Unwanted behavior when accessing “Site Setting”

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

Home All Forums

Home

Our Community

General Discuss...

Unwanted behavior when accessing “Site Setting”

1/21/2009 7:42 AM

Niels

Joined: 6/30/2006

Posts: 19

Unwanted behavior when accessing “Site Setting”

I want to run at “clean” DNN portal installation and be in complete control to what users are exposed to.

I expect that only “My portal” alone are the provider for the HTML, site reference, cookies etc that the users are exposed to.

That the framework imbeds external references is a security risk, especially when it done without open clear information about this or a functionality to disable this unwanted code. I want to comply with my privacy statement.

So why is it that a request to pagead2.googlesyndication.com/pagead/show_ads.sj is made whenever site setting is accessed?

Where is the agreement with the portal owner that states its ok to provide Google with information even if it is an “innocent” request?

- How to remove this invasive code for good?

- How many other places is there this kind of request to third party companies implemented? ( google-analytics.com/urchin.js )

- Does the portal (Core) itself request or send information based on user interaction (tracking)?

Regards Niels

1/21/2009 1:51 PM

Chris Hammond

www.christoc.com
Joined: 1/14/2003

Posts: 7319

Re: Unwanted behavior when accessing “Site Setting”

Looks like my first post failed (maybe) so here I go again.

Do you have any custom modules installed? Are you using a custom skin?

I just checked and in a clean DNN install I have running (484 I think) there is no google code being injected on my pages.

Chris Hammond
Former DNN Corp Employee, MVP, Core Team Member, Trustee
Christoc.com Software Solutions DotNetNuke Module Development, Upgrades and consulting.
dnnCHAT.com a chat room for DotNetNuke discussions

1/21/2009 2:31 PM

Niels

Joined: 6/30/2006

Posts: 19

Re: Unwanted behavior when accessing “Site Setting”

Clean Windows Server 2003 installation from scratch.
It is at clean 4.9.1 installation, just downloaded (dotnetnuke_04.09.01_install.zip)
All standard modules are installed execpt AdSense.
No custom modules.
Default skin.
- As clean as it gets !

Login with the "superuser account", choose "Admin->Site setting".
Try checking the security report in IE, if the Internet Explorer Enhanced Security Configuration doesnt warn you.

/Niels

1/25/2009 4:50 PM

Niels

Joined: 6/30/2006

Posts: 19

Re: Unwanted behavior when accessing “Site Setting”

It took some time, but this unwanted Google-script injection is the result of a value in SiteSettings.ascx.resx

<data name="Advertising.Text" xml:space="preserve">

<value><script type="text/javascript"><!--

google_ad_client = "pub-9770992166002654";

google_ad_output = "textlink";

google_ad_format = "ref_text";

google_cpa_choice = "CAAQ3KfzygIaCNJbQ5r5YiDXKKjntoQBMAA";

google_ad_channel = "";

//--></script>

<script type="text/javascript"

src="http://pagead2.googlesyndication.com/pagead/show_ads.js">

</script></value>

</data>

By removing the above code and replacing it with something useless like

<data name="Advertising.Text" xml:space="preserve">

<value>Don’t waste your life on advertising!</value>

</data>

the problem are gone (until next upgrade).

1/25/2009 5:11 PM

Alex Shirley

Joined: 1/30/2006

Posts: 5038

Re: Unwanted behavior when accessing “Site Setting”

Niels wrote

(until next upgrade).

The way to avoid that is to log the issue at support.dotnetnuke.com :).

Page 1 of 2

Home

Our Community

General Discuss...

Unwanted behavior when accessing “Site Setting”

These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
No Flaming or Trolling.
No Profanity, Racism, or Prejudice.
Site Moderators have the final word on approving / removing a thread or post or comment.
English language posting only, please.

Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

DNN Corp. (DotNetNuke)