Need
DNN Support
?
DeskPal.com
Learn DNN / DotNetNuke
Login
Subscribe to DNNCreative
Home
Subscribe
Training & Tutorials
Tutorials for Beginners
Tutorials for Administrators
Tutorials for Core Modules
Tutorials for Advanced Users
How to Build a Website in DotNetNuke
Skinning Tutorials
Module Development
Third Party Modules
Forum
Search
Search
Home
Subscribe
+
Training & Tutorials
Tutorials for Beginners
Tutorials for Administrators
Tutorials for Core Modules
Tutorials for Advanced Users
How to Build a Website in DotNetNuke
Skinning Tutorials
Module Development
Third Party Modules
Forum
You need to
Register
for free and
Login
to post a message in the forum.
Forum
Forums
Search Forum
Search
Advanced Search
Topics
Posts
Unanswered
Active Topics
Forums
>
DotNetNuke®
>
DotNetNuke® Questions
Secure web.config in 5.1
Last Post 10/14/2009 6:29 PM by
Joseph Craig
. 3 Replies.
Sort:
Oldest First
Most Recent First
Check this box to subscribe to this topic.
Prev
Next
You are not authorized to post a reply.
Author
Messages
Chip
Nuke Active Member
Posts:29
10/13/2009 1:59 AM
Hello,
I am developing a site under 5.14.
While making minor modifications to the web.config, I was very surprised to see in plain text a connection stream that lists the username and password for the admin log in. I would think this would be a huge security risk.
Is there an easy way for a non-programmer to encrypt the connection strings?
I found two modules, but neither has been tested on 5.1. The two modules are:
Shancer Encrypt Web.config 1.0
Encrypt Connection Strings by Darrell Hardy
Thank you!
Joseph Craig
DNN MVP
Posts:11667
10/13/2009 11:31 AM
I heard Darrell speak on this issue a couple of years ago. If you write to him, he may be willing to share his Powerpoint file with you, or give you additional information. Darrell's module may the the best approach, but it's not clear that it's compatible with version 5.x. I'd ask.
The encryption part is a standard part of ASP.NET, so I'm sure that there is additional information available on the MS website, but probably not in a way that is accessible to a non-programmer.
On the other hand, I've never see this discussed as a major security hole, as most sites don't grant access to the root directory. You could ask about this by writing to the security team at DotNetNuke.
Joe Craig,
Patapsco Research Group
Complete DNN Support
Chip
Nuke Active Member
Posts:29
10/14/2009 6:12 PM
Thank you Joseph,
Darrell has been amazing. I sent him an email and had a reply within 12 hours. He even went so far as to validate his code on 5.1.4 and send it to me along with instructions. Several people have echoed your comments that this is not a security hole. I will double check with my ISP that access to the root directory is blocked. This topic is a bit over my head and I have a few reservations about what it may do to some 3rd party modules. I was just so surprised to see my login info visible in plain text. For now I will probably leave this alone.
Joseph Craig
DNN MVP
Posts:11667
10/14/2009 6:29 PM
Great!
Joe Craig,
Patapsco Research Group
Complete DNN Support
You are not authorized to post a reply.
Special Bonuses
--Subscriber Bonuses
--Readers Offers
Users Lounge
--Announcements
--DNN Creative Articles
--Everything Else
--Feedback, Suggestions and More
--Membership
--Site Review Please!
--Testimonials
--Podcasts
DotNetNuke®
--DotNetNuke® Questions
--Modules
--Modules - What's needed?
--Quick Tips
Hosting
--DotNetNuke® Hosting Providers
Skinning Toolkit
--Skinning Toolkit
UK DotNetNuke User Group
Forums
>
DotNetNuke®
>
DotNetNuke® Questions
Latest Forum Posts
Can you Run Xcode in Linux?
by Aman Singh
Can you Run Xcode in Linux?
Can you Run Xcode in Linux?
by Aman Singh
Can you Run Xcode in Linux?
Billed for subscription that was canceled
by Ryan
I was just billed for a subscription that was canc eled / inactivetive how do I get a refund for th
Meta Title and Meta Description are not showing properly
by DNN User
Hi, On my site the meta title and meta descriptions are not showing properly. It's showing the m
Search is not functioning properly
by DNN User
Site: https://www.prv-engineering.co.uk/search If I search any item only the 1st option under sea
Search is not functioning properly
by DNN User
Site: https://www.prv-engineering.co.uk/search If I search any item only the 1st option under sea
DNN Platform import site optio
by Melanie Weaver
Is it possible to import site template in DNN Platform 8.0? We have internal Evoq Content 8.1 tha
Events Module for DNN V5?
by Tugboat
Would anyone have a download link for the version 5.0.3 Events Module? Thanks!
"Ghost" TabID Number?
by Tugboat
Hi! I have a portal instance with multiple child portals and on one of the child portals, there i
RE: DNN Load Testing
by ayman sharkawy
Hi. Have you already implemented a site using the DNN . And how the performance of the site and its
Publish All Pages
by NSUOK
I'm using DNN Evoq Content Basic 8.2.0. When I make the HTML Pro module display on all pages, I h
Simpler profile needed in 9.2.2
by Donald
We are upgrading a DNN 4.8.4 site to DNN 9.2.2. On 4.8.4, the top bar shows the user’s name. If yo
How to link from dnnmodal popup to web site page?
by Donald
Hello all. I am using a dnnmodal.show popup. The popup works correctly, showing the content that I
RE: Document Collaboration
by Nick Davern
That feature would be super beneficial for our needs as well! Does anyone have an update as to if th
RE: DNN 9.2, how to set default theme?
by Andy Stephenson DNN Creative
you do that under "Manage/Themes". Note the highlight blue border around the default container and d
DNN 9.2, how to set default theme?
by Donald
Please disregard, found Manage Themes I cannot find how to set a default portal theme in DNN 9.2
RE: Looking for DataSprings Dynamic Forms
by Andy Stephenson DNN Creative
Your best chance would be to contact Chad Nash @ http://www.datasprings.com/
Looking for DataSprings Dynamic Forms
by Jakir HM
Looking for DataSprings Dynamic Forms 3.4 for DNN 4.x 5.x for my site (https://themasters2018s.com/)
RE: Help with Cycle Image Carousel not displaying images
by peter
I had the same problem with the Will Strohl Content Slider after upgrading to DNN 9.1 The above an
RE: Object reference not set to an instance of an object
by Andy Stephenson DNN Creative
Check this one might be useful: http://www.dnnsoftware.com/answers/im-tryin-to-move-my-site-to-pr
Used
By
Testimonials