Entries for 2010

December 31, 2010

Keeping User Passwords Secure in DotNetNuke

This article is being cross-posted from my business blog.

If you have been paying attention to the news in recent months you have most likely heard of a few cases where user information, such as Usernames and Passwords, have been exposed from some high visibility websites. Some of the more current leaks were with Gawker and Mozilla. For those that are unfamiliar the situation is pretty simple. These sites store user login information, usernames and passwords, that allow users access to their systems. Their systems were then breached and malicious users were able to get access to the information. Why is this something that I am blogging about in relation to DotNetNuke? Well without a bit of configuration your site could be at risk, should a malicious user get access to your system. This article will discuss a bit around how/why there is a risk and how that relates to DotNetNuke, then it will progress into an overview of the default configuration of DotNetNuke and the recommended changes to the system.

November 15, 2010

DotNetNuke Connections 2010 - My Highlights

I know that this is a little late with DevConnections being a little over a week-and-a-half ago, but I thought that it was still important that I get my highlights out here on the blog as i think there are number of incredibly good things coming in the future for DotNetNuke.  For a more detailed review I highly recommend that you check out Will Strohl's blog post, as he goes into a bit deeper discussion than I do.

October 12, 2010

Upcoming Posts: Share Your Opinion

As I have blogged about in the past I have a big queue of potential blog postings that I have been looking at writing.  Although I haven't had many recent updates I am looking to improve on this and get more content out here.

Before I just start firing off new posts from my almost 1.5 year old listing of potential topics I wanted to gather some community input in regards to the topics that are published on this blog and to accept recommendations on what should be next.

I would greatly appreciate it if you can fill out this short 5 question survey. Feel free to share this link with others as well

September 30, 2010

Day of DotNetNuke An Apology

It is with deep regret that I have to announce that I will not be able to attend/present at the Day of DotNetNuke event this weekend in Chicago.  For those of you that follow me on Twitter, you may have noticed tweets from me over the past 2 weeks talking about this horrible cold that I have.  Well, at this point I am still not recovered, with only 40-50% of my voice available and day-to-day still not feeling all that well I had to make a very hard decision.

In the end, I need to continue to take things slow and relax so that I can kick this cold and be able to resume my regular schedule.  I understand that this will be a disappointment to the individuals that were looking forward to my presentations as well as the individuals that I was working to arrange meetings with.  I am also deeply sorry for the stress that my cancellation puts on the organizers of the Day of DotNetNuke event.

Over the course of the next 3-5 days I will be taking all materials from my sessions and making them available here so that at minimum you will still have the ability to get the content that was to be presented.  I will post my PowePoint slide decks with notes that would have been my talking points.

For those of you attending DevConnections I am looking forward to that event coming up in just  a little over a month, and I WILL be there for that event.  Otherwise to everyone else again I do apologize that I will be unable to attend and hope that you truly enjoy the Day of DotNetNuke event, I know it will be a great success!

September 27, 2010

DotNetNuke 5.5.1 Update and POET Security Vulnerability

For just a little over a week there has been a lot of buzz in the .NET and DotNetNuke community around the POET security vulnerability that was identified within the Microsoft ASP.NET technology stack.  For those of you unaware of the true details on this vulnerability I highly recommend you read the initial announcement from Scott Guthrie from Microsoft, as well as his Frequently Asked Questions post, and lastly his secondary followup posting, with a more detailed workaround.  So why do I bring this up now?  Well late last week DotNetNuke corporation released DotNetNuke 5.5.1 and in the materials that went out with that release they note that it includes a workaround fix for this vulnerability, I wanted to make sure that as always people have ALL information needed before they are doing upgrades.


August 24, 2010

DotNetNuke 5.5.x and Later Performance

Now that the DotNetNuke version 5.5.0 release has been out in the wild for a bit I wanted to take a moment to talk a bit about this release and one particular item that is of special interest to me with regards to the performance of the release.  In the past a common question posed to me would be "Which version of DNN runs the fastest?" The answer has always been an easy one, DNN 4.9.5 has been the release that could handle the heaviest load with the best overall relative performance.  I believe we have finally hit a tipping point.

July 27, 2010

Running DotNetNuke with .NET 4.0

As more and more people start working with DotNetNuke, IIS7, and .NET 4.0 it is important to note a few important potential problem areas when it comes to running DotNetNuke on the 4.0 framework.  Recently I took a DNN 5.4.4 installation and tried running it under .NET 4.0 and without modifications, it was a complete failure, in this blog posting I will show you what needs to change to allow DotNetNuke to work as expected.

July 26, 2010

Selecting a DotNetNuke Hosting Provider 2010 Edition

In past blog postings I have provided what has become a bit of a "Guide to Selecting a DotNetNuke Hosting Provider." As with previous years it is about that time where there have been enough changes in the market and to DotNetNuke in general that I thought it was necessary for a 2010-2011 version of this information. In this article I will talk though the thought process that I use when working with current and potential customers to select their hosting plan, environment and provider. This document has been updated based on current information, in addition, prior to going through the recommendations below I strongly recommend reading my article “Shared, Virtual Private Server, Dedicated of Cloud Hosting” to become familiar with the different levels of hosting and also to review my "DotNetNuke Performance Configuration Best Practices" document to ensure that your DNN hosting plan is up to date.

July 13, 2010

Want a Free MSDN Ultimate Subscription?

Like other Microsoft MVPs I have been given a few MSDN Ultimate licenses that I can give away to individuals that I feel are deserving of it.  I have been arguing with myself for a while now about how to best determine who should receive the license, and have came up with a contest to give one license away to a reader of this blog. 

July 07, 2010

Reducing a DNN Site's Production Footprint

One of the most common questions that I get from users when it comes to deploying to deploying a DotNetNuke site is "DO I REALLY need all of those files?". My typical answer is something along the lines of yes and no. In this blog posting I want to talk in a bit more detail about some of the processes that I go through when installing a clean DotNetNuke installation and how I keep the footprint down on the disk space.

June 22, 2010

DotNetNuke Growing Pains and You, How to Cope

I have had this blog posting all ready to go now for a good three to four weeks, but have been in deep internal conversation in regards to the posting of the article.  I have decided that more than anything posting this publicly might stop some of the e-mails that I get bombarded with each and every day that start out with "what do I do" or "do you still believe in DNN".

Before I start the post I am NOT in any way, shape, or form pointing fingers or expressing any displeasure at the platform or any of the members involved.  I am still a DotNetNuke core team member, I believe fully in the platform, and I will continue to adopt and recommend usage of the platform for the foreseeable future.  The point of this post is very simple, to talk about what has been going on in the DotNetNuke community and my opinions on how to manage expectations and cope with the situation.  Please remember the disclaimer that is posted at the bottom of this blog, these thoughts are mine and mine alone.

April 26, 2010

Creating a Custom Registration Page With DotNetNuke 5.2.3 and Later

Users that are familiar with DotNetNuke administration are most likely familiar with the old way of creating a custom registration page within a DotNetNuke portal.  It was as simple as adding a new page, putting the modules you desired on the page including the "User Account" module to get the actual registration functionality.  From there a simple change in "Site Settings" for the "User Page" and you are set to go!  Well, for those of you working with DNN 5.2.3 and later (Possibly previous 5.x versions as well, I'm not 100% sure when the change was) will find out that the module definition I mention is no longer listed?  What do you do now?

March 27, 2010

OpenForce 2010 Session Submissions

For those of you that follow me on Twitter, you might have noticed my posting the other day noting that I have submitted my session topics for OpenForce 2010. I thought I'd share with you the topics that I submitted, if you have any ideas for other sessions feel free to post a comment, and I might try to get something proposed for it.

March 26, 2010

First Chance Exception Event .NET 4.0

I have been spending quite a bit of time recently working with Visual Studio 2010 and .NET 4.0, working to keep up to date with the rapid additions to the .NET framework.  In this blog posting I'll share one fun new addition to the .NET framework that can be very helpful when creating applications and looking for a method to log all exceptions for logging purposes.  Starting with .NET 4.0 there is a new event available from the AppDomain object "FirstChanceException".  The following explains a bit about this new feature and how it could be helpful.

March 23, 2010

The DotNetNuke Object Qualifier - Why I Think it is Evil

For those of you that have seen my comments on the DotNetNuke forums, my book, or the forum here on this site, you more than likely have noted my consistent notes that I recommend avoiding the "ObjectQualifier" setting within DotNetNuke at all costs.  Most of the time I have simply put, I don't use it and recommend that you don't either, but have not given a very detailed explanation as to why I'm not a fan.  Below I will share with you what the ObjectQualifer is, why it was created, and why I don't recommend using it.

March 23, 2010

Selecting the Right .NET Language the VB or C# Debate

Now first of all, before I get into the true content of this blog posting I do NOT want to start another round of the religious war that always seems to happen when you start talking about the usage of Visual Basic or C#.  The purpose of this blog posting is to put a little perspective into why I choose to work with a specific language for different projects, and the evaluation criteria that I use when making the choice for individual projects.  Yes, I'm a C# MVP, C# is my preferred .NET language, but I'll be the first to admit that there are times and places where VB is a necessary language.  In this article, I'll start out by providing a bit of background as to WHY I'm blogging about this, the evaluation criteria that I use when looking at a project and some other general information that I've found over the years.  Keep in mind the disclaimer found at the bottom of this posting, these are my thoughts, and mine alone, if you don't like them, which I'm sure many of you will not that is fine, but I wanted to put a bit of perspective on my take for the common argument.

February 18, 2010

Future Blogging on MitchelSellers.com

Over the next few weeks you will see a much larger effort for me to get back to this blog and getting new content out. In addition, I have made a few category additions and changes with hopes of expanding the content of this blog a bit more. There will still be plenty of DotNetNuke related content, but I am going to try and get more content in the C# and Visual Studio areas, trying to share some tips and tricks that I use on a daily basis to help speed the development process. The following is a quick list of topics that I am working on, and will be getting posted soon, these are NOT listed in any order, so they could appear in random intervals. If you have other suggestions, please post them to the comments.

February 09, 2010

DNN 5.2.x Changes to Module Create Process

In a few of the most recent versions of DotNetNuke, major changes have been completed in the way that a user manually imports a module definition to test a manifest file.  This is specifically the process that is mentioned in my book to test a module while developing, before it has been packaged for installation on another portal.  From what I gather, the behavior might change back a bit, but for now the process is slightly different that indicated in my book.  In this blog posting I'll document the changes, and a workaround solution.

January 02, 2010

Expedia Twice Burned Not Going for Number Three

OK, so normally I try to keep the number of personal, non-tech, blog postings to a minimum on this site, since most of my readers are here for the technical content.  Well, this time I am going to make an exception.  For those of you that follow me on


you may have already heard bits-and-pieces of my travel fiasco from last night -> this morning.  Well for the benefit of others, I thought I would share some details on my two major Expedia failures this year.

Content provided in this blog is provided "AS-IS" and the information should be used at your own discretion.  The thoughts and opinions expressed are the personal thoughts of Mitchel Sellers and do not reflect the opinions of his employer.

Content Copyright

Content in this blog is copyright protected.  Re-publishing on other websites is allowed as long as proper credit and backlink to the article is provided.  Any other re-publishing or distribution of this content is prohibited without written permission from Mitchel Sellers.