I may have been cracked. yippee!

[kristian.hermansen-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org (Kristian Hermansen)]

On 6/20/07, Matthew Gillen <me-5yx05kfkO/aqeI1yJSURBw at public.gmane.org> wrote:
> That's why I use Drupal (drupal.org).  It was the first cms I came across that
> actually had a "security announcement" mailing list, which I consider a bare
> minimum for software like that (ie public-facing, written in php).
> Anecdotally, most of the security bulletins are not for the core system, but
> contributed modules.

RIght...
http://milw0rm.com/search.php?dong=drupal

> You can make things easier on yourself if you're comfortable using a cvs
> checkout for your site, since many of the security announcements say you can
> just 'cvs update' to fix the problem (they pretty much always also offer a patch).

Or you could use Plone if you are concerned about security.  I haven't
seen any public exploits for it yet, but obviously all applications
will eventually have a security flaw introduced at some point...
-- 
Kristian Hermansen

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.