which CMS software is better?

[MustangV10]

I'd go with Joomla. They released a new version a while back which works well. It's not overally secure though, as far as I'm aware.

[Himbo]

In my opinion, Joomla works better than Drupal.

[HiddenKnowledge]

Your point of view is worth to mention adding this fact; sometimes we find a CMS we are comfortable working with and then a new version comes up with bells and whistles.

While many times a new versions brings enhancements and new features that may improve your website, some others those "upgrades" are for bad, whether the script doesn't work or load as it used to do, is more complicated to manage or has add-ons that we might not need.

However, sometimes an upgrade comes with security patches when a vulnerability is detected but, what do you prefer? A new CMS with security enhanced but hard to manage or an easy-going previous version.

I would also select the old one, but there is something I consider a rule of thumb when it comes to keep online an outdated version: remove the version number or information about from the footer or any other viewable place.

If you are knowledgeable in PHP you may try to patch the vulnerability yourself, but if you don't know how, don't let potential hackers learn you have a vulnerable version. If they don't see what version you are running the chances to get them trying an attack or MySQL injection are very low or null.

I'd like to add, be sure to remove it from your source code too and to be sure there is no way they can know you are running that version, otherwise they will find out you are running a old version.

[Arthur]

From the PHP source? Or the HTML source? They should be unable to view your PHP source.

Just thought it might be worth mentioning, I am working on a basic CMS, which I hope to release fairly soon.

[MyDigitalpoint]

It's supposed nobody can see your PHP source unless you are expressly adding the means to allow people see the source in a text-friendly manner.

However I remember that several years back there were a couple of websites out there promising to reveal you any PHP source from the web. I was newbie at coding so I simply test an URL to see, and it revealed me the PHP source on it, in fact it was an IPB 1.3 index page that I later was able to compare with the real file when I downloaded such script.

Sometime later I found that script in SourceForge.net and tried it on my own, but eventually I lost it and it was deleted from that place. I suppose due to security breach, despite I can't still understand how that code worked.

Perhap a flaw in old PHP versions too.

[Serial Thrilla]

I'm a big fan of Joomla if you ask about CMS but it is sadly way to heavy for shared hosting :( .

At the moment I use Wordpress with some plugins to manage my content in a blog.

PHP Fusion is also nice!