Quote from: a7 at May 13, 2008, 11:43 AM
There are Security audits, security mailinglists, security guidlines for writing modules, ... - there is a whole team at drupal caring about security. Even people like Rasmus Lerdorf work to improve Drupal security.
Just because a lot of people work on something does not make it a *better* product.
“I love finding custom CMS because I know I can break into it. If I see Drupal and its up to date I just give up.”
- paraphrase of Rasmus Lerdorf
This, my friend, is far more FUD than anything else in this thread. Please don’t come onto our forums and spread propaganda like this.
So if you want to read some more about drupal security here is some information:
http://drupal.org/security
http://drupal.org/security-team
http://drupal.org/node/36526
http://drupal.org/project/security_scanner
I am not comparing MODx with Drupal yet so my opinion about how they compare does not carry any weight. I only think such a statement shouldn’t be left uncommented as they leads to false assumptions.
Fair enough.
And here the top 5 Reasons why Developers don’t use Drupal
http://www.nicklewis.org/node/968
That article is horrid. Let me expound:
1. ’Our API is Only as Powerful as the Developer’s Knowledge of It ’
That’s a lame excuse - any API is like that. Drupal is not alone. What makes a good API is three factors:
1.
Power - A good API is powerful, fast, and does what it needs to do with excellent efficiency.
2.
Accessibility - if an API is too obfuscated and hard to understand, then it’s not likely it will find wide adoption. Well thought-out APIs are not only powerful, but have excellently designed models that are easy to quickly understand.
3.
Extensibility - A good API can easily be overlayed and developed on top of, and should be easily able to be adapted into other MVC or OOP design frameworks (or non-oop frameworks, for that matter).
2.Developers Hold a Deeply Held Believe that *their* tool is the best
Nonsense. This is a generic, stereotyped attack on developers. I personally dont find my frameworks to be the best in everything. I
wish PHP had the scaffolding capabilities of RoR. I
wish MODx had the revisioning and rollbacks of CMSes like Stellent. They are better in those areas. The writer of this article is horribly biased toward PHP, by his statement: "Oh, btw, RoR sux."
3. Developers Often Don’t Form Opinions From Experience
You’ve got to be kidding me. Maybe beginners dont, but most every serious dev I know
always checks out a product or toolkit before making a statement on it. Most, as well, also try to implement that software or language into a project at least once.
4. Anti-PHP snobbery.
Bah. I hear this in any community. In fact, I’m willing to be there’s more Anti-Anti-(languagehere) snobbery that there is opposition to the software. What does this have to do with Drupal in particular? There’s _tons_ of PHP CMSes.
5. Drupal Doesn’t Speed Up Development for Developers Who Aren’t Drupal Ninjas
This is a major core problem with Drupal. It doesn’t have the core principle of good API - easily accessible and understandable without compromising power or flexibility.
All in all, that was a bad article, that really didn’t produce any good pro-Drupal arguments. It seemed to bash developers more than anything. If you want to gain developers, it’s a pretty bad idea to go around bashing other developers.