Forum Moderators: coopster

Message Too Old, No Replies

Security Issues - I was a victim of a contest

         

gpilling

4:40 pm on May 13, 2004 (gmt 0)

10+ Year Member



I am not a PHP coder, but I use PHP-Nuke. While researching the different OS content management systems out there, Nuke was regarded as being flexible, yet full of security holes. However, there were some patches available for the software, and it looked to have the functionality that I wanted, so I used it and installed the security patches.

Things were fine for many months, but yesterday I was a victom of a defacement contest on 5 of my sites, with the end result being that four of them are repaired now, but one was defaced - and then disappeared from the server! It is a total loss, and of course is the one that I dont have a current backup for. The contest site was called zone-h and they claim to be good guys, yet my site is gone. The other four were easily repaired. I am quite irritated...

In my post hack research, I cam across a couple of articles about the inherent insecurity of PHP based sites because of PHPs ability to name variables on the fly. As I said earlier, I am not a programmer -

My question is - is there a secure content management system out there that is affordable (>100) and secure? I would like the ability to add content easily (text and photos), and to put google adsense on the site, as well as search engine frienly URLs?

I dont need forums, or to have members, or multiple blogs.

drbrain

5:12 pm on May 13, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Do you even need dynamic pages, or just static content?

If you just want static content, there are many tools that allow you to generate static html from simply formatted text, like ZenWeb, a product of Zenspider Software (free).

Disclaimer: A friend wrote this and I use it for my own site. I also have contributed to ZenWeb.