Re: [school-discuss] insecurity (was: Postnuke)

[William Fragakis <william@xxxxxxxxxxxx>]

I don't want to get into a stone throwing contest - I trust you are 
keeping up with Typo3's security bulletins as I do PostNuke's. PostNuke 
forked off PHPNuke 4 years ago (PHPNuke was never truly open) and has 
evolved to a pretty stable base of APIs. I'm sorry that you had such 
trouble with PHPNuke.

Any cms can have vulnerabilities - especially one with a small 
development team but large installed base. Thank you for sharing your 
experiences with phpnuke.

regards,
William

On Sep 21, 2005, at 3:36 PM, Michael Shigorin wrote:

> On Wed, Sep 21, 2005 at 06:37:37AM -0400, William Fragakis wrote:
> > If there are any PostNuke (CMS) users out there, we have added
> > a number of educational modules to our installation plus a
> > number of good core PostNuke modules.
>
> NOOOOOOOOOOOOOOOOO
snip


> We've migrated linux.kiev.ua from PHPNuke to TYPO3 not only
> searching for something more like a platform to build upon --
> in fact Nuke was frozen (database access downgraded to r/o,
> SELECTs that is) due to another successful attack on it while
> we were already evaluating the options in background but had
> to jump out of that quicker than was intended.