Most major PHP-based blogging packages have a major security hole that can be exploited. I’m glad I haven’t switched to anything yet.