A question has come up regarding the public methods on the DotNetNuke.dll.

If someone were to get control of the webserver on which DNN was running they might be
able to create some code that could reference the DotNetNuke.dll and call the public methods
without being logged in effectively bypassing forms authentication and any validation that
is in code behind e.g. there may be validation done before calling a delete method in the DotNetNuke.dll.

In summary do people think the public methods exposed by the DotNetNuke.dll pose a security threat?

Thanks in advance.

Cathal

Thanks for the reply.

I've sent a pm via your blog site.

Thanks for the update Cathal ... appreciated.