How hackable are different blog systems? (RE server security)
 

Is wordpress secure? What blog systems are safer or less exploitable by hackers.

I think mainstream blogs are hacked more easily. But I am wondering the same thing.

If its the same software?

stfu noob.

Any commercial "open source" software is potentially the subject of hacks because it is easy for hackers to look at the code and determine attack paths that will work properly. Wordpress is better than many packages because they don't require risky CMOD file options and such. Wordpress also doesn't require root access or significant server powers to operate or update, which makes it safer.

Like all software, it isn't as secure if you don't update it. Significantly out of date version of wordpress (say before 2.1.4 or so) are somewhat to significantly at risk for hacks.

CMS are way more likely to get hacked, and they often have much larger access to system resources and can more easily bypass security.

Why, think about it.....blogs like phpnuke are hacked easily. At least what happend to me in the past or am i overlooking something ?

I agree with RawAlex, when it comes to open source your opening a can of worms and potential attacks.

What ever your looking it its a good idea to always check this site http://www.securityfocus.com/ and check for any recent hacks or just gives you an idea on how hacked the software you might be looking at.

the chmod for files is pretty important and who the owner of the file is, if its global writable you also causing your self headaches. I do like wordpress and its fairly easy to upgrade when new *known* exploits are out.

One thing to keep in mind and some people don't like this is to remove any mention of the software and version your using, since alot of hackers would google like "wordpress 1234" knowing that 1234 had an exploit and attack all those sites.. look in headers, footers for this type of information usually.

Nothing is completely secure, Someone looking for a bug or error to exploit will eventually find one and exploit it.

:eek7

.

mainstream? hes talking about software, a lot of peoples code is buggy.

.sʞɔɐʇʇɐ buıɥsıɥd ɹo 'ʇoq ɔɹı 'ɯɐds ʇno spuǝs ʇɐɥʇ ǝıqɯoz ɐ oʇuı ɹǝʌɹǝs ɹnoʎ uɹnʇ oʇ ʇuɐʍ ʎǝɥʇ ʎ11ɐnsn .ʎ1ısɐǝ ʎʇʇǝɹd uı ʇıo1dxǝ ɐ puıɟ uɐɔ ɹǝʞɔɐɥ ɐ ʎ1ɹood pǝpoɔ sʇɐɥʇ buıɥʇʎuɐ

wordpress has been hacked so many times it is now out of fashion for all but the very lame script kiddies
php always has a weak link.
and people who have no clue about servers and linux.