Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeGetting StartedGetting StartedNew to DNN Plat...New to DNN Plat...Newbie to DNN but not to Web Applications/WebsitesNewbie to DNN but not to Web Applications/Websites
Previous
 
Next
New Post
5/31/2018 2:40 PM
 

Hello All,

Just a little background information.. I work for local government in Florida. We were given a premade DNN Site(8.0.4) that we implemented on SVR2012R2 IIS 8.5.

Site is running internally only at this time, since we want to make modifications to the site.

I  upgraded the site to the latest DNN (9.2 ).. All the updates applied (Security Analyzer 8.1.4.12 and DNN SecurityHotFix20171_01.02.00)

Questions I have deal more with security and permissions..

When I login as either one of SuperAdmin Accounts and run the Security Analyzer.

I have a failure at this time:

I have an alert:

I have a Pass that has the following:

It looks like some settings are not saving even as SuperAdmin..

I have "Check" this several times and continuously shows that it needs to be checked.

 

Any help or explanation would be greatly appreciated..

 

Thanks,

Tom

 

 

 

 

 

 

 

 

 

 
New Post
5/31/2018 5:56 PM
 
Might help to clarify the actual questions. I don't see a single question mark in there :D

Regarding the "file system" read/write access to C: drive.

Look at the identify of the account running the application pool in IIS. What user is it? Does that user have read/write access to the C drive?

Chris Hammond
Former DNN Corp Employee, MVP, Core Team Member, Trustee
Christoc.com Software Solutions DotNetNuke Module Development, Upgrades and consulting.
dnnCHAT.com a chat room for DotNetNuke discussions
 
New Post
5/31/2018 6:48 PM
 
Chris,

Thanks for answering ..You are correct about now question marks ...



First one is resolved - change from Rich Text to Text

In regards to location and permissions on the c:\ I am checking into that ..

The one that Passed in regards to CheckUnexpectedExtensions is the one that I am curious about.


SA account should have access to all of those ..do i need to give SA permissions through DNN File manager ?

I am guessing the fourth one is basically checking every time it is access:

"It looks like some settings are not saving even as SuperAdmin..
I have "Check" this several times and continuously shows that it needs to be checked."



 
New Post
5/31/2018 7:42 PM
 
Chris,

Thanks for answering ..yes i forgot the "?" marks..

#1 Resolved - Changed Biography from Rich Text to Text
# 2 Checking on the permissions on the folders (will let you know)
#3 Just wondering why SA account doesnt have access to those folders per security analyzer.
#4 Nevermind ..I guess any time the site is access or files are uploaded that security analyzer will check to see if someone tried to upload a hidden file..possibly?

 
New Post
6/21/2018 12:03 AM
 
AFAIK security analyzer performs an ad hoc check - but also upgrades some DNN code. I am not sure about upload check though.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
Previous
 
Next
HomeHomeGetting StartedGetting StartedNew to DNN Plat...New to DNN Plat...Newbie to DNN but not to Web Applications/WebsitesNewbie to DNN but not to Web Applications/Websites


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out