PHP-Nuke is simple to make safe,
Disable Search Module
Disable Journal Module
Diable Remote avatar hosting in Forums Control Pannel [Suposed to be fixed with 2.0.18]
Do the following edits immediately:
Edit includes/nukesentinel.php file
Code:
FIND
function st_clean_string($cleanstring) {
AFTER ADD
$cleanstring = str_replace($cleanstring,strtoupper($cleanstring),$cleanstring);
Should Now Look Like
function st_clean_string($cleanstring) {
$cleanstring = str_replace($cleanstring,strtoupper($cleanstring),$cleanstring);