I set AutoUpgrade = false in web.config, and then the site just displays the UnderConstruction.htm page file. So, I try to manually start the upgrade process by entering www.mysite.com/Install/InstallWizard.aspx. 

InstallWizard.aspx encountered a non-end repetion loop of "executing database script", but if you set AutoUpgrade=true then it upgrades smoothly with no problem.

Also, in InstallWizard.aspx it reveals all pieces of configuration information such as qualifier, database-name, etc which is not a good idea in concerning security matters.

---

On the issue of the Install/InstallWizard.aspx I also have a question, though regarding security.

I maintain a range of DNN sites, however on all of them there is access to Install/InstallWizard.aspx once they are live. This is presenting a security hole and I've noticed that other DNN sites don't present this file.

What is the recommended way of dealing with this? I understand that the install.aspx is required for installing modules etc, but not sure why the InstallWizard is required when it modifies the web.config when called.

Cheers

Nolan