[ikk157]

yes its depend on the developer of the code that the website runs . if the developer is new with using mysql it can easily get sql injected . my first CMS is sql injectable because i dont know how to prevent it but with experience i know the way and my newer CMS and updated CMS is sql injection proof . another one is XSS or cross site scripting . using HTML entities on input and output with MySQL escape string will remove 99.9% sql and xss attack . that is the most easiest hack that hacker will target

and im agree with you . no system is 100% safe and that is why you need to use all security measure to protect it

To be honest, static websites tend to be more secure.

Think of it in this way, with dynamic sites, there could be several ways which the contents of those sites are made to be editable. (e.g. some sort of panel, or a login system, etc...). This gives hackers the perfect place to look for exploits which they can use to takeover.

While static websites tend to lack such things, simply because they don’t need a way to edit them as they’re, well, static!