Dana Blankenhorn has been a journalist, writer and part-time futurist for over 30 years.
Statistics show Plone is the safer choice:
The following data was extracted from the National Vulnerability Database, in April 8th, 2009. The figures presented represent the total number of occurrences of the term searched, with the numbers in parenthesis representing the number of occurrences in the past 3 years.
* Plone/Zope/Python stack:
o CVE Entries containing Plone: 10 (10)
o CVE Entries containing Zope: 19 (4)
o CVE Entries containing Python: 68 (46)
* PHP-based stacks:
o CVE Entries containing Drupal: 197 (183)
o CVE Entries containing Joomla: 327 (314)
o CVE Entries containing MySQL: 233 (136)
o CVE Entries containing Postgre: 66 (32)
o CVE Entries containing PHP: 9,989 (7,276)
* Other stacks:
o CVE Entries containing Perl: 2,544 (1,092)
These numbers do not prove anything by themselves, of course, but do suggest a general trend and are a good approximation of our security track record compared to other systems.
One should also note that when installing a CMS stack, one should consider the security records of all stack components (including add-on products and modules). That means if a CMS requires an external database server, the security of that server should be considered in addition to the security of the CMS system itself.
Drupal and the Acquia support group launched by Drupal founder Dries Buytaert have a two-prong strategy for the enterprise, I was told in an interview yesterday.
DrupalGardens for the Internet, the coming Drupal7 with Acquia support for the Intranet.
The news peg here is an agreement with Cap Gemini to promote Drupal as part of its Immediate platform. On his blog Buytaert compared it to the decision by Dell and IBM to ship Linux on their machines in 2007.
In an interview with ZDNet Buytaert added the deal will help Acquia grow its European footprint, alongside a European partner with 95,000 employees. Currently Acquia has 65 employees, and while it provides support during “European hours” as well as American ones it wants to expand its technical staff there.
Drupal’s footprint belies its size, said Acquia CEO Tom Erickson. The company recently spidered the top million sites, based on Alexa’s estimates, and found over 1% of them running Drupal. There are over 16,000 sites now running DrupalGardens, the company’s hosted offering.
“While Facebook and other social platforms are banned in the enterprise, enterprises are still trying to use this technology inside,” often through Drupal, he said. DrupalGardens makes it easy for a marketer to build brands online, while enterprises adapt to the Intranet version.
For its enterprise customers Drupal goes first class. Drupal Gardens is hosted on Amazon’s cloud. Aquia supports enterprises with a 24×7 help desk and service level agreements. “We have a sophisticated support management system that does tickets in a traditional way,” Erickson said.
The bottom line is that Drupal is becoming enterprise software, and Acquia a respectable enterprise software company, he concluded.
Yes, you can do that with open source.
