Hacker News Reader

I've not used Joomla, but Drupal is the same. Most modules are poorly documented, if at all. Figuring them out is a combination of trial and error and googling. SQL injection, XSS, and other vulnerabilities are discovered constantly. It's like running a never-ending update treadmill if you use more than a few modules.

I might be getting a chance to work with Dot Net Nuke soon. We'll see if a more commercially motivated CMS is any better.

View on HN

> I might be getting a chance to work with Dot Net Nuke soon.

Prepare to be disappointed.

I used DNN back in '08, and there were plenty of vulnerabilities if you peeked around in the code a bit.. The up side I guess was that they're rarely actually discovered, since there's not much of anyone paying attention.

Actually working with it was slow and tedious as well, really not an experience I'd like to relive (though for all I know it could have improved a lot in the past years.) When forced into using a .Net CMS I find that Umbraco can do the trick and be.. comparatively painless.

Having been there and done that, I can say that riding Microsoft's releases is also a never-ending update treadmill. It's one of the reasons I decided to leave it behind - it felt like they were intentionally releasing New Shiny to stop developers from having time to investigate other options.

Reply on news.ycombinator.com