Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Open Source

Ask Slashdot: What's The Best CMS? 222

Slashdot reader pipingguy recently inherited a 2012 installation of Joomla 1.5.26, and while performing four years worth of updates, began wondering about other content management systems. I've built more than a few static websites (I use Sublime Text 3 or Atom, not some fancy-pants WYSIWYG doohickey) and am quite familiar with CSS, but databases not so much. I've been through lots of online documentation and am a bit bewildered, but I'm following the recommendations regarding backups and the like.

What are Slashdot readers' latest opinions on the three most popular CMSes -- Drupal, Joomla and WordPress? Any tips for me before I accidentally blow away the existing site and have to rebuild everything...?

Leave your educated opinions in the comments...
This discussion has been archived. No new comments can be posted.

Ask Slashdot: What's The Best CMS?

Comments Filter:
  • Notepad (Score:5, Funny)

    by invictusvoyd ( 3546069 ) on Sunday June 12, 2016 @07:37AM (#52298779)
    Notepad
    • Vi. Amazing what you can do with macros.

      • What I do not understand in the main post is that pipingguy is asking about CMS's when it has never taken the time to learn even the simplest of Data Base engines. My first thought is that pipingguy has no motivation to learn about software but has chosen to earn a living in software.
        • Nope, I'm doing it for free for an organization that can't afford a highly-paid developer (possibly like yourself) since I do have many years experience creating and running static websites and a couple very simple WordPress ones. I wonder if there are any statistics on CMS-based site operators who understand the intricacies of databases or if most people just install from a package and use the software without being experts.
          • Depends a bit on your userbase, but I really like Jekyll. The site it generates is purely static, so you can have a very small attack profile (web server running without write access to any of the filesystem and without access to a database). The source is separated into templates (edit only by people who understand HTML) and content. The content is in Markdown (or one of a few other simple markup languages) and there are a few nice WYSIWYG editors (I like MacDown on OS X, but there are many others). Th

    • Edlin FTW, young Jedi.

    • Notepad++, you insensitive clod!
    • The answer is Quills.

    • This is the one I use [amzn.com]
    • Grmpaw - is that yooooooo!???
    • Oh there used to be a Zen test with CMS. IBM's mail system at the time was called PROFS, later OfficeVision. When you ran out of disk space, like when you were on vacation, the mail system refused to process any more messages from your VM "Reader", which was like your in box.

      To correct the problem, you needed to create a temporary disk, mount it, and then copy your mail file to there. Then you needed to remount the temporary disk as your "A" disk, and you could proceed.

      Of course, you needed to delete a

    • Heh, At first I thought Wikipedia was your answer.

  • Do you want simplicity to implement without coding, or the flexibility to "carve your own bricks"? Or just the performance to get a frosty piss?

  • My favourite programming language is solder.
  • by jalet ( 36114 )

    Plone.

  • Banshee for sure! (Score:4, Interesting)

    by Aethedor ( 973725 ) on Sunday June 12, 2016 @07:51AM (#52298815)
    It's more of a CMF (Content Management Framework) than a CMS, but I think nothing beats Banshee [banshee-php.org]. It's secure, fast, small (therefore easy to learn) and has many ready to use modules. It has a clear MVC structure, so changing or extending the code is easy.
  • by Anonymous Coward on Sunday June 12, 2016 @07:54AM (#52298821)

    Wordpress has to be up there for relative ease of use.
    PMWiki is a long time favourite due to the flexibility - I use it as a CMS with most of the wiki stuff hidden from normal users.
    CouchCMS is another easy to use and dead simple to create themes and style mods. A lot of flexibility.

  • Drupal (Score:5, Informative)

    by techsoldaten ( 309296 ) on Sunday June 12, 2016 @07:56AM (#52298825) Journal

    So, I agree with any advice about finding a decision table and making up your own mind. Take what they have to say with a grain of salt, however, and realize each table has it's own focus which may or may not be what is important to you.

    That said, Drupal is the best CMS right now, and it's doing work to stay in that role for a long time to come.

    From a usability perspective, the core team has done a lot of work to make it simpler to work with Drupal and interact with content. It's very easy to spin up new content types, add fields, and create pages / widgets that present that information. Now that views is in core, you can actually author a site using only drag-and-drop tools. Which is great for people just looking to get a single site up and running.

    From a technical perspective, symphony is now installed as part of core, which opens a whole lot of possibilities around what you can actually do with it. One of my favorite features is the CMI initiative, which allows you to author a site using a config file, and use that to spin up lots and lots of sites. Which is great for enterprises, looking to adopt a CMS in a big way.

    From an extensibility perspective, one of the most powerful features in the platform is native support for REST and JSON. Drupal can serve as a provider of data for single page applications, where people author content in Drupal and you load it through apps authored in Angular / Ember / React. Drupal simply serves as an API endpoint in this context, which allows you to pull data from it whenever you need it.

    I realize you can do these things with Wordpress as well, but not as easily or as scalably. Whenever you get past trivial use cases, there's always something getting in the way with Wordpress that makes it less appealing. And other commercial enterprise content management systems, like SiteCore, are simply not extensible. The moment you go outside the sandbox they set up for you, it becomes very hard to make them work.

    • Now that views is in core, you can actually author a site using only drag-and-drop tools.

      Hell, you can actually author a site that views arbitrary database content using only drag-and-drop tools! For my home intranet server I put together a drupal instance and (among other things) stuffed the USDA nutritive food content database into it. Without writing a line of code I was able to create a view into that database that lets me search it and display the really full nutritional information that none of the other sites seem to want to show you, like all the micronutrients. Took me less time than f

    • Techsoldaten, this is your boss.

      I just promised an important client that the new site will be ready by the end of the week. I know you just downloaded Drupal, but I need you to learn the whole thing by the end of your lunch hour today so I can get this project done. I signed the contract already promising.

      So learn it by 2pm today so I can start to see the code? Thanks

      • Get a new boss.

        Seriously, I have been contributing to Drupal for 13 years and have a pretty sophisticated understanding of how it works. The organizations that are successful with it are similar to ones that work with other platforms.

        They are realistic with expectations. No CMS is a silver bullet.

    • That said, Drupal is the best CMS right now, and it's doing work to stay in that role for a long time to come.

      It is the best CMS until you have to upgrade it. Then it oddly turns into the worst one.

    • I've been running multiple Drupal sites for volunteer organizations for 10 years so efficiency in maintenance and updates was almost more important than the original site build. Happy to say, security updates and patches just take a few minutes, site page updates are mostly easy, and its fast enough for what we need. I've found existing modules for almost everything I need.
  • Just horrible! (Score:3, Insightful)

    by Aethedor ( 973725 ) on Sunday June 12, 2016 @07:59AM (#52298837)

    - Drupal: slow, ugly hooking system.
    - Joomla: spaghetti code, too complicated.
    - Wordpress: security nightmare, spaghetti code.

    All three are horrible products if you ask me. They should be avoided.

    • Re:Just horrible! (Score:4, Insightful)

      by techsoldaten ( 309296 ) on Sunday June 12, 2016 @08:03AM (#52298849) Journal

      They all seem so bad until you consider any alternative, and the work that goes into maintaining it over time.

      • I see this argument a lot, as with any build-or-buy kind of decision, but I'm not sure it's always true with something like a CMS. You basically have a scale, from something you install and configure that requires little or no programming at one end to developing a bespoke system at the other, and working at either end of that scale has significant pros and cons.

        The first end is the space dominated by WordPress today. You can install WP (or get hosting that already has it), throw a template and maybe a plug

        • I've looked into more heavyweight CMS tools like Drupal in the past, but as soon as I wanted to do something beyond the basics, it became awkward to fit everything into the CMS's model for storing and rendering the content and doing so often required programming and database skills anyway.

          What? Why would you need to program or manipulate the database to extend drupal's content types? Often you don't even have to write any code, you can just add new fields to your data type. You may have to write some CSS to make it come out pretty, but that's pretty normal. Drupal will eventually get a prettier form builder, but nobody I'm aware of has a good one anyway.

          Using the Views module and the normal content type manipulation stuff also now baked into Drupal, it's very rare that you have to write any

          • It was a while ago that I last looked at Drupal specifically, but as I recall it wasn't extending the content types that was the issue, it was being able to build almost anything interesting on top of that data. I can't remember all the details now, but so many things that should have been simple programming tasks or database queries wound up needing awkward code and/or a lot more of it because of the overheads of integrating with the CMS framework, marshalling the data around different components in the sy

      • They all seem so bad until you consider any alternative, and the work that goes into maintaining it over time.

        Dude I can write several sites quicker without any CMS before I learn how Drupual or Joomla works. The industry wants these sites up yesterday and can not wait for you to learn anything.

        I think a simple tool like Banshee or writting your own CMS is much quicker and at least you know your own tool fairly well.

        Taking 5 months to learn a tool is unacceptable. We need results NOW

    • by AmiMoJo ( 196126 )

      Back in the day I used to use Microsoft Expression Web, and we set a customer up with Mozilla Nvu. Being offline editors you don't get all the fancy plugins like with a CMS, but you also don't get the security problems and can control when you update.

    • Re:Just horrible! (Score:5, Insightful)

      by caitriona81 ( 1032126 ) <sdaugherty@gmDEGASail.com minus painter> on Sunday June 12, 2016 @09:43AM (#52299065) Journal

      Wordpress may be been a security nightmare a new years ago, but has steadily gotten better with security, and, at this point has the smoothest updating process, security-minded developers, and a team that's focused on proactively identifying and fixing vulnerabilities. The same can't be said for some of its plugins though.

      These days, Drupal and Joomla are the real security nightmares, because of version lock-in and very poor upgrade paths. All but the largest organizations using Drupal or Joomla tend to do so without the manpower or expertise necessary to cope with the upgrade process. They tend to use consultants and contractors to develop the functionality they need, and that functionality invariably is locked to the major version it's developed against. A few years go by, and the version they depend on reaches end of life. By which point, nobody who understands the site is left, and management frequently won't pay for code to be rewritten for the latest version. Unless you can be sure there will be adequate manpower going forward to keep maintaining and keep pace with Drupal/Joomla development, it's a ticking time bomb from day one.

      Wordpress on the other hand is less of a framework and more of a ready to use system - thanks to a saner plugin system, upgrades that tend not to break the plugin architecture, and built-in functionality that does 99% of what most sites need right out of the box or with readily available plugins, has huge popularity and a large base of developers, and its rare that a Wordpress site ever becomes a dead-end project with version lock-in. Even when plugins or themes break due to upgrades, they tend to be easily removed or replaced without affecting the core CMS functionality of the site.

      You are still going to see more security advisories for Wordpress these days, but at this point, that's more of a function of popularity than inherently "bad" code - it's the most widely used CMS, so of course people are constantly going to be searching for bugs - and a bug that's found is a bug that gets fixed.

      • These days, Drupal and Joomla are the real security nightmares, because of version lock-in and very poor upgrade paths.

        Drupal and WordPress (who uses Joomla, anyway? what an also-ran) both have this problem to about the same degree. If you stick with core modules then they will be available to you for upgrades. If you venture out very far, then they won't. All the major drupal modules are always available for the new majors.

      • Re:Just horrible! (Score:5, Insightful)

        by phantomfive ( 622387 ) on Sunday June 12, 2016 @01:34PM (#52299979) Journal

        Wordpress may be been a security nightmare a new years ago, but has steadily gotten better with security, and, at this point has the smoothest updating process, security-minded developers,

        Unless you consider seven new vulnerabilities in the last 20 days to be secure [cvedetails.com], you are horribly, horribly wrong. There was a remote SQL injection found in November.

        Security is not something you can bolt on after the fact, you have to build it in to the very base of your system. When you're getting SQL injections, it's not because your code is popular, it's because the programmers suck. Fast updates are not a replacement for security.

      • that's more of a function of popularity than inherently "bad" code

        I fully disagree. Yes, more bugs will be found when more people look at the code, but for bugs to be found, they have to be there in the first place. You won't find many bugs in a proper piece of code, no matter how many people use it and look at its code. So, I think it's a bad excuse.

    • by fsagx ( 1936954 )

      They are horrible. Most of them would be fine to output a static site that could then be deployed public-facing.

    • I really like Django but its a bit of a pain to deploy the first time.

  • by cerberusss ( 660701 ) on Sunday June 12, 2016 @07:59AM (#52298839) Journal

    I consider the big ones quite bloated for my purposes. I'm not a web dev, I'm an iOS developer. What I need, is a very simple CMS where I can just paste in a template and then make very small adjustments. Often, you pick any of the gazillion CMSes with a version number in the 0.x series. Their biggest selling point is that it's "light-weight", simply because it's not yet mature.

    CMS Made Simple [cmsmadesimple.org] however is mature, but still light-weight. It has been existing for years and is in the 2.x series. They waited a looong time before the 2.x series was really, really stable and only recently announced that they'll stop supporting their 1.x series. Very professional.

  • by Cryophallion ( 1129715 ) on Sunday June 12, 2016 @08:04AM (#52298851)

    Why do we have to stick with only the top 3? Aren't there great options who some haven't heard of yet?

    Personally, I adore concrete5 (www.concrete5.org). They are making some major changes to the structure, and the upcoming version 8 adds new data objects that will make it more than just the page centric pattern it was before. The developers are active and engaging with the community, it's been around for long enough to be mature, and the in context editing is a huge asset to the end user.

    When I look at a CMS, I don't just look at how to code within it, although that is massively important. I also look at how easy it is for end users to pick up and customize. And being able to make changes to an area right in that area on that page is a killer feature. The fact that the block architecture ensures you can add special custom areas very easily and in a modular fashion is also extremely helpful.

    I've worked with all the big CMSs, and tested them out. I've tested out a boatload of the medium sized ones as well. C5 was hands down the winner.

  • by Eukariote ( 881204 ) on Sunday June 12, 2016 @08:10AM (#52298853)

    My recent CMS search and selection exercise made me bypass the "big three" and opt for Concrete 5 [concrete5.org]. It had the right mix of features, mind share, and in particular, ease of adding content. Adding content is simply done while browsing the site by dropping a page into edit mode, modifying it, and then publishing it. This is particularly helpful when multiple technically challenged people need to update the site.

    So far I am quite happy with it, but it is not free from issues. There is a decent set of plugins and themes, the community is enthusiastic. Your requirements may differ: there are tons of other CMSes to choose from.

  • ... And anyone who promises you that there is, does not understand the problem space.

    CMS work is all about fit-to-purpose. Best for $0? Best at serving to HTML, docx and PDF from a single source? Best at delivering atomic content? Best at personalization? Best content author experience? WCM or ECM?

    Suggest you start to read CMSWire, look at the material from Real Story Group (and consider buying one of their reports or request an engagement), read up on Karen McGrane's thoughts on API-delivered content, and

  • I'm afraid that "Content Management System" as a description for a GUI for managing websites is part of the problem with most of them. Content management systems allow sharing of digital content, typically code and databases. This is a very separate set of requirements from a website management toolkit. The needs to support consistent coding standards, to give a variety of developers and graphic designers and non-programmers the flexibility _in a GUI_ to publish and arrange their content as desired are very

  • Take a look at Grav [getgrav.org] if you want to move toward a static-file CMS, helping to reduce security attack surface on the webserver. Otherwise, Wordpress and Drupal still are goto CMS' in terms of support, plugins, and themes
  • by Kilobug ( 213978 ) <le-mig_g@@@epita...fr> on Sunday June 12, 2016 @09:04AM (#52298943)

    I would advise using Plone. It's perhaps not easy to apprehend at first as the PHP CMS, but it is very feature-rich and has a strong security focus, as can be seen with the number of CEV concerning it compared to other CMS (about 10x as less) : https://en.wikipedia.org/wiki/... [wikipedia.org]

    The latest version (Plone 5) that was released quite recently also brings much better performances (which was one flaw of earlier versions) and easier theming.

    • by lspd ( 566786 )
      The number of CVEs assigned to Wordpress + plugins vs Plone + addons is a very misleading metric for making this type of claim.

      https://wordpress.org/plugins/ [wordpress.org] shows 45,129 Wordpress plugins.

      https://pypi.python.org/pypi?:... [python.org] shows 3242 Plone addons.

      If you assume rough parity in terms of line of code between a Plone addon and a Wordpress plugin (a dangerous assumption), 10x more Wordpress related CVEs would indicate that Wordpress has a lower density of CVEs per LOC than Plone does.

      But, of course,
  • It's going to heavily depend on the functionality you need. You'd need to explain the needs and usage a bit more. Is there a reason you can't just let someone like wordpress.com [wordpress.com] run it for you? This alleviates all the headache of tracking down updates to 3rd party plugins, security errata etc. There's enough core functionality with the included plugins (they call them widgets) for most general website/CMS uses. You could try using the free option and if you want a custom domain and other stuff then pay

  • by Anonymous Coward on Sunday June 12, 2016 @09:15AM (#52298983)

    You may instead consider a static site generator (there are a ton, jekyll, hugo, a google search for static site generator will turn up a bunch)

    Then your server load is much lighter by getting out of server side anything by people just reading), you can still provide search most of the time (lunr). By avoiding a CMS, you are less likely to have a gaping security hole (e.g. my team has an internal only git server to coordinate maintaining it and building it, then uploading it to a dumb static server).

    So step one is considering whether you really *need* a CMS, a lot of folks really don't.

  • RespondCMS looks promising. I've used its predecessor and that was nice too. It's useful for CMS sites that need bootstrap widgets and non trivial layouts that stack on mobile.
  • by kbdd ( 823155 ) on Sunday June 12, 2016 @09:32AM (#52299023) Homepage
    GetSimple may not be the best CMS in general, but it fits the bill for me, simple and fast, with a comprehensive set of features that keeps growing, good and fast support (most of the time) and no database. Simple to install, simple to manage, simple to update, and very fast. Broad choice of themes that are easy to customize. I converted a text-based site to GetSimple in an afternoon. I cannot say in detail how it compares to the big CMS you listed, but I can tell you that the learning curve is not nearly as steep (I tried two of them), and I do not feel that I have handed my life to somebody else.
  • https://www.getnikola.com/ [getnikola.com]

    If your users can write markdown they can write nikola pages. I have mine attached to git hooks so publishing is done by pushing and pulling.

    Additionally GitHub pages.

  • rather than say "its the best!" I'll just say it is an alternative to far heavier systems like those mentioned in OP. https://bolt.cm/ [bolt.cm]

  • I think this has been said, but worth saying again.

    A couple of years ago, we replaced a complex (and, clearly, superfluous) CMS setup etc. with a couple of overnight scripts that generated some (pricing, it was financial services) static html. Enough for what was needed and goodbye performance and maintenance problems.

    More recently, I used Joomla for something I'm now stuck with, because the users don't know how to administer it. Wordpress would probably have been better.

    If you have a couple of pag
  • Compare Content Management Systems http://www.cmsmatrix.org/ [cmsmatrix.org]
  • It seems counter-intuitive, but the Simple Machines Forum [simplemachines.org] is actually an excellent base for a CMS. There are a number of CMS-plugins for it, thousands of themes and extensions, and almost all of them are free. SMF is open source.

    - excellent, fine-grained user management
    - active development
    - clean code, easily modifiable
    - large user base
    - vulnerabilities are far and few between, and fixed aggressively
    - literally thousands of plugins and extensions
    - excellent support forums

    Personally I like TinyPortal, ezPort

  • by ilsaloving ( 1534307 ) on Sunday June 12, 2016 @10:21AM (#52299161)

    TL;DR version: A CMS will let you get a very nice website up faster, but you pay for that with with a long term maintenance nightmare. Go static unless you specifically and absolutely need dynamic content.

    The problem with virtually all CMSes is that they security-hole ridden messes. If you use, say Wordpres, you have to be prepared to babysit the thing on a daily basis because new vulnerabilities are being found and fixed constantly. And heaven forbid that an update to the core code base breaks a plugin you happen to use, and that plugin is no longer maintained.

    It's just not worth the effort. There are plenty of tools out there that will let you work on your website locally as if it were a CMS, but the final output is plain static pages. Unless your site specifically *needs* dynamic content, such as being able to allow users to make comments on articles, etc, a CMS is unnecessary.

    A classic tool is dreamweaver. There are plenty of open source static CMS generators you can find, with just a little googling.

    • "Unless your site specifically *needs* dynamic content, such as being able to allow users to make comments on articles, etc,"

      That's exactly what we do need, though. There are a bit over 2200 existing registered members some of whom visit the site for their personal info and we want to be able to offer them their own mini subdomain websites, comment on and contribute tech articles, purchase stuff, upload files and photos, access members-only material, etc. The site also has to process payments for membersh
  • z/70 is nouveau :)
  • Joomla: The Shit. No not good. Shit. Concepts and the way Joomla requires you to do things is ass-backwards.
    Wordpress: Convenient for users. Looks prettier. Shit.
    Drupal: Not familiar enough to say. Never read anything particularly good about it. Supposed steep learning curve; barebones out of the box.

    ProcessWire: If you like to code, enjoy power and security. This might be what you are looking for. V3 is shaping up interestingly.
  • "Best" requires some context. Its like "big", it doesn't mean much without the context its in. Some of the factors to consider:

    - Who is managing the content, and what is their skill level.
    - How many people need to authenticate, for managing content, and/or accessing protected content. Do we need permission levels (ie a full blown admin and then someone is allowed only to write content ... should they also have publish permissions?).
    - How often does content typically change? An occasional page change is d

    • Thank you for this great reply, it made me think more about the matter. I'll try to respond in more detail later today and I'm going to refer the decision-makers to your post.
    • WordPress (core) is probably the most secure CMS out there

      Hahaha, seriously, no! If you know anything about secure software development, you would understand that Wordpress was not well written. I've used it during my Secure Web Development course to show students how NOT to write code. Although the code might look clean, it is the perfect example of spaghetti code. Mainly because it has no MVC structure. Business logic, HTML, Javascript, database queries, everything is mixed together in Wordpress. And alth

      • WordPress (core) is probably the most secure CMS out there

        Hahaha, seriously, no! If you know anything about secure software development, you would understand that Wordpress was not well written. I've used it during my Secure Web Development course to show students how NOT to write code. Although the code might look clean, it is the perfect example of spaghetti code. Mainly because it has no MVC structure. Business logic, HTML, Javascript, database queries, everything is mixed together in Wordpress. And although it might not contain a serious flaw at this moment, absolutely nothing guarantees that this will still be the case in the future.

        Because of the mess, it's easy to make a mistake and introduce a security flaw when changing or extending something. If you ask me, that's exactly the reason why so many plugins are insecure. Because it's hard for the plugin developers to understand the logic and structure of the Wordpress main codebase. Wordpress the most secure CMS? With this codebase? No, not now, not ever!!

        You obviously don't know what you are talking about. MVC is not a magic bullet, etc, etc, etc. I am asking you, and please provide concrete evidence of your allegations. Core is secure. If plugins aren't, its because plugins aren't. End of argument (unless you have real evidence and not some lame hypothetical situation).

  • Liferay is a solid enterprise platform that incorporates CMS functionality.
  • I've been Using Joomla since the pre-Joomla 1.5 days, so have seen the arc of development. The current 3.5 version is light years ahead of the 1.5 era, especially in terms of the user experience and upgrades. I am a retired computer database admin, but do not have MySQL or PHP skills. If I was well experienced in those two languages, I might be a lover of Drupal. But without PHP background, Drupal is daunting. So that took it off my plate. I rarely get into the PHP code, though I've dabbled in replacing a l
    • Thanks for this. Currently I'm using SP Upgrade to attempt data migration and there are some issues (although I've only just started).
  • If it's just for a small business, public facing, etc, then there are many viable suggestions already. Yet if your working on the enterprise level, inside a Microsoft AD domain architecture, the only viable choice is Sharepoint. It requires a chunk of hardware, even multiple machines, but if you have multiple internal teams that need their own CMS deploying new Sharepoint sites from a farm is pretty effective. Expensive, but effective.
  • out of a wet paper bag I prefer Drupal. Its a bit weird at first once you get past the taxonomies and needing to put in custom code into the template.php file to allow you to use different templates per node path yoursite.com/mypage yoursite.com/mypage2 you can build amazing sites. Best module to learn would be views as you can present your data in many ways just by clicking some buttons. Add in Ubercart for smaller Ecoomerce sites or Drupal Commerce for bigger ones and you're set.

  • by gsliepen ( 303583 ) on Sunday June 12, 2016 @01:38PM (#52300005)

    It's a wiki compiler, which makes it a lot more secure than CMSes which render pages on the fly. It looks very bland right out of the box, so you need to do some CSS work. But it has many plugins, supports different kinds of markup languages, and can be easily extended (if you know Perl).

    https://ikiwiki.info/ [ikiwiki.info]

  • Wordpress is designed to be insecure.

    There are two simple rules which apply to many things in multi-user computing and, therefore, also to CGI:

    Don't allow execution where you can write.
    Don't allow writing where you can execute.

    Wordpress fails this miserably, which is why Wordpress is the top phishing hosting platform on the planet. They've said that they don't want to change this because they prefer ease to end users over doing things properly. This is a horrible idea because people don't update when things

  • I've got a web designer friend who prefers Joomla, in large part because it works similarly to the design tools he's used to...though he fully admits that it has a much bigger learning curve than others.

    My personal blog is run on WordPress. This is, in large part, because it's a blog and intended to be one. I like the fact that there's a mobile app for quick uploads and microblogging. I've never had to write a line of code to make anything work. I use a few plugins to make it work, namely The Shield [wordpress.org] and IQ

    • Wordpress can be made pretty resilient to mischief by following some basic security rules, and there are also a couple of plugins I use to harden WP sites- the one I like best is called Wordfence. Lots of good options in there to help keep malicious stuff from happening.

      But the real problem with Wordpress isn't Wordpress, it's the plugins. Many of the plugins are written by people with little or no knowledge of good data security practices, and many of them use the most childish and ineffective methods imag

  • I have used CoreMedia CMS in my last company. It is an enterprise grade software with lot of bells and whistles. Over the years, it has become better. However, it is somewhat rigid, and not customisation friendly.. this can become a huge problem if your client is a news media outfit trying to reach social media market urgently with crazy creative ideas. Scaling comes at a huge cost, so be ready to buy/rent lots of servers. Furthermore, whole software is written in Java/Spring... which may explain the drain

  • Wordpress.com - don't self-host because you don't have the experience to secure and maintain it properly. Once you start adding plugins, the maintenance and security issues pile up exponentially. It _can_ be both performant and secure, but only by someone who REALLY knows what they're doing.

  • by emaname ( 1014225 ) on Sunday June 12, 2016 @06:52PM (#52301295)

    Go here: http://www.opensourcecms.com/ [opensourcecms.com]

    Open Source CMS has the various offerings grouped by purpose/application/specialty. It also provides links to CMS demo sites.

    FWIW, I'm using Concrete5. It's okay. Seems to be getting better.

    I can also suggest trying e107: http://e107.org/ [e107.org]

  • "I've built more than a few static websites (I use Sublime Text 3 or Atom, not some fancy-pants WYSIWYG doohickey) and am quite familiar with CSS, but databases not so much. "

    Are you the only one involved?

    There is HTML, Javascript, PHP, Java, Python, XML, SQL and a whole mess of other technology that is involved with web site programming.

    As a consultant I get asked this kinda quick question on a regular basis. There is no quick answer to this. The general answer is to take the time to understand the require

  • by apoc.famine ( 621563 ) <apoc.famine@NOSPAM.gmail.com> on Sunday June 12, 2016 @08:12PM (#52301871) Journal

    Confluence is a wilki with super-flexible read/write permissions, awesome macros and tools, all combined with a document versioning system and it integrates with Jira if you're also working with devs who use that system.

  • They're all dependent on crappy HTML and insane CSS.

I've noticed several design suggestions in your code.

Working...