Hi Lee!

I was going through your tutorial "Portal Considerations - When to use Multiple Portals / Parent / Child or create a new DotNetNuke installation" (under issue 17) and should first thank you for a very relevant and comprehensive tutorial.

Its relevant at least for me right now because i am planning to launch a portal service where i would be hosting multiple DNN portals. I am thinking of creating every new portal as a parent portal under a common DNN installation (to maximize the number of portals installed on my server).

One thing scared me a bit in your tutorial, which says "If one portal is corrupted by a client, all portals may be brought offline."

Now iam finding it difficult to list down the cases/reasons when such a thing can happen (assuming no third party modules are used on any of the portals) and this is where i need your help. Your inputs will certainly help me to plan better.

Raghu.

Hello,

It is likely to be a rare case where a portal is corrupted by a client, but it may happen for instance if you are using a forum module and a visitor to the portal finds a security flaw and posts a message which takes advantage of that security flaw. This could then bring down the portal and all portals on your DotNetNuke installation. If you are allowing clients to upload their own skins to their portals there could potentially be problems if they upload a corrupted skin. (I think in most cases this will be limited to the portal for a corrupted skin, but it may cause performance problems for all portals if a portal is using a corrupted skin)

Thanks,

Thanks Lee! that has wiped off some fog from my glasses

We're not planning to give admin rights to individual portals (and hence no skin upload rights). However there will be forum, blog, documents and media modules in each of them. I understand that i should discuss the security or operational risks involved in using these modules on the respective DNN projects forums, however your comments on any of these risks would be quite valuable for me... lust like all your tutorials.

Thanks again!

STUPID TYPO: that would be .... "...JUST like all your tutorials"

Hello,

A security issue has been found in the core forums module, you can read about it here and a fix here