How does one attempt hacking a dotnetnuke site? Not particulars, just the methodology. I thought it was pretty safe because of the db based architecture, although I'm not expert.

How does one go about protecting yourself from having a DNN site hacked.

I saw this site hacked today, although other pages on the site weren't hacked, just anything pointing to the root of the site or a child portal url subdirectory:

http://dotnetnukeskin.com

Thanks

That hack is nothing to do with DotNetNuke - I posted an explanation @ http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/118/threadid/32903/scope/posts/Default.aspx 

Please do not ask for help/advice on hacking sites.

Cathal

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US

We've been working with DotNetNuke since version 1.x both as a hosting provider and as a development firm, and I've really been very impressed with its capabilities especially in the way of security.  Although there have been a few minor issues here or there with the core, most of the security issues are not related to DotnetNuke but more so an unanticipated combination of factors.

For example, a couple months ago we pointed out a "policy hole" to some associates of ours at another big DNN provider - they allowed clients to upload files (safe) and also allowed their clients to view the files (safe), howevever, combine those two safe actions together and you could be in trouble if someone does something such as uploading a malicious ASPX file and then viewing it (thus causing it to execute).

Chances are, if something happens to your site, it isn't because of a problem with DNN, it is a problem with something else.

---

Tony Valenti
Tony.Valenti@PowerDNN.com
+001-402-650-6072

PowerDNN.com - World Leader in DotNetNuke Hosting and DNN Hosting
DNN Hosting Australia - DNN Hosting Europe - DNN Hosting US