By host on Saturday, July 25, 2009 8:02 PM

Back in the spring of 2004, I was introduced to DotNetNuke via an article  by Jim Duffy  in Code Magizine. I got the magazine from the magazine stand in our office building at noon, and by the time I left for the day I had a site up and running (seems that it was a rather quiet day and no one questioned what I was doing).  Well I was hooked and have been working with DotNetNuke ever since.

One of the first things I did was write a module -- took me several weeks of banging my head as I was complete lost in this new world.  I using DotNetNuke as a learning tool to a) learn VB.Net, b) learn ASP.NET, and c) learn about the web. I have spent the better part of my life developing supervisory process control applications for material handling, so the Web stuff was a complete new territory and DotNetNuke was a nice structured working application that I could extended with my own code -- what could be better!  My first module was T-Minus. 

Read More »

By host on Saturday, July 18, 2009 7:42 PM

After a security review of an internal site, a concern was raised that passing parameters to other pages in cleartext where the parameter name was rather reveling was weak from a security point of view.  The pages where the concern was raised all used DotNetNuke’s IFrame module, and in fact the parameters were passed in cleartext.  For example, several of the target Frames required that the user’s username be passed.  The IFrame module would create a URL like www.othersite.com?username=myusername. This meant that a user could potentially revise the URL with a different username and spoof the real username.  I was required to “blur” the parameters being passed so that someone looking for specific parameters would no be able to determine what was being passed. 

Read More »

By host on Wednesday, July 08, 2009 7:48 PM

In recent weeks, I have been working on a sample site for all of the Modules currently available from Tressleworks.  There have been examples on my site, but they had been rather limited.  So I have created a child site off www.tressleworks.ca called www.tressleworks.ca/samples.  Original n'pas?

 

Read More »

By host on Monday, July 06, 2009 3:34 PM

 

Read More »

By host on Monday, July 06, 2009 12:34 PM

It seems that I was thinking too hard when I attempted to understand how "Display on All Pages" might be implemented.  Well I was all wrong and have been living under a misconception for quite some time.  There were clues that my conceptualization was incorrect, but I ignored them because I was right -- and it must be something else ... yes -- pure ignorance.

OK, so how is this feature implemented and what are some of the issues associated with it? 

 

 

Read More »