upgradeConnectionString

Return to previous page

  • 4/7/2015
  • 852 Views

Comments

852 Views

upgradeConnectionString

Last updated 6 years ago

Comments

Common

(Enter the content of this article below)

Advanced

 
The upgradeConnectionString is an optional parameter of the SqlDataProvider value. It's used to allow the optional partioning of the database connection used for intall/upgrade's and that used for running the site.

Some setup do not allow sites to run with elevated privileges (e.g. dbo), as if the site suffers from a sql injection attack, this will allow the attacker the ability to create/modify database objects.

If a value is used upgradeConnectionString attribute then a site could choose to use a high privilege account such as dbo for installing/upgrades a DotNetNuke instance, but a lower privilege one (perhaps limited to only execute rights for stored procedures and with no permissions to read or write directly to tables or perfom DDL commands) for site usage.

DNN Digest is our monthly email newsletter. It highlights news and content from around the DNN ecosystem, such as new modules and themes, messages from leadership, blog posts and notable tweets. Keep your finger on the pulse of the ecosystem by subscribing.  


Copyright 2017 by DNN Corp Terms of Use Privacy
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out