Sundays and holidays etc.?

    Thank you.

  7. I wouldn’t run WordPress as a full e-commerce platform or site.

    Don’t get me wrong, WordPress is great for certain things, and it’s worked great as a CMS, and WooCommerce has worked amazing to process donations. But in an MMORPG World, you’ll spend 90% of your time trying to secure everything, While it’s very easy to use, and worked great for what we needed, it’s just not an Out of the Box Secure Solution.

    WordPress in General isn’t so scalable. Sure, you can use one of the many hosting sites that charge an arm and a leg for hosting, but pagely, wpengine don’t really offer anything that we honestly can’t do ourselves, and much faster.. I outlined my original setup, and this just covered WP and Scalablitity for a small site, http://boi-infinity.com/wordpress-optimization-2014-behind-boi-infintity/

    Unless you have a WordPress guru in your pocket, I’d use x-cart, or one of the other well known e-commerce solutions.

    Chris

    • What do you feel makes X-Cart more secure out of the box than WordPress?

      I can understand specific WordPress plugins not being secure out of the box, some of the e-commerce plugins are horrendous considering the amount of money they’re processing, but WordPress core itself seems fine to me.

  8. Article presents somewhat of a false dichotomy – WordPress vs. hosted solutions. Sometimes WordPress entrepreneurs (those who make a living selling their WordPress knowledge) forget there are other content management systems, and neglect to recognize another CMS might be better for some purposes.

  9. I think the article carefully avoided 2 of the major weaknesses of using WordPress as an e-commerce solution, which while don’t rule out it’s use make it a lot more tricky.

    The first big one, is WordPress was never designed with transactional mechanics in mind, it certainly wasn’t designed to be an e-commerce solution. This leads developers down interesting rabbit holes for example how to handle products and orders in the backend, do you use custom content types, create new tables some hybrid of the two? What about the hundreds of options, variations and complex relationships often needed by shops.

    You can implement and work around very successfully but it is fudging and rebuilding the wheel in many cases.

    The second issue is security and compliance, WordPress us highly secure but has no concept of a security model to speak of, plugins and themes can do anything which is fantastic it’s what allows e-commerce solutions to exist it’s also the reason you might not want to run a e-commerce solution on WordPress as you not only have to worry about WordPress core & your e-commerce plugin but also every other plugin and theme on your site. Now all systems have vulnerabilities and products like Magento have comprehensive module support though it does partially restrict what can be done (and not just through incomprehensible documentation, small dig at Magento) though people often force workarounds. However running e-commerce solutions on WordPress does open up more interesting challenges with multiple plugins and themes causing havok.
    In a similar vein comes compliance large e-commerce solutions have been designed with compliance in mind, both PCI-DSS and various data protection laws. WordPress core was not designed with any thought towards various e-commerce compliance rules because hey it’s not an e-commerce system! This means if you are using direct post payment gateways (where you gather the payment and the server sends the card detail to the payment provider) you may find you come across massive compliance issues. In a similar vein, especially in the EU you have to be careful how data is stored, as well as to make sure that the correct data is stored, for example keeping accurate transaction records.

    If you are building a pure e-commerce centric offering then it would seem a little silly to not use a pure e-commerce system or a hosted solution.

    If you are building a content focus offering with some e-commerce solution, where you are not taking payment directly and the benefits of an integrated single solution outweighs the benefits of using a separate e-commerce solution then it’s worth considering WordPress solution.

    Ultimately which ever way you go, e-commerce is a legal minefield, getting the right software at the start can go along way to making life easy for you, I suspect for most WordPress is not the answer.

  10. Nice post Beka. For sure for someone that is used with WordPress and worked with it it is easy to recommand WordPress as an ecommerce solution ( this is the case for me). As you said WordPress can be good for some and bad for others. The important thing is to know the number of products that you want to sell.

    Definately if you want to see until cople of hundreds you can do fine with WordPress, but if you speack of thousands of product is better to use a more specialized.

  11. ^ that comment by Tim Nash is an excellent one

    The issue of mechanics is usually not a big problem for most sites. but the security issue is a major one though IMO. The shear time involved in ensuring a typical WordPress site is secure can be quite enormous, and that would add a very considerable lump to the final bill. I’m not sure how some of these compliancy requirements work (people further up the chain of command have always dealt with this sort of thing before projects have reached me), but I imagine some of them may block WordPress from being viable at all since passing compliancy tests for a one-off chunk of code may be prohibitively expensive. Using a platform which uses a security model which blocks extensions and themes from doing anything malicious , could rapidly improve the development time and hence make them a much more suitable platform to use.

  12. Nice article, Beka. I’m completing a complete migration from 3dcart to WordPress with WooCommerce and you echoed a lot of my likes about working with WordPress. I redesigned my client’s old site in 3d during the summer and found the interface to be a major, major learning curve. She had over 700 books on her site, and we re-did it within 3d’s limitations (while I lamented how I would rather work in WordPress, they didn’t allow drop-down menus if you can believe that!!). Long story short: going live turned into a nightmare as they lost all the data for affiliates and we lost all faith in their tech support. So I recreated the design in WordPress and used WooCommerce for the first time. Amazingly easier to use than 3dcart, and my client is giddy about the dashboard setup. And we don’t have a blog set up yet, but when it’s time, it’s going to be so easy to do because WordPress is just what you said—it’s set up for content.

  13. woocommerce bookings and woocommerce extra product options are close to your needs but still need to be customized because the demand is specific.

  14. What a well written post on a question asked often!

    I especially liked your analogy about owning vs renting. That is very true. It is definitely more work with self Hosted eCommerce using WordPress, but it has its rewards. I like open solutions.

  15. This is an interesting article for me. I have a couple of WordPress ecommerce sites now using WooThemes and WooCommerce. So far, I and the clients are pleased with the results, yet noting some of the limitations gives me reasons for further investigation into other systems as the current sites grow. Glad I read this.

  16. Have used WooCommerce on two sites so far. One is live with 2,500+ products which was migrated from Magento. Another larger site has 35,000+ products which was migrated from X-Cart. Been impressed with using WooCommerce within WP. WooCommerce is more straight forward to manage and update and even develop for than Magento or X-Cart.

  17. Well, after using WordPress for some odd 13 years now, since itself was forked.. I’d say the differences in WordPress + Woocommerce as a fork could rid WP of a ton of bloat, More of the WC features could be implemented into the admin for an e-commerce style admin, as opposed to the standard admin interface. Extra WC dashboard widgets, support tickets, live IPN notifications / order statuses so you can see every bit of what is going on for your shop!

    The possibilities are endless really..

    • I like the idea of this. Maybe it could also intergrate Advanced Custom Fields as a standard. Perhaps remove some of the junk and make it purely a developers edition of WP.
      Then the blogging system could be maintained seperately.

      That would be nice!

  18. Great article, it just leaves me with one question as a woocomerce + wordpress user myself. the admin-ajax.php always slows down the site does any one have any idea to improve the loading speed?

  19. Hello! Quick question that’s entirely off topic. Do you know how to make your site mobile friendly? My website looks weird when browsing from my iphone 4. I’m trying to find a template or plugin that might be able to resolve this problem. If you have any suggestions, please share. Appreciate it!

  20. Talking Ecommerce. We use WordPress for Ecommerce and overall it works great. PayGate is our gateway for payments, and we use their plugin. What is a concern is that every time you receive an update notification from WordPress it is virtually impossible to find out if it is compatible with the PayGate plugin. Can anyone please help here WordPress 4.1 now released, is it compatible with the PayGate Plugin. I will appreciate any help here, as I am not really keen to just upgrade and I have a problem like last time where we took 3 days just to try and revert back because that did not work. The PayGate plugin simply disappeared.

Comments are closed.

A2 Hosting
Omnisend
WordPress.com