Hi,

We are looking in to migrate our current cms to DNN. My concern is security and how I can protect the login. 

The plan is to use a staging environment where all the changes to the site will be done and from there it will be replicated to the production site. So there is no need to allow any logins from the production environment so is it possible to remove or IP protect the /login.aspx? Even though we remove that from our skin the link is still there.

Hi and thanks for reply.

What part of that would be risky? Using some sql tool to compare and upgrade db and then move files from staging to production on a write protected storage seems to me it should work. Not a expert so that's why I'm asking.

Locate the modify the login.ascx files to effectively result in a blank login page (with a message as needed). You could even have a text field with a "password" that will allow the login form to display if the correct password is entered.

Of course, if you upgrade your copy of DNN, you'll probably have to redo any of these changes.