Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Upgrading DNN P...Upgrading DNN P...06.02.01 to 06.02.02 breaks my login06.02.01 to 06.02.02 breaks my login
Previous
 
Next
New Post
8/8/2012 5:58 AM
 
current status: i'm double checking everything including my capabilities to upload the correct versions....
 
New Post
8/8/2012 5:49 PM
 
Waiting about your results. 
 
New Post
8/9/2012 8:09 AM
 

Still a problem.

first i started with a clean pc, downloaded the package 6.02.02 install and unpacked it.
at the ISP:
deleted the old and created a empty 2008 database
deleted all previous data and created an empty root folder

uploaded the install package, started the install process,
fllled in the credentials to install and it installed up to 6.02.02
the webpage shows and ...the error is still there.

i currently have no clue except for this hint:
I found this article and asked my hosting provider if they use ISA or another 'something' that does "Verify Normalisation"

http://blogs.msdn.com/b/jay_akhawri/a...

where the problem can be found in  "Verify normalization"

Select Verify normalization blocks requests with URLs containing escaped characters after normalization.

Note: Web servers receive requests that are URL encoded. This means that certain characters may be replaced with a percent sign (%) followed by a particular number. For example, %20 corresponds to a space, so a request for http://myserver/My%20Dir/My%20File.htm is the same as a request for http://myserver/My Dir/My File.htm. Normalization is the process of decoding URL-encoded requests.

Because the % can be URL encoded, an attacker can submit a carefully crafted request to a server that is basically double-encoded. If this occurs, Internet Information Services (IIS) may accept a request that it would otherwise reject as not valid.

When you select Verify Normalization, the HTTP filter normalizes the URL two times. If the URL after the first normalization is different from the URL after the second normalization, the filter rejects the request. This prevents attacks that rely on double-encoded requests.

Note that while we recommend that you use the Verify Normalization function, it may also block legitimate requests that contain a %.

*Source: http://www.microsoft.com/technet/isa/....

 
New Post
8/9/2012 8:19 PM
 
So it looks this issue happens with ISA/TMG/Firewall/Proxy Servers only.  I will try to discus this with the Developers.
 
New Post
8/10/2012 1:41 AM
 

Hi Matthias,

i have asked my provider to check out things. they offer dnn as a product in their portals and the response was that they think it is something in dnn. So thank you for the help so far. If my isp finds something else i will post it right away.

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Upgrading DNN P...Upgrading DNN P...06.02.01 to 06.02.02 breaks my login06.02.01 to 06.02.02 breaks my login


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out