Ok, the SOB managed to post his f**ing viagra stuff in the Message field of the FEEDBACK module which, to my knowledge is a CORE module.

Any ideas why he managed to do this? How can I stop the SOB from tampering with my feedback module?

My DNN version, which had, until now, no known vulnerabilities is 07.04.02 (216)

The problem is he is not posting stuff on the website via public Feedback module, he is posting stuff inside the Feedback DATABASE table through the feedback module and mixing it to the valid content stored in the table! That is the real problem.

I can try to make all my Feedback modules not public and hide them behind login/registration IF I HAD NOT already given up public Login/Registration because of the tons of bogus users I got nonwithstanding the use of recaptcha for my logins.

This means I would have to give up communication altogether... might as well give up websites while I'm at it.

If I was sure it would solve my problem I would probably do it, but please consider the fact that the core Feedback module has serious vulnerability issues.

Here I go again, back to restoring my database.

By the way, I hope restoring the website DB more or less every 4 days does not damage my DNN installation more that it already is.