<div>
So does using a publicly known CMS, particularly Drupal, put my site at greater risk than doing something custom?
</div>


So does using a publicly known CMS, particularly Drupal, put my site at greater risk than doing something custom?

<div>
<div class="content wysiwyg-content">
Using Drupal you get lots of productivity benefits of being the &quot;the same&quot;. But my worry is that hackers are attracted to the millions of sites using Drupal. &nbsp;Once they find a hole, they share it with other hackers and this could expose my data for abuse. So security is where being &quot;different&quot; has its advantages.<br />
<br />
How can I protect myself? Might I use encryption so the data in the database is useless to any hacker?<br />
<br />
Please comment on security.<br />
<br />
Thanks.
</div>
</div>


Using Drupal you get lots of productivity benefits of being the "the same". But my worry is that hackers are attracted to the millions of sites using Drupal.  Once they find a hole, they share it with other hackers and this could expose my data for abuse. So security is where being "different" has its advantages.

How can I protect myself? Might I use encryption so the data in the database is useless to any hacker?

Please comment on security.

Thanks.

Overcoming security exposure of Drupal

Drupal is an open-source content-management framework written in PHP used as a back-end framework for websites and is also used for knowledge management and business collaboration. The standard release of Drupal contains basic features common to content management systems, including user account registration and maintenance, menu management, RSS feeds, taxonomy, page layout customization, and system administration. Drupal runs on any computing platform that supports both a Web server capable of running PHP and a database to store content and configuration.

Drupal

The Linux operating system, in all its flavors, has its own share of security flaws that allow intrusions, but there are various mechanisms by which these flaws can be removed, generally divided into two parts: authentication and access control. Authentication is responsible for ensuring that a user requesting access to the system is really the user with the account, while access control is responsible for controlling which resources each account has access to and what kind of access is permitted.

Linux Security

MySQL is an open source, relational database management system that runs as a server providing multi-user access to a number of databases. Acquired by Oracle in 2009, it is frequently used in combination with PHP installations, powering most of the WordPress installations.