Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...ASP.NET Security Vulnerability  blogASP.NET Security Vulnerability blog
Previous
 
Next
New Post
9/22/2010 9:43 PM
 
Sebastian Leupold wrote:
Besides, if you use the 3.5 SP1 solution and are able to browse /error.aspx, it should be fine

 Good tip about browse /error.aspx.  It is hard to figure out what version of .NET on the server.  The IIS shows version 2 and DNN shows 3.5.

 
New Post
9/22/2010 10:33 PM
 
I know. FYI: DNN 5.5.1 has been announced to take care of the fix during upgrades and there should be an extension for previous versions made available within the next days as well taking care of this issue.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
9/22/2010 11:23 PM
 
nonprofit wrote:
I think people need to be cautious.  It appears to me that the host settings can display 3.5, but you may have 3.5 SP1 installed.  The instructions for 3.5 and 3.5 SP1 are different. 

My host provider has confirmed that 3.5SP1 installed on the server, but my host settings says 3.5. I am going to follow the instruction for 3.5 SP1.

 If you need to confirm your exact  version of .Net and have Administrator access to your machine this Microsoft KB article could help:

http://msdn.microsoft.com/en-us/kb/kbarticle.aspx?id=318785


Ken Grierson
DotNetNuke Corporation
Test Lead
 
New Post
9/24/2010 12:17 PM
 
nonprofit wrote:
I think people need to be cautious.  It appears to me that the host settings can display 3.5, but you may have 3.5 SP1 installed.  The instructions for 3.5 and 3.5 SP1 are different. 

My host provider has confirmed that 3.5SP1 installed on the server, but my host settings says 3.5. I am going to follow the instruction for 3.5 SP1.

nonprofit ,

Yep, I am running 5.2.2 any my setting was set to show 3.5...but with your inquiry I checked further into my ISP provider and verified I was using 3.5 SP1 instead.  Thanks for your attention to detail.

Sebastian Leupold wrote:
Check the framework version,  you are using, inside DNN Host Settings:
  • if you are on ASP.Net 2.0, you may only use error.html. 
  • If you are running .Net 3.5 SP1 or 4.0, use error.aspx, including a delay code, which will provide extra protection.
  • as a sample see these files from German DNN Usergroup

Sebastian,

thanks for providing a link for the sample error.aspx file from the German DNN usergroup.

 
New Post
9/24/2010 11:19 PM
 
I'm curious why the DNN 5.5.1 Install package uses customErrors mode="RemoteOnly" when the ScottGu blog recommends customErrors mode="On". I'm not a programmer, just a webmaster who's been reading up on the issue. Most folks seem to be sticking to the official recommendation from the Microsoft ASP.NET team. Why is the DNN package deviating from that? I'm sure there's a good reason. I'd just like to know what it is. Thanks.
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...ASP.NET Security Vulnerability  blogASP.NET Security Vulnerability blog


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out