Products

Evoq Content Overview Content Creation Workflow Asset Management Mobile Responsive Personalization Content Analytics SEO Integrations Security Website PerformanceEvoq Engage Overview Community Management  Dashboard  Analytics  Member Profile Gamification Advocate Marketing Community Engagement  Ideas  Answers  Discussions  Groups  Wikis  Events Mobile ReadyDNN Support PackagesEvoq: CMS FeaturesEvoq OnDemandCompare DNN's CMS Products

Solutions

Content Management SystemMulti-Channel PublishingDigital MarketingOnline Community ManagementIntranet Software SolutionOur CustomersPrime

Resources

Test DrivesSchedule A DemoDocumentation CenterWebinarsWhite PapersProduct ManualsRequest PricingData SheetsCase StudiesEvoq Preferred Products Content Management Ecommerce Forms Identity Management and Authentication Site Management Social Themes

Partners

DNN Partners Partner Directory Become a DNN Partner Partner Program Overview  Hosting  Implementation  ISV  Training  Competencies

Community

Participate Ask a Question Forums Community Showcase DNN MVP  Program Overview  Lifetime MVPs  Honorary MVPs Subscribe to DNN Digest Advisory Groups  Awareness Advisory Group  Developer Advisory Group  Partner Advisory Group  Technology Advisory GroupLearn Documentation Wiki Community Blog Video Library Project History Development RoadmapDownload DNN Store Language Packs Manuals Nightly BuildsSecurity Policies Security Center

Blog

About

News Press Releases News Coverage Press KitCareersContact DNN

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Insecure - File System vs Secure - File System vs Secure - DatabaseInsecure - File System vs Secure - File System vs Secure - Database
Previous
 
Next
New Post
7/23/2006 3:33 AM
 
John Cornelison


Joined: 7/15/2005
Posts: 429

I must have been asleep but have yet to see an explaination describing the differences between the three file storage modes (that I think are new):

Insecure - File System
Secure - File System
Secure - Database

Can anyone point me to an explaination, or tell me the diff, especially between the first two of these? Thx.

- John
www.VashonSoftware.com
 
New Post
7/23/2006 5:24 AM
 
Benjamin Hermann


www.zoi.de
Joined: 5/3/2003
Posts: 208
VashJuan wrote

Can anyone point me to an explaination, or tell me the diff, especially between the first two of these? Thx.

well, i let me try:

Insecure - File System:
- as known in older dnn versions; fies are stored as they are in a folder of your portal's folder. --> fast and easy. but ... insecure.

Secure - File System
- new; files are stored in a folder of you protals' folder ... but they get the extension “.resources”. dropping the extension when streamed out. this does not require storage outside of web root. --> fast and secure.
by the way: it's the same way like the dmx module works for example

Secure - Database (i'm not sure about that)
- new; files are stored in th db. not that fast ... but really secure.

i hope ... i'm right ;)

itm.net | DNNUG DE
 
New Post
7/23/2006 6:04 AM
 
Stefan Cullmann


Stefan Cullmann's Avatar

Joined: 1/6/2005
Posts: 2867

The new way inside DNNx.3 to access a file is using file tickets created by the linkClick method. The request will be redirected to DotNetNuke which will check the needed permissions first. 

Insecure  - File system:
It is insecure because somebody can guess the file path and download it directly per url, no permission check possible.
 
New Post
7/23/2006 9:36 AM
 
Jack Hoelz

www.repfiles.net
Joined: 6/21/2005
Posts: 608

Does this have something to do with the duplicate "empty" folders created when I upgraded from 4.0.3 to 4.3.3?

When picking a file I can choose between docs/tutorials/ or docs/tutorials// for example.

I would like a better understanding of how this works and why every folder now seems to be duplicated.

And why do I see these folder in the file manager but not in the file structure on the server itself?

Icthus Technologies

Building Faith on the Internet
 
New Post
7/23/2006 10:59 AM
 
John Cornelison


Joined: 7/15/2005
Posts: 429

Is there a simple way to move files from insecure to secure storage? I presume the File Manager works for this, though I am a bit confused by elements of that - probably because I've not used it too much yet.

BTW the secure/insecure thing was announced here:
http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryID/420/Default.aspx
but doesn't explain it at all.

As far as the duplicated folders go, I find the ones with double slashes don't work. I believe they were introduced by running a NON-PRODUCTION version (tsk, tsk on us who did) and are discussed about here:
http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/-1/threadid/49874/scope/posts/Default.aspx
which then provides the fix (I've yet to do this though) here:
http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryID/490/Default.aspx

If I'm right, I think there should be an authoritative 'announcement' of this in a properly titled post (e.g. "All 4.3.0-4.3.2 users MUST apply this fix") to alert folks. Or maybe everyone knows...

- John
www.VashonSoftware.com
 
 Page 1 of 2
12Next 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Insecure - File System vs Secure - File System vs Secure - DatabaseInsecure - File System vs Secure - File System vs Secure - Database


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out