SPAM (the unwanted extraneous content that floods the Internet, not the barely desirable canned meat product) can infest an unprotected Drupal website. There are ways to prevent SPAM on a Drupal site. Otherwise you're likely to be spending lots of time removing the infestation. I sure was early on in my career with Drupal.
