From owner-freebsd-questions@FreeBSD.ORG Fri Oct 16 19:15:06 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F39DD106568D for ; Fri, 16 Oct 2009 19:15:05 +0000 (UTC) (envelope-from dave.list@pixelhammer.com) Received: from smtp1.tls.net (smtp1.tls.net [65.124.104.104]) by mx1.freebsd.org (Postfix) with ESMTP id AA3CC8FC0C for ; Fri, 16 Oct 2009 19:15:05 +0000 (UTC) Received: (qmail 40706 invoked from network); 16 Oct 2009 19:15:04 -0000 Received: by simscan 1.2.3 ppid: 40660, pid: 40681, t: 4.4088s scanners: attach: 1.2.3 spam: 3.2.1 X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on smtp1.tls.net X-Spam-Level: X-Spam-Status: No, score=0.2 required=7.0 tests=ALL_TRUSTED,TVD_RCVD_IP autolearn=disabled version=3.2.1 Received: from 208-70-44-208.bb.hrtc.net (HELO ?192.168.1.46?) (ldg@tls.net@208.70.44.208) by ssl-smtp1.tls.net with ESMTPA; 16 Oct 2009 19:14:59 -0000 Message-ID: <4AD8C622.1020106@pixelhammer.com> Date: Fri, 16 Oct 2009 15:14:42 -0400 From: DAve User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <64c038660910160927n172d08far27decc6d615f8cd@mail.gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: CMS X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2009 19:15:06 -0000 Paul Schmehl wrote: > --On Friday, October 16, 2009 11:27:12 -0500 Modulok > wrote: > >> >> On 10/15/09, Paul Schmehl wrote: >>> I manage a couple of FreeBSD servers for a friend. He's gotten all >>> excited about content management and thinks that's the way to go. The >>> system he's familiar with is Windows only. I've done a little research, >>> but I'm wondering if anyone reading the list has experience with a >>> CMS on >>> FreeBSD - one that's in ports preferably. >>> >>> Pros? Cons? Any known security issues? >> >> If it's your server and you're the guy, (or your friends) needing >> "content management" abilities... a simple SSH connection cannot be >> beat. But maybe that's not what you had in mind :p > > Yeah....I'm not the content guy. I'm the server admin. I'm also not > the ower. The owner likes CMS products since he's now using one, and > wants to install the one he uses on his server. But the one he uses is > only for Windows. Thus the question. > It is my opinion that they (CMSs) are nearly to the point it will take a quadcore CPU and 4GB or memory to serve a single html page containing the words "Hello World". Code light, they are not. My experience with CMS such as Joomla, SurgarCRM, etc is that they are to crackers as a lone lightbulb in the forest is to bugs. - Keep them up to date. - Subscribe to, and be attentive to, their security mailings. - If you do not use a feature/module, remove it. - Do not under any circumstances install PhpMyAdmin. My logs show if a IP gets a hit on a CMS page, they immediately search for PhpMyAdmin next. If you must install it, install it on another machine or under a different domain. Then turn access on and off at the SQL server when needed. We have a few CMSs that I could not talk Sales out of, two have had problems. One was moved to it's on VPS because of issues. Best of luck. DAve -- "Posterity, you will know how much it cost the present generation to preserve your freedom. I hope you will make good use of it. If you do not, I shall repent in heaven that ever I took half the pains to preserve it." John Quincy Adams http://appleseedinfo.org