Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

PortalWebHosting
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
WebHostForAsp.net
 


  Sponsors  

Meet Our Sponsors

MaximumASP
SourceGear - Tools for Developers
.: CounterSoft :.
telerik
ExactTarget email software solutions
Merak Mail Server
 


DotNetNuke Forums
 
  Forum  General DotNetN...  Chat About It!  DNN and SQL injection viruses
Previous Previous
 
Next Next
New Post 7/4/2008 4:30 AM
User is offline Nolan Smith
14 posts
10th Ranked


DNN and SQL injection viruses 

Hi,

I am working on replacing my existing CMS do to it being subseptible to SQL injection viruses. Is DNN safe from these?

Thanks,

Nolan

 
New Post 7/4/2008 4:45 AM
User is offline ErikVB
2714 posts
www.apollo-software.nl
5th Ranked










Re: DNN and SQL injection viruses 

The core application and all core modules are quite safe from sql injection, as we use data abstraction everywhere. Usually, sql injection is caused by building dynamic sql in code... that is not done in anywhere in DNN. Please check our security policy for more information about DNN and Security: http://security.dotnetnuke.com

 


Erik van Ballegoij, Apollo Software
If what i am saying is wrong: blame Google
MLSkinHelper: the easy way to put editable text in your skin!
Nederlandse DotNetNuke Gebruikersgroep Apollo Software
 
New Post 7/4/2008 4:53 AM
User is offline Joe Brinkman
1244 posts
www.dotnetnukecorp.com
6th Ranked






Re: DNN and SQL injection viruses 

In addition to avoiding the use of dynamic SQL we have an active security team that is constantly reviewing the codebase and working with the community to ensure that the platform is as secure as possible.  All of our core modules also recieve this same level of security review as part of our release process


Joe Brinkman
DotNetNuke Corp.

The Accidental Geek - Joe Brinkman

 
Previous Previous
 
Next Next
  Forum  General DotNetN...  Chat About It!  DNN and SQL injection viruses
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

 


ADefWebserver.com
DotNetNuke® Module Development Help Website
ADefWebserver.com
Get Smarter Mail, SmarterStats, SmarterTickets
Windows mail server, web log analytics, and customer service management software - Free Editions Available!
www.smartertools.com
DotNetNuke Modules, Skins, Training and Consulting
If you want DotNetNuke done right then look no further. Developed Solutions provides module development, skin design, user and developer training and consulting. Based in Adelaide, Australia, we offer our services worldwide.
www.developedsolutions.com.au

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP