Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How can the MachineKey setting in web.config reset itself?How can the MachineKey setting in web.config reset itself?
Previous
 
Next
New Post
5/6/2008 7:57 PM
 

I recently experienced a problem with a DotNetNuke 04.05.01 portal installation where its MachineKey setting seemingly reset by itself. This prevented all users from logging into the website until the original MachineKey was restored.

My question is how is it possible that the MachineKey can be reset without performing an upgrade or install?

My understanding is that the MachineKey setting in the web.config is only reset when Install.aspx is called during an upgrade process. I checked the IIS web logs and did not see any specific request for Install.aspx at the time when the web.config had its MachineKey setting changed so this seems very strange to me. I can tell that the code in the Install.aspx.vb code behind file ran because a new backup of the web.config was made in the Config\Backup_YYYYMDhhmm folder. How is this possible???

How can this code be triggered to run? I'm worried that there is a way for a hacker to trigger resetting the MachineKey on my portal. I have disabled the AutoUpdate setting in the web.config, but I have no idea if this will help.

Any assistance would be much appreciated

Thanks

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...How can the MachineKey setting in web.config reset itself?How can the MachineKey setting in web.config reset itself?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out