Integrated issue tracking with Ikiwiki (LinuxWorld)

Posted Apr 10, 2007 10:50 UTC (Tue) by epa (subscriber, #39769)
In reply to: Integrated issue tracking with Ikiwiki (LinuxWorld) by Per_Bothner
Parent article: Integrated issue tracking with Ikiwiki (LinuxWorld)

The biggest advantage from generating static pages is that it's much less likely to cause security holes. I like Twiki, for example, but you have a huge mass of Perl code running for every page fetch and fiddling around on disk. (And yes, it did have exploitable holes and probably still does.) If all that's visible to the world is a static tree of files, it's harder to attack.

Of course, if you want to give the public write access then you still do need some kind of write access. But Ikiwiki is nice for the case when you just want to edit the pages yourself (after presenting a username and password to the web server) or to restrict editing to a small group of people.