How secure is the Public Knowledge Projects software?
The current suite of releases (OJS 2.x, OCS 2.x, and the PKP Harvester 2.x) are based on a structured, proven, and widely deployed platform. We have taken considerable care to ensure that our software is secure at all levels, including checks to prevent SQL injections, XSS (cross-site scripting) attacks, and to ensure that application-level permissions are checked. As all of our software is open-source, it additionally benefits from community scrutiny. Our security track record is extremely good. If you have any questions about the security of the PKP suite, please contact us.
