Hi!

Strange rows have appeared in our DNN database in the PortalAlias table. No one  from our team has created them and the aliases point to some unknown URLs (e.g. www.pizzadelivery.com) . Is there a known security issue in the version 7.1.2.356 related to this and is there a fix in the latest version?

 How is it possible that new rows can be created into the PortalAlias table without host-account or accessing the database table?

 Thanks.

just re-read the issue and realised it's a configuration item and not a security problem.

The additional aliases are being added as your site is set up to automatically add them if a request makes it to your server - this "auto add site alias" is a function that was added to help when users moved from development/test production i.e. the new production url would be added automatically.

You can stop this by unchecked “Auto Add Site Alias” under admin->site settings->advanced settings->site aliases.

Note: the additional logged url’s are harmless as unless those domains exist as mapped host headers in IIS then routing will not occur. As to the reason this exists, http://www.dnnsoftware.com/community-... covers this.