There is a backdoor security problem with DNN. Twice in a three year period, someone has been able to log onto our system and make random changes.

How can I stop this from happening in the future?

Is there a log of who and when people log onto DNN sites?

version 5 or better, not able to confirm right now it.

I'm not a security guy, but I don't recall any major user exploit issues specific to DNN within the past year. That being said. If you haven't run Windows Updates on your server since September you are likely vulnerable to the ASP.NET security vulnerability and that would leave DNN open to being compromised. Another thing to do would be to make sure you aren't using default passwords for the Admin or Host accounts, and review all users on the site to see if anyone has promoted themselves into either the Administrators role or made themselves a SuperUser.

---

Chris Hammond
Former DNN Corp Employee, MVP, Core Team Member, Trustee
Christoc.com Software Solutions DotNetNuke Module Development, Upgrades and consulting.
dnnCHAT.com a chat room for DotNetNuke discussions