[nzlug] Plone

[Greg Fawcett]

I think there probably are a lot more sites using the PHP CMSs, because they
are easier to deploy. But Plone sites tend to be pretty high profile
(Auditor General, Companies Office, Electricity Commission, GeoNet, Internet
NZ, Ministry Of Women's Affairs, Open Polytech, State Services e-Government
site are NZ ones I know of) and so could attract more than their share of
malicious attention.

There are also good reasons why Plone is safer - it uses Zope's object DB
instead of an SQL DB, so there is no chance of SQL injection, for instance.

Cheers!
Greg.

On 03/03/2008, Steve Holdoway <steve at greengecko.co.nz> wrote:
>
> On Mon, 3 Mar 2008 13:47:19 +1300
> "Greg Fawcett" <greg at vig.co.nz> wrote:
> [snip]
> > For an independent measure of the quality of each system, go to
> > http://cve.mitre.org/cve/cve.html and use their names as keywords.
> Joomla
> > gets 183, Mambo 159, Wordpress 126, and Plone....4. And only one of
> those
> > affected the current version (Plone 3).
> >
> > I host Plone on my own server, so I can't comment on NZ hosts - let me
> know
> > if you are interested in a quote for hosting it.
> Although I can't get my head around their constant striving for the next
> version to be released, I think drupal is a major ommission from your list.
> And with a score of 102, it beats the other php submissions quite
> comfortably. I do, however, think that this 'quality' measure also has an
> indication of the relative popularity of the product well mixed in, and that
> plone almost adds a 'security by obscurity' take on the whole CMS thingy.
>
> My $0.02,
>
>
> Steve
>
> _______________________________________________
> NZLUG mailing list NZLUG at linux.net.nz
> http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug
>
>
>


-- 
Phone: +64 3 409 8165
Mobile: +64 21 333 291
Fax: +64 3 974 6810
Web: www.vig.co.nz