Security issues for non-techie?

[jefferis]

Hi Folks,  I have a non-profit that is interested in having me set up for them a CMS type website to which they can add pages and content as they have need....

Having worked with Joomla, I found it to be a monstrous headache, especially in regards to russian hackers, but most of the problems centered around the community memberships, which the non-profit will not do. No Forums, etc. 

I am just wondering how complex the security issues are for CMSMS?  I will not want to be having to manage the site constantly, looking for breeches... e.g....  So for the basic admin controlled set up, and perhaps a blog and photo gallery that they will do in house... Should I be worried? Or is it fairly secure and simple

Thanks
Jeff

[viebig]

No major security flaws found since 1.2.x

Also, you can look for cmsms security guide.

Go for it!

[replytomk3]

Follow installation and post-installation instructions regarding file and folder permissions. Read thru documentation and enable all security related settings, like this one: http://wiki.cmsmadesimple.org/index.php/User_Handbook/Installation/Optional_Settings (URL filtering), and this one: http://wiki.cmsmadesimple.org/index.php/How_to#How_to_Secure_CMSMS_system_-_Small_Guide.

[jefferis]

Thanks, I'll bookmark those for future reference.