Slashdot Mirror
How To Choose An Open Source CMS
An anonymous reader writes "Content management specialist Seth Gottlieb has written an easy to understand how-to on selecting an open source CMS. Gottlieb is also responsible for the whitepaper 'Content Management Problems and Open Source Solutions' which summarizes 15 open source projects and distinguishes between open source CMS and proprietary software selection."
http://www.opensourcecms.com/
Two of the most popular and flexible open-source Content Management Systems are vi and emacs...
No matter how many people tell me that "Foo" is the best CMS, the only way that I found to really get a feel for them was to test them out myself. That included setting something up, testing the setup, and testing my abilities at updating the code.
I settled on Drupal only because it was the "hot thing" at the time and I enjoyed the fact that you could put php code into "blocks" and have it run custom code w/o much hassle. At the time I wasn't all that much interested in working on the actual code so the "blocks" allowed me to get some of my bash shell scripts onto the site w/o doing too much hacking.
The easiest way to quickly filter CMS's is by looking at the navigation structure. Do you want a "tree" structure (like most corporate websites) or do you want a "module" (like slashdot, nuke and other community sites).
There are other choices that can quickly filter CMS's, but many of the choices have alternatives or can be hacked around. Only rarely will you find a CMS that can handle both navigation structures.
Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
I think the OpenSource CMS market is getting too flooded... Do we really need another PHP/MySQL CMS? I know some people who are developing a commercial CMS product. I think they are crazy, since there are PLENTY of free CMS packages out there. If there is not need for a full blown enterprise CMS, why would you pay for a proprietary "non-free" application? How about a list of Open Source Enterprise Content Management systems? That would defintely be a shorter list.
Please no. Wiki != CMS. I really hate the current trend of open source projects putting all their documentation in a wiki.
How to install SomeProject - This article is a stub, but you can help by writing it!
No thanks.
There are quite a few Java based open-source CMS like Magnolia (http://www.magnolia.info/en/magnolia.html), Apache Lenya (http://lenya.apache.org/ etc. An exhaustive list of Java based open-source CMS can be find here:e nt-systems
http://java-source.net/open-source/content-managm
I'm about 3/4 through evaluating cms products for my small company. I've read about all the major opensource ones, and even went into the commercial realm. I personally installed/evaled 7 or 8 (I didn't always take notes, some were already losers )
Here are some things that greatly helped me:
There is NO awesome templating system. If you have web designers and you have programmers, don't expect something to drop into place with little hassle. We have been deploying html + mod_perl applications using a simple in-house templating system. This is actually elegantly simple compared to some of the systems I looked at. It's all very relative to the staff you have. Personally a JSP taglib solution works best for us (so far)
There is no one "best" system. People claiming X or Y is clearly superior are either not deploying CMS for a group of users, lack experience as a developer/designer/user, or are just crazy. I know of a Major Company(tm) who management told to the developers use X system for some inscrutable reason after reviewing a lead dev's evaluation list. While on paper X is great, there are a few very annoying problems for the template designers, and they don't have the mandate to go modify the code, which is open.
Part of the evaluation MUST include every level of person using the product. Developers,designers,managment (reports n such), and end users (archetypal secretaries). I tried to let people know what was happening a few times a week with my evaluations, keeping a blog would be great maybe. Other people accepting your choice is super-duper-key. I got some great feedback from docs on a few occasions that helped me steer my choice.
Get a clear set of requirements and wish list items established early on. CMS systems can be minimal or very very comprehensive, it's easy to get lost in nth's implementation of webDAV or whatever.
Blog systems may have elements of CMS in them, but are not (usually) full blown CMS systems. CMSmatrix.org and other great places for data lump all the products together. In my opinion there are about a dozen open source products that are clearly way beyond the blog.
Last piece of advice which you won't hear very often: if you think you may not need a CMS solution you probably don't! If you have a single site, with some updating you need to do frequently or maybe you want to have a team of designers working on it, check out subversion first and maybe that alone will give you enough of what you want. If you just need templating check out apache's tapestry or cocoon projects.
A CMS by definition is a content management system. As a result, it is crucially important to determine the content you want the system to manage and how you want the system to manage the content.
A few starter questions:
1. What content do I have or expect to have? (web pages? documents? discussion forums? image galleries?)
2. Where does this content come from? (departments? users? myself? Internet sources? databases? third-party apps?)
3. How should the system manage this content? (workflows? editors? fine-grained access control?)
4. How should this content be displayed? (xhtml/css? pdf? print/paper? cell phones? xml? rss?)
5. How much separation of content and design do you require?
6. How extensible should the CMS be? (in-house development? modular? out-sourced development? completely opensource?)
7. What are the administrative requirements? (*nix? mysql/postgresql? apache? php? python?)
8. What is the anticipated load and can the CMS manage that? (quite different from a 5,000 hits/day site vs 20,000,000 hits/day)
9. What is the estimated lifetime of the website? What changes to the site are forseeable and should be considered?
Assuming your doing something more than a personal blog site, most likely pre-existing workflow processes and organizational resources already exist and those should be analyzed when making a CMS choice.
Don't get overly focused on initial setup times. The cost of administration, development and resources will far outweigh the initial setup costs on all but the smallest of sites.
Another big reason that you see so many PHP vulnerabilities is that PHP is free and easy, and so lots of (frankly) amateurs pick it up and write wizz-bang apps with it. The reason I call them amateurs is that they really have no idea and usually don't even know or care to write code with security in mind. Many, perhaps most newbie programmers think that bugs are something that happen to other people who aren't as smart as they are.
So basically, you have some well-intentioned but not experienced person with a good idea, and they sit down and hack together an application while learning PHP at the same time. Do they even know the definition of "SQL Injection Vulnerability" - probably not.
And a lot of the issues that I see on places like bugtraq are application specific, and I usually haven't even heard of the app. "The PHP app, Lyrus Extreme version 3.2 has a remote exploit." In your head, you subconsciously tally that up as "one more PHP problem" and if someone is gathering statistics on PHP problems by searching bugtraq for the string PHP, this one will be counted. But really, it's not a PHP problem, it's just an amateur programmer.
Part of the evaluation MUST include every level of person using the product. Developers,designers,managment (reports n such), and end users (archetypal secretaries).
...
... (chances are this is all wrong);
This is so true. End user input is critical, they will make or break the project.
My dad (rest his soul) was lead programmer (maybe the only programmer, I dunno) for the Star Tribune newspaper, back in the seventies. I was a teenager at the time, he taught me about For-Next loops and so on. Along with the coding, he emphasized:
The smart programmer
(a) Listens and nods his head while Management says "We want this, We want that"
(b) Sits down with end users (secretaries, etc.) for a while, every day, staying out of their way but watching them work, and asking the occasional question;
(c) Figures out what the end users really want, need, will accept;
(d) Codes for the end user, then spins the thing so Management thinks they're getting what they (foolishly) asked for.
Dad called this "going native among the users" (he took his degree in anthropology).
-kgj
-kgj