Russ Harvey Consulting - Computer and Internet Services

Content Management Systems

CMSs Mask Technology | Security Concerns | Technical Considerations

Content management systems (CMSs) provide the framework to post blog or web content without having to learn HTML or CSS or other markup languages (the backbone of the Web).

Instead, they use a framework around the content that allows them to use a graphical interface similar to word processing programs:

The WordPress blogging interface is an example of how a CMS appears to the end user

Most people aren't familiar with the term CMS, but they know about the world's most popular platform: WordPress.

CMS Blogs & Websites

Stats for the major CMSs (the first number is the percentage of known CMS systems; the second the percentage of all websites):

  • 58.8% (27.7% of all websites) was designed for CMS-based blogs but has been adapted for websites.
  • Joomla: 7.1% (3.3% of all websites) was designed for CMS-based websites rather than blogs.
  • Drupal: 4.7% (2.2% of all websites) is an open source CMS.
  • Magento: 2.6% (1.2% of all websites) is a flexible commerce CMS platform.
  • Blogger: 2.3% (1.1% of all websites) was one of the CMS blogging pioneers and is now owned by Google.
  • W3Techs lists lots of others.

Both blogs and websites can be built and managed using a CMS framework.

CMSs work best where the format and layout are simple and unlikely to change. This is why they work so well for blogs.

The CMS Structure

Essentially there are three aspects to the design and maintenance of a CMS system:

  1. the overall framework;
  2. the customization of the format and layout (template); and
  3. the content.

This is augmented by plugins and other addons that provide specific functions for the CMS.

The CMS Framework

The overall structure is generally designed by a team of software specialists. They need to provide the framework to interpret the way the CMS integrates and interacts with the Web.

This CMS framework also has to have the ability to manage and interpret templates. This is what makes the CMS customizable.

Templates & Plugins

The next step is the creation of templates and plugins that follow the particular CMS's framework and rules. In this manner the user can import a customized “look and feel” that can be changed without damaging the actual content.

The terminology can be different for different CMSs, but can be called themes or addons in some cases.


The end user is now able to enter content in posts and customizations to generate an unique and distinctive blog or website. If the template they've chosen isn't quite right they can experiment with others knowing that they won't lose their content.

It is this last part that is compelling to users. They don't have the skills nor the funding to hire someone that does. Instead, they use a free (or premium) template.

Return to top

CMSs Mask Technology

The main advantage to CMSs is that they allow you or your staff to update online content without any technical knowledge.

Few Understand Web Technology

Unfortunately, most people don't understand very much about website design.

Since that fateful day when the idea [that people could manage their own websites] was first pitched to the public, we've seen a stampede of low quality sites emerging. They probably weren't always low quality sites, but I think you will find that, in general there is a direct proportional relationship between the decline in the quality of a site and the amount of time that the site owner has been self-managing it.
9 reasons you should never use a CMS.

You shouldn't blame the designer, but you probably will.

Hidden Costs

If your blog or website is representing a business or organization, you might want to rethink the hidden cost of doing it yourself.

  • Technical aspects can be masked, but doesn't remove the reasons they exist.
  • This lack won't allow you to maximize the effectiveness of your website.
  • You don't need to understand HTML or CSS but you do need to learn how to manage the CMS environment.
  • Customizing templates involves additional developer time and fees. Many customizations and plugins require annual subscriptions.
  • CMS-based sites tend to be larger and are usually dependent upon databases.

Fortunately technology has progressed so that high speed Internet services and better hardware allows us to deal with bigger file sizes and sometimes inefficient content.

Learning More

If you're seriously considering a CMS-based site, we should talk.

Call Now
to discuss my services!

Return to top

Security Concerns

Security is an important aspect of maintaining a site. Poor choices on your part can break your site or make it dangerous to your site visitors.

Miscreants are also actively targeting content management systems. In recent editions of the Trustwave Global Security Report, we discussed how popular content management systems (CMSes) represent potentially lucrative targets for attackers.

When they discover a significant weakness in a widely adopted CMS, it places every installation of that CMS at risk for exploitation, not only before the fix is available but also for considerable time afterward. Attackers use automated tools to find CMS installations to target. — Trustwave Blog.

  • A vulnerability in the CMS software OR the template OR the plugins you're using will make your site or blog vulnerable.
  • Weak passwords or security can make your site susceptible to being hacked. This could potentially destroy your credibility.
  • You could even be liable for damages if your site is used to attack other sites or becomes part of a botnet or other criminal activity.

One of the contributing factors is that your average user doesn't understand the technology they're using or what it is masking.

Updates Can be Confusing

Updates to your CMS software can be a headache. If the process doesn't go as expected the documentation is usually technical.

Elements needing updating include new CMS releases or security updates as well as updates to templates and plugins. These may need replacement if support expires.

If the CMS vendor stops supporting your CMS template or plugin, you'll no longer get security updates.

WordPress Especially Vulnerable

A solid majority of the known web application attacks — attacks that could be traced to known, widely used exploits or techniques — that we observed in 2015 affected WordPress or WordPress add-ons. — Trustwave 2016 Global Security Report

Nearly half the attacks on sites in 2015 were a result of a vulnerability in the “RevSlider” WordPress plugin used to display a rotating gallery of images.

[A] typical WordPress site can be infected by just two lines of scripting code. — ZDNet

Maintenance Contracts

Maintenance contracts allow you to ensure your CMS security updates are performed for the best possible price.

If you're seriously considering a CMS-based site, we should talk.

Call Now
to discuss my services!

Return to top

Technical Considerations

There are also some technical considerations.

If you break the CMS layout, it can be very expensive to restore and you may lose any customizations.

CMSs Load Slower

CMS sites tend to be larger than hand-coded websites, resulting in longer load times.

Unlike a bricks and mortar store, your competition is merely a click away (and probably appeared on the same search listing as your site).

Malformed Links

People tend to assume that the CMS software will interpret links the way a modern browser does (i.e. filling in the missing information). That isn't true.

Relative & Absolute Links

You need to understand how the Web (and probably your CMS) handles relative, absolute and root-relative links.

  • Relative links are addresses relative to the current directory like contacts.html).
  • Absolute require a FULL site address (e.g.
  • Root-relative links point to a location relative to the root of the site (e.g. ../nav/contacts.html).

Note: while the addresses may appear to be split between lines in the examples above they are intended to display with no spaces.

Errors are Common

Common errors include entering only the domain where an absolute address is required.

This would be interpreted as a relative link and cause unexpected results.

For example, entering for a link would be interpreted as

Not finding on the site, the server would return an error.

Fixes Are Time Consuming

I find that I spend more time fixing issues like these in client CMSs than I would have done when simply adding the original content in a hand-coded website.

Maintenance Contracts

Maintenance contracts can ensure that content is updated correctly and regularly at the best possible price rather than struggling with a CMS-based site.

If you're seriously considering a CMS-based site, we should talk.

Call Now
to discuss my services!

Return to top

Related Pages

These other pages discuss the various aspects of designing a site:

Return to top
Updated: August 27, 2018