To reply to both - If SQL injection is so easliy prevented, why does Wordpress suffer so many code injection exploits? It would seem to me that with the size of coding team they have, any such issues should have been dealt with years ago. If, it was so easy to prevent. Of course, it is not, and that is the problem.
The only sure way to prevent it is to use T-SQL, but basing a product on T-SQL syntax would mean it being incompatible with the majority of hosting accounts. Which is why that won't happen any time soon.
What you actually mean by 'Straight out of 2005' isn't clear. Do you refer to the styling of the instruction site, the styling of other sites we've built with Mara, or the way it works? Not sure.
![Confused :-//](https://www.eevblog.com/forum/Smileys/default/confused0024.gif.pagespeed.ce.5xOqKkq0Co.gif)
Maracms.com is an instruction manual site. That is its purpose. It is laid out that way to provide readable instructions. Such would not be achieved by using a mega-banner style or the like. It is however responsive, and can be read on a phone with 400px screen or larger.
Grav, I have no experience of but I'll take a look and see. The kind of styling used on the Grav site is trivially easy to produce in Mara. If, you think that looks modern. Though it reminded me of Windows 8
![ThumbsDown :--](https://www.eevblog.com/forum/Smileys/default/icon_thumbsdown.gif.pagespeed.ce.D027Y9gZ7m.gif)
- a product which I'd rather forget.
Though, if the consensus is that the styling of the informational site is offputting, that can easily be changed.