DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

Script Tag above Title

Sort:
You are not authorized to post a reply.





New Around Here





    Good Evening,

    I was recently handed the controls of an older DNN site due to the depatrue of an employee. Regardless of how the employee left, the site has had some malicious script put into the site. I have changed all of the passwords & disabled old accounts for security reasons. However, I cannot seem to find out how to remove this <script> and <noscript> tags &amp; their&nbsp;contents. It&#39;s on every page, right above the <title> tag and right after the <meta> tag. I have checked just about every section in the Admin panel &amp; cannot find where to remove these 2 lines of code. They are clearly malicious as the source (src) is not remotely tied to my website at all.</p>

    I'd say I'm pulling my hair out, but I shave my head.

    Thank you!






    Veteran Member





      I'd say there are 2 steps to assess.
      1. Change the skin and see if the script is still there. If so, it is not in the skin (probably). I'd check Settings - Site settings - Site behaviour - Page output settings. Scripts here will show up on every page, regardless of the theme selected.
      2. If the script is not present if you select another skin, it is in the skin (duh). This leads us to the ascx files where you find the includes.


      Tjep's digital agencyRegards,
      Tycho de Waard

      Tjep's digital agency
      We just love DNN
      https://www.tjeps.com





      Growing Member





        Like Tycho that can be an easy way to determine if its in the currently set skin or not. A couple other ways to help:

        Check the Page Output Settings for Page Header Tags in site settings in the DNN admin

        Check the default.aspx in the site root if it was added directly into it

        Run a grep (Baregrep is a free app with a nice GUI) for a portion of the script against the entire site directory on the web server
        You are not authorized to post a reply.

        These Forums are dedicated to the discussion of DNN Platform.

        For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

        1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy
        2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
        3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
        4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
        5. No Flaming or Trolling.
        6. No Profanity, Racism, or Prejudice.
        7. Site Moderators have the final word on approving / removing a thread or post or comment.
        8. English language posting only, please.

        Would you like to help us?

        Awesome! Simply post in the forums using the link below and we'll get you started.

        Get Involved