All,

We have  hosted a website that use DotNetNuke 7.1.2.

Someone broke the security of the application and created the new users in the application. When we looked into 'Users'  table of DotNetNuke database then we found that these new users have been created by userid '-1'. As we know that there is no user exist with this userid. also no IP address got traced for those users.

 Apart from this in table 'EventLog' we have checked the log of newly created user and we haven't found 'LogUserName' for these new users.

We have tried by creating a new user from 'Admin' tab and also created a new 'SuperUser' using the superuser credentials and checked the database,  but we didn't found the userid '-1' entry.

 Please update us.

Thanks for response on this.

 We have install  this security module successfully, but we faced below mentioned issue:-

Our application configured at port 443 i.e. https but when we go to Security Analyzer then application redirected to http instead of https. Is there any setting that we missed during installation or we need to do after installation of this security module that run this module over https instead of http?

Please update us.