Hi there, I have a website that has suddenly stopped functioning correctly, it is a DNN6 site. Parts of the ribbon bar is showing at the top of the page regardless of login status, followed by an error message that just says: An error has occurred. An error has occurred. This happens even with the default skin loaded. Site has been running fine for 3 years or so...

I can't log into the site, when I click the login button it just refreshes. I can't see any Javascript errors in Chrome's console.

I managed to get this from the database:

<LogProperties>

  <LogProperty>

    <PropertyName>ModuleId</PropertyName>

    <PropertyValue>-1</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>ModuleDefId</PropertyName>

    <PropertyValue>-1</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>FriendlyName</PropertyName>

    <PropertyValue />

  </LogProperty>

  <LogProperty>

    <PropertyName>ModuleControlSource</PropertyName>

    <PropertyValue />

  </LogProperty>

  <LogProperty>

    <PropertyName>AssemblyVersion</PropertyName>

    <PropertyValue>6.0.2</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>PortalID</PropertyName>

    <PropertyValue>0</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>PortalName</PropertyName>

    <PropertyValue>XXXXXXXXXXXXXXX</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>UserID</PropertyName>

    <PropertyValue>-1</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>UserName</PropertyName>

    <PropertyValue />

  </LogProperty>

  <LogProperty>

    <PropertyName>ActiveTabID</PropertyName>

    <PropertyValue>87</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>ActiveTabName</PropertyName>

    <PropertyValue>Education</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>RawURL</PropertyName>

    <PropertyValue>/WhatWeDo/Education.aspx</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>AbsoluteURL</PropertyName>

    <PropertyValue>/Default.aspx</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>AbsoluteURLReferrer</PropertyName>

    <PropertyValue>http://www.xXXXXXXXxxXXX.gen.nz/WhatWeDo/Education.aspx</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>UserAgent</PropertyName>

    <PropertyValue>Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>DefaultDataProvider</PropertyName>

    <PropertyValue>DotNetNuke.Data.SqlDataProvider, DotNetNuke.SqlDataProvider</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>ExceptionGUID</PropertyName>

    <PropertyValue>fae6b769-5777-462b-adca-a400d6e60684</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>InnerException</PropertyName>

    <PropertyValue>Object reference not set to an instance of an object.</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>FileName</PropertyName>

    <PropertyValue />

  </LogProperty>

  <LogProperty>

    <PropertyName>FileLineNumber</PropertyName>

    <PropertyValue>0</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>FileColumnNumber</PropertyName>

    <PropertyValue>0</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>Method</PropertyName>

    <PropertyValue>DotNetNuke.UI.ControlPanels.RibbonBar.OnLoad</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>StackTrace</PropertyName>

    <PropertyValue />

  </LogProperty>

  <LogProperty>

    <PropertyName>Message</PropertyName>

    <PropertyValue>DotNetNuke.Services.Exceptions.ModuleLoadException: Object reference not set to an instance of an object. ---&gt; System.NullReferenceException: Object reference not set to an instance of an object.

      at DotNetNuke.UI.ControlPanels.RibbonBar.OnLoad(EventArgs e)

      --- End of inner exception stack trace ---</PropertyValue>

  </LogProperty>

  <LogProperty>

    <PropertyName>Source</PropertyName>

    <PropertyValue />

  </LogProperty>

 

</LogProperties>

Any help would be greatly accepted.

 

aspnet_applications is a part of the Microsoft memberrole implementation and the basis of DNN's user and role management - if it no longer exists I would expect nothing to work. As DNN does not delete tables, I would hazard a guess that a 3rd party did (perhaps an accident such as a user running a database query against the wrong database, perhaps malicious such as SQL injection). As it effects 2 sites (presumably with 2 databases), I would worry that it's sql injection. Short of connecting to your server(s), there's not much advice I can give here except to ensure your webserver and database server is fully patched, ensure no-one is using unsafe configuration (such as an sa account with no password on the database server), and consider upgrading DNN to a more recent version to protect against security issues (I'm hoping you have database backups)

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US

Both websites were on early DNN v6 and both had been hit with SQL injection.

Upgraded 6.1.3 > 6.2.9 > 7.3.1 perfectly. Awesome!!