Quote:
Originally Posted by sclitheroe
I haven't deployed Drupal anywhere yet, but I notice, from subscribing to the Drupal security announcements mail list, that there are frequent security patches for various parts of Drupal. In your experience, is Drupal difficult to keep secured in a production environment?
-Scott
|
I havn't had much trouble with it, but I should mention I haven't touched the newest version yet. I replaced my main Drupal site with a Wordpress version since it was far easier to style and the site didn't need as much flexibility as Drupal provides.
The biggest liability to Drupal though is through it's modules. Many of them directly access privileged information such as user accounts and permissions, so a security update might not affect a module until that module itself is updated.
I could see it being a headache, but not much more then any other major CMS system.