Yeah; I reviewed it, it doesn't seem to me it's being followed.  Where are the bulletins?  Something as complicated as DNN surely has had a number of security flaws over the years.  I feel I have grown a bit complacent about it in the past year.  When I first started with DNN, there had been a recent security bulletin or two and that was comforting; I didn't really notice the gradual departure from that practice, until I got the wake-up call from Richard's alert combined with the way it's been handled.  I love DNN but I'm sufficiently alarmed to put some of our plans for DNN on the back burner for the time being.