Static site run by Modx, and the disadvantages over dynamic

http://modxcms.com/forums/index.php?action=post;board=11.0

Hi, from reading the above, I have been left confused on the differences between a static site being run by Modx, and a dynamic site.

Is it possible to run a ecomerce site with login functions, shopping cart and search facilities using static pages exclusively?

I ask this as static pages are more secure and are less likely to be attacked than dynamic sites. What exactly is the method, and the disadvantages?

Thanks

I think you’re referring to the use or not, of a CMS!

1) MODx for instance let you and your visitors perform CRUD actions on the web site. The site is dynamic even if the users can’t login front-end. Because when they request the page by url - MODx/PHP go get the page from the database.

2) If you uploaded some .php files to you server manually that did CRUD on a file or database, that is also considered to be a dynamic page...

IMO:
1+2 = is equally secure if you have a secure server.
1 = is less secure if you have a vulnerable server and you install lots of 3rd party applications
2 = is less secure if you have a vulnerable server and if you don’t know PHP very well(!)

The benefit of using systems (with big user groups) is that the code will be tested and fixed by many tired eyes.
The recent WP hack was fixed by an update, if your custom code have a security vulnerability you are by yourself...

---
Static pages means no user interaction by forms or urls. You can use .htaccess .htpasswd to present static data for logged in users but it’s just for a one way communication. That is why "static" is safer... but very bad for businesses!

Quote from: mrhaw at Oct 03, 2009, 06:31 PM

I think you’re referring to the use or not, of a CMS!

1) MODx for instance let you and your visitors perform CRUD actions on the web site. The site is dynamic even if the users can’t login front-end. Because when they request the page by url - MODx/PHP go get the page from the database.

2) If you uploaded some .php files to you server manually that did CRUD on a file or database, that is also considered to be a dynamic page...

IMO:
1+2 = is equally secure if you have a secure server.
1 = is less secure if you have a vulnerable server and you install lots of 3rd party applications
2 = is less secure if you have a vulnerable server and if you don’t know PHP very well(!)

The benefit of using systems (with big user groups) is that the code will be tested and fixed by many tired eyes.
The recent WP hack was fixed by an update, if your custom code have a security vulnerability you are by yourself...

---
Static pages means no user interaction by forms or urls. You can use .htaccess .htpasswd to present static data for logged in users but it’s just for a one way communication. That is why "static" is safer... but very bad for businesses!

Thanks for your response.

I thought at one point that it was possible to run a static site with Modx, with all the files stored on your computer, and not in the databse. So yes, I was trying to understand if a static site could achieve all, or almost all of what a dynamic site can achieve.