This is an open forum for any mojoPortal topics that don't fall into the other categories.
Hi, installed 2.3.5.3 version ( last version )... I check security advisor ;
- writable folder prepair and no problem. Thats ok.
- I can't change machine key. I need change coz secure advisor warning message my machine key. I using mojoportal over 3 years. so 3 years ago "Hashed in the db / can not be decypted" password format option I chose.
I can't use this site "http://aspnetresources.com/tools/machineKey' guess they are ban all ip my country. site message 'Access to site deniedMy apologies. Your IP has been previously banned on suspicion of spam activity. If you believe this happened in error, please contact me. '
I try this site http://www.eggheadcafe.com/articles/generatemachinekey/generatemachinekey.aspx. i get new machine key and setting web.config afterchange machine key dont work my site. Again back installed backup and i use old machine key now. So this sit emachinekey long short default mojoportal machine key is big. I dont understand and i need help. I dont understand security advisor document sory.
Best,
Volkan
Hi Volkan,
It will work, hashed passwords are not affected by the machine key change other than all users will be logged out. If you were logged in before you changed the machine key it may now give an error when it tries to decrypt the role cookie. So, you should log out first before changing the machine key, then you should have no trouble logging in again after changing the machine key. However, if you have site members that may also have a bad role cookie after this change, then you may need to use the workaround I posted on monday in the blog:
http://www.mojoportal.com/the-fix-for-the-aspnet-security-bug-is-now-available-on-windows-update.aspx
Hope it helps,
Joe
This page does also work:
http://www.eggheadcafe.com/articles/generatemachinekey/generatemachinekey.aspx
Make sure you get the whole key and not just part of it. It should look the same size as the one in mojoportal.
If you want to use the Microsoft Translator on your site, browse to http://www.microsofttranslator.com/widget/ and generate the code for the widget. Once you have the code, you can put it into an HTML Content instance on your site.
HTH, Joe D.
Hi,
Problem left to... Edited my security settings. machine key is created and use.
Thankyou,