Hi everybody!

I am working on a dotnetnuke based website which should go up soon, and I was wondering if there are any measures I can take to increase the security of the system.

Someone recommended that I will create two DotNetNuke environemnts, while both are conifgured to use the same (production) database. However, I will take the production environment (which sits at the webhost) and strip it down of all the admin and host module (everything that sits under the "admin" and "host" menu). by "stripping down", I mean deleting all the files/directoy used by the modules.

Of course, I will leave these other files intact on the other environment, which will sit inside our LAN behind our firewall, so we will only have access to it from within.

I would love to hear what you guys think about this solution. Is it even possible?

Also, I would like to hear any tips you might have about tightning up security in dotnetnuke.