Products

Solutions

Resources

Partners

Community

About

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...security analyzer and removing PHP files / folderssecurity analyzer and removing PHP files / folders
Previous
 
Next
New Post
5/28/2018 6:34 AM
 

HI all,
DNN 8.4

The security analyzer found some php files.
I have removed most of these files.
However, I'am hesitating to remove the files mentioned below.
Is there somebody who can tell me if these files/folders are legal?

With regards, Ton

------------------------------------------------------------------------

PHP Folder : \mywebsite.com\wwwroot\Resources\Shared\components\CodeEditor\mode
php.js : \mywebsite.com\wwwroot\Resources\Shared\components\CodeEditor\mode\php
codemirror.mode.php.min.js : \mywebsite.com\wwwroot\Providers\HtmlEditorProviders\CKEditor\plugins\codemirror\js

 


Art is hard work, inspiration is the cream on top of it. See my watercolors at www.watermansite.com and my enamel art at www.watermanshop.com
 
New Post
5/28/2018 10:57 AM
 
Ton,

there are no PHP files in an DNN installation. I guess these files are delivered with the CK Editor to use it in an PHP application, therefore I guess it is not used in any way (as most of the other folders there, "Fortran", "Coffescript", "Pascal", "Python"...). There is no php file in the folder, only js (Javascript) files and html as far as I can see.

But this is only a guess - I never tried to delete them.

Happy DNNing!
Michael


Michael Tobisch
DNN★MVP

dnn-Connect.org - The most vibrant community around the DNN-platform
 
New Post
5/30/2018 5:08 PM
 

Hi Michael,

Thanks for the answer.

Regards, Ton


Art is hard work, inspiration is the cream on top of it. See my watercolors at www.watermansite.com and my enamel art at www.watermanshop.com
 
New Post
6/21/2018 12:10 AM
 
I am not aware of any PHP files installed by DNN (maybe in the providers/htmleditorproviders folder),
For security reasons, i strongly suggest to make sure to disable support for any technology in IIS; you are not supporting in any of your websites.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...security analyzer and removing PHP files / folderssecurity analyzer and removing PHP files / folders


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out