After upgrade the DnnBlog Module to Version 06.00.00 it could be possible that unauthenticated users have access to the 'Mange' and 'Edit Blog' Buttons, and can edit your Blog Posts. This security issue caused on an error upgrading the Database to Version 06.00.00. We have localized the issue and it would be fixed with the next release.
As it is a security issue we also have a Workaround for you:
- Login with host permissions
- Go to Host tab and select 'Execute SQL'
- Add the following script to the SQL tab and run it as script:
1.
update
{databaseOwner}{objectQualifier}Blog_Blogs
set
CreatedByUserID = OwnerUserId
where
CreatedByUserID
is
null
After you runing this script the security issue is gone and your blog is save.