kgraeme

Confirmed that I’m having the same issue.

The biggest change to security that you will see between the standalone and multisite modes is the kses filters. This strips out things like embeds, iframes, scripts, etc that are the primary problem with compromised sites.

Another vector is upload files. In the adminitration, the super admin has the ability to define allowed file types. So for instance, this can prevent users from uploading php scripts that can give them backdoor access to your server.

Another difference is that the theme editor isn’t available to users, so they can’t write custom php code into the themes. And along with this, themes and plugins can only be installed by the super admins. Malicious code hidden in themes is one of the other most common vectors of a compromised wordpress install.

As for database separation, it’s technically possible and there are some plugins to do multiple databases, but they are mostly designed for spreading out the load for large scale hosting performance more than security isolation. The principles could apply though but may require a custom plugin for doing database isolation.

Haha, silly andrea. Nice plugin though. I hadn’t seen it before. I can think of some good uses for it.

Similarly, though not quite what you asked for, we have one for a featured blog rather than post.
https://www.ads-software.com/extend/plugins/wpmu-featured-blog-widget/

Be aware that the export feature in wordpress does not include tables that may have been generated by plugins or themes. It’s the best we have at the moment though.

I’d love to see something like BackupBuddy add the ability to do individual site migrations to/from multisite installs.

The URL gets stored in various places in the database and needs to be changed in all of them. Here’s a tutorial:
https://wpmututorials.com/how-to/change-the-domain/