Since 3 year we have DNN community 7.0.6 installed. It works great and we dont plan to upgrade before maybe another year.

But since 2 week, something strange happend automatically. At two occurence some config revert to defauttl. In "host Setting", the checkbox "check for upgrades" get checked. In "advanced settings" the "Use friendly urls" get checked. In "Other settings" the Control Panel get setted to "CONTROLBAR". Those settings cause trouble to our site and I need to change them back.

What happens ? Only me have access to those settings. Can those DNN settings get change remotely by the dnn community ?

Your right, the hacker edited this file "\Install\DotNetNuke.install.config" and he created a super user and was able to add file in portals. I remove the edit permissions for user "IIS_IUSRS" and I also delete the folder "Install".

I will put back the install folder when I am ready to upgrade to 7.4.2. Theres is to much compatibility issue with version 8 and all my desktopmodules.

thanks

You won't need to put back the install folder.

When you unzip the next upgrade that will create a fresh install folder.

---

Best wishes,
- Richard
Agile Development Consultant, Practitioner, and Trainer
www.dynamisys.co.uk