I get asked, why not just use Open Source (free or next to it) programs, like those that are used in Forums, and Wordpress for blogs? Why not, a lot of people use them and they are relatively easy to use. Unfortunately there are a couple of problems that show up far too often when using some types of Open Source programs. One is, do the originators keep the software current or was it something that someone did while in college and no longer supports? I see this a lot, new issues come up for hacking all the time; if a programmer doesn't keep on top of it next thing you know your site is hacked. In fifteen years of using software for the web the only time my company has been hacked has been because of a Forum program, millions of websites were hacked as well and this was a program that was kept up relatively well. Imagine those that aren't? (Fortunately for us, because of background security in place on the forum that had problems, no other sites or our servers were effected)
Hacking can do all sorts of things to your website; grab all your customer data, spam all your clients, deface the website with porn, bring down the website. Also the more people that use a particular program the more likely that hackers will go for it because with the same effort they can hack more individual websites. Like Microsoft and Apple, there are many times more people using Microsoft software so more attention is given to it by hackers.
The other issue with Open Source software is someone can buy the company that looks after it, make all sorts of changes, and you're stuck. Database sites are not as easily moved as static websites are so this is a valid concern.
So don't use Open Source? No, just be very careful. For example, we use Awstats for stats, a very highly rated program for going through your server logs, but it is continually updated and since it doesn't show to the outside web world its not worth bothering with for hacking. Nothing is ever a hundred percent but keep the odds in your favor as much as you can; a little background work pays in the end. |