https://github.com/IowaComputerGurus/dnn.secureMyInstall

A utility function, for developer use, to help transition user accounts from Encrypted to Hashed. Great for older DNN Installations
https://github.com/IowaComputerGurus/dnn.secureMyInstall

dnn dnncms dotnetnuke security

Last synced: about 1 month ago
JSON representation

A utility function, for developer use, to help transition user accounts from Encrypted to Hashed. Great for older DNN Installations

• Host: GitHub
• URL: https://github.com/IowaComputerGurus/dnn.secureMyInstall
• Owner: IowaComputerGurus
• License: mit
• Created: 2018-04-10T14:39:30.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2018-04-10T15:00:30.000Z (over 6 years ago)
• Last Synced: 2024-08-04T22:11:13.707Z (5 months ago)
• Topics: dnn, dnncms, dotnetnuke, security
• Language: C#
• Homepage:
• Size: 229 KB
• Stars: 1
• Watchers: 4
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: Readme.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-dnn - DNN Secure My Install

README

        
# DNN Secure My Install

> [!NOTE]

> This project has been archived and should be utilized at your own risk depending on your situation.

**_Use At Own Risk_**

This process is provided to help individuals secure their DNN installation, however, due to the nature of the changes it makes, it could result in adverse behaviors

## Overview

This module is a single-use per DotNetNuke installation utility module that will make a number of security enhancing modifications to your "out of the box" DotNetNuke installation.  The following items are modified by the module in a structured, safe manner.

* Machine Keys are Updated - To ensure any previous breach doesn't allow users to still create encrypted values.

* User Passwords are converted from Encrypted -> Hashed.  This improves the security of the passwords by not allowing them to be retreived.

* Updates the web.config to disable "Password Retrieval" and sets up the system to send the user a random password in the situation where they have forgotten their password.

Using this process you can easily update your installation and all users within the installation following the simple two phase approach that we have completely documented.

## DNN Version Compatibility 

This function works for sites running DNN 4.7.0 - 5.x.  Changes are necessary to support changes in the 6.x - 9.x platforms.

## Documentation

Within the Repository we have an overview document that shows how to utilize this module.