Andre wrote:
One of the main reasons that exploits are discovered in open source cms’ is because the source is available for any decent programmer to find any exploits.
A cms you develop yourself is for your eyes only. A hacker would either have to break into your server, test each input field for sql injection possibilities or try various url params to cause some damage by chance. The odds are slim if you have taken care while coding though, like making use of parameterised queries, or using persistance tools like pear DB.
The bottom line is that you have to know what you are doing though. Like dudie i’m a Java developer as my day job. I run open source software because i don’t have the time to code a cms myself, and i’ll just hack what is available out there to suit me.
Indeed a nice post. I fully agree 