Re: opinions on CMSs (Drupal, Joomla, Mambo etc)

[Philip <subs%christiantena.net@localhost>]

I can see that most of the CMSs sit on top of php, and therefore are
prone to php security flaws, but plone sits on top python instead, so
isn't it just as vulnerable to python security flaws?

Is there something more intrinsically "secure" about python compared
with php?

thanks, Philip

Tonnerre Lombard wrote:
> Salut, Philip,
> 
> On Mon, 25 Aug 2008 21:32:29 +0100, Philip wrote:
>> I have been asked to sort out a new website because my church's
>> website got hacked ( I think it was running Mambo ).
> 
> YAFIYGI.
> 
>> My main criteria is security, as I really can't cope with having
>> security problems.  I guess that the security of a CMS will depend
>> largely on the quality of code. Does anyone here have any strong
>> opinions which CMS to go for, or to avoid?  There are several reviews
>> around of CMSs but none of them say much about security.
> 
> If you want security, avoid anything which says "PHP" on it. Take care
> it is available in pkgsrc and make sure to check audit-packages output
> regularly.
> 
> Plone may be your friend.
> 
>                               Tonnerre