Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Strange title on home pageStrange title on home page
Previous
 
Next
New Post
7/26/2007 1:55 PM
 

If you follow the steps listed above you can comment out the line that makes this change, HOWEVER, it will then ALWAYS show the page title.


-Mitchel Sellers
Microsoft MVP, ASPInsider, DNN MVP
CEO/Director of Development - IowaComputerGurus Inc.
LinkedIn Profile

Visit mitchelsellers.com for my mostly DNN Blog and support forum.

Visit IowaComputerGurus.com for free DNN Modules, DNN Performance Tips, DNN Consulting Quotes, and DNN Technical Support Services
 
New Post
7/26/2007 2:26 PM
 

jbrinkman wrote

Cathal - I can understand not leaking the names of pages which the user does not have permission to visit, but why would we hide the name of the page where the login module is hosted?  If I put the login module on the homepage, a common usage scenario, why would I hide the homepage title?  There are lots of ways to achieve the goal without "taking over" a user's site.

Joe the code is primarily to protect against information leakage for pages that do not allow anonymous access e.g. if www.mysite.com/default.aspx?tabid=1 is a page that is only for superusers, previously if i visited this link directly the login module would be injected but the title would still be seen, which was the information leakage that failed tha audit. I guess the code  could be changed to only overwrite the title if that page does not all anonymous users, which would preserve the titles on pages that allow anonymous access, allowing that information to be used by search engines and not punishing users who place the login module on a public page.

Cathal

Cathal


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
7/26/2007 2:43 PM
 

The problem here is that we have two usage scenarios which are at odds.  In one case you have a page where the CONTROL is injected dynamically and another case where a MODULE is placed on a page.  The code should differentiate between these two usage patterns and behave appropriately.  I can't think of a single case where someone would manually place a login module on a page where that page was restricted from anonymous access (if you were already logged in then you wouldn't need the login module).  So I would not look at permissions to determine the behavior, but instead look at the usage pattern.  If you are on a page with ctl=login then you could use the current behavior, but if you are on a standard DNN page where the login module is being used then the page title should be preserved.


Joe Brinkman
DNN Corp.
 
New Post
7/26/2007 4:06 PM
 

Joe is right.


Vitaly Kozadayev
Principal
Viva Portals, L.L.C.
 
New Post
7/26/2007 5:01 PM
 

Issue logged @ http://support.dotnetnuke.com/issue/ViewIssue.aspx?ID=5935 , i'll make the change for the next release.

Cathal


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Strange title on home pageStrange title on home page


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out