Needless to say, I"m not a big fan of april fools :->

Josh Martin

Chris:

Don't know if you are aware of this but, your site is on a shared server with at least 256 other sites.  See the following link and look for the string "Reverse IP".

http://whois.domaintools.com/tiftmerritt.net

By the way, I said "at least" because 256 is the number of sites using the same TCP/IP address on that server and the server can have more addresses defined on it.

Anyway, I'm 99.99% that the hack was not via DNN, instead, an IIS misconfiguration.  With that many sites on the server they probably have several admins putting their hands on the configuration and not doing it right.  Don't let them tell you otherwise, if there would be a security hole in DNN many others would be complaining, which by the way it is not happening.  Ask them if the FrontPage Server Extensions are running on the server and if so, ask them to remove them.

Carlos

Carlos,

Thank you for the information. I also doubt that it was DNN. I knew it was on a shared server, but am not sure what I can do at this point. What I have done is changed all the passwords (FTP, Database, etc.). If it happens again,  I am going to talk with my hosting provider about the FrontPage extensions, as well as the IIS configuration. Actually if it happens again, I will probably be forced to switch hosting providers.