|
PolarBear -> RE: Web hosting (8/30/2008 3:14:58 AM)
|
The fact that it is open source has little to do with it. Open source projects generally care greatly about security. Also Drupal does have a much better reputation. I have seem a Wordpress vulnerability, but it was in an old version. It was exploited to send thousands of requests per second to a DNS nameserver. Happened on three servers within a few hours of each other, and it really nailed our nameservers. Part of the problem is PHP itself, and part of it is the inherent problems with shared webhosting in a UNIX environment. It's difficult to really isolate sites from each other without full virtualization, and PHP exacerbates the problem by allowing configuration options like register_globals and allow_url_fopen. I think PHP is a fine language for small custom dynamic sites but think it's insane to use it to build a large configurable object oriented general purpose application, such as a content management system. Unfortunately nearly all popular CMSes are written in PHP. I much prefer mod_python and hope it begins to gain more widespread acceptance.
|
|
|
|