Archive
Monthly
Go
|
|
DNN Blog
Mar
9
Posted by:
Philip Beadle
Friday, March 09, 2007 12:00 AM
Over the years working on DNN I have seen quite a few posts about people saying their site has been hacked when all thats happened is they have left the default login details set up on their production site. Now we have a warnign system :)
When you login now if the details you are using are either admin/dnnadmin or host/dnnhost you get a warning like this
This occurs only on Login and simply adds a querystring parameter like this
http://localhost/dotnetnuke450/Default.aspx?runningDefault=2
so performance is not impacted at all.
1 comment(s) so far...
Re: DNN-5147: Alert admin/host users to insecure login details
For years and years, I was able to log into Oracle databases using the default installation password for the system account:
"change_in_install"
This is a nice feature to add, but don't expect those complaints to go entirely away! Some people will remain clueless and inattentive. :)
By davidwendelken on
Monday, March 19, 2007 7:44 AM
|
|