Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0FTP DeploymentFTP Deployment
Previous
 
Next
New Post
8/19/2006 3:12 PM
 

I searched this but I suspect this may have been covered elsewhere, so I apoligize in advance.

What are the security risks of using the ftp deployment in the Visual Studio 2005 IDE? I want to develop and test on my home pc and then use the file copy to upload to my live production server. Can I just ftp directly to the IIS directory of the live site? I mean I know I can. That is what I do on the closed network at work. But what are the security risks of doing this on the wide blue www? Is my password and username interceptable since it is sent as clear text? Wouldn't that give sniffers the ability to hijack my whole site?

 
New Post
8/19/2006 9:16 PM
 

yes, by default ftp username/passwords are sent in clear text, you can use secure-ftp instead if you like to stop anyone eavesdropping on you (http://en.wikipedia.org/wiki/File_Transfer_Protocol), but as typically the only people with sufficent access would be people on your own network (e.g. if you were on an office intranet), or your ISP, then realistically it's not much of a risk

Cathal


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
8/31/2006 3:52 PM
 

I think I am not getting something. Please forgive my technotardation.

I am using it on the internet. Who... how is access limited to certain people if I am connecting to a server in Germany? You said 'as typically the only people with sufficient access would be people on your own network, or ISP". But I am sending my access credentials in clear text. I think I am concerned that they could gain 'sufficient access' by using a packet sniffer or something.

Is that how they do it? I send my log in credentials in clear text. They sniff all traffic and look for ftp login packets, identify the IP that I am loggin into. They basically use the masive processing and search power of modern computers to 'capture' my login info and then login pretending to be me. Something like that? I don't actually know what I'm talking about or all the mechanations of this process, but I understand it is something to avoid, no?

I will read the secure FTP info and try to set that up. I sincerely thank you, cathal, for the info and help.

 
Previous
 
Next
HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0FTP DeploymentFTP Deployment


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out