Page 1 of 1

Security issues for non-techie?

Posted: Tue Jun 02, 2009 3:37 pm
by jefferis
Hi Folks,  I have a non-profit that is interested in having me set up for them a CMS type website to which they can add pages and content as they have need....

Having worked with Joomla, I found it to be a monstrous headache, especially in regards to russian hackers, but most of the problems centered around the community memberships, which the non-profit will not do. No Forums, etc. 

I am just wondering how complex the security issues are for CMSMS?  I will not want to be having to manage the site constantly, looking for breeches... e.g....  So for the basic admin controlled set up, and perhaps a blog and photo gallery that they will do in house... Should I be worried? Or is it fairly secure and simple :-)

Thanks
Jeff

Re: Security issues for non-techie?

Posted: Tue Jun 02, 2009 11:25 pm
by viebig
No major security flaws found since 1.2.x

Also, you can look for cmsms security guide.

Go for it!

Re: Security issues for non-techie?

Posted: Wed Jun 03, 2009 2:15 am
by replytomk3
Follow installation and post-installation instructions regarding file and folder permissions. Read thru documentation and enable all security related settings, like this one: http://wiki.cmsmadesimple.org/index.php/User_Handbook/Installation/Optional_Settings (URL filtering), and this one: http://wiki.cmsmadesimple.org/index.php/How_to#How_to_Secure_CMSMS_system_-_Small_Guide.

Re: Security issues for non-techie?

Posted: Wed Jun 03, 2009 2:55 am
by jefferis
Thanks, I'll bookmark those for future reference.