Ektron CMS version 9.10SP1 suffers from multiple cross site scripting vulnerabilities. Source: Ektron CMS 9.10SP1 Cross Site Scripting The post Ektron CMS 9.10SP1 Cross Site Scripting appeared first on MondoUnix.
In January of 2015, Accell-KKR, a private equity firm, combined Ektron and the Swedish company Episerver into a single company and CMS platform. Between the high cost of an Episerver license upgrade and the fact that the open source landscape had evolved significantly over the prior decade to the point where many enterprise organizations (from private and public corporations to government entities) had embraced Drupal and the open source community, this has caused many organizations to choose to migrate off of the Ektron platform and onto a CMS like Drupal.
In January of 2015, Accell-KKR, a private equity firm, combined Ektron and the Swedish company Episerver into a single company and CMS platform. Between the high cost of an Episerver license upgrade and the fact that the open source landscape had evolved significantly over the prior decade to the point where many enterprise organizations (from private and public corporations to government entities) had embraced Drupal and the open source community, this has caused many organizations to choose to migrate off of the Ektron platform and onto a CMS like Drupal.
eBook from Carousel30 a Washington DC Digital Agency about migrating an Ektron CMS website to a Drupal CMS one.
We offer a complete range of Ektron CMS development services including design, development, build deployment, integration with third-party software, managed hosting and Ektron Support.
IIS Application Pool Recycling - I Did Not Know That!
So I’m definitely classifying this in a “I did not know that” category, and after talking to one of my colleagues, he didn’t know it either. So, it makes for a good blog! (And for those who’ve followed my blog, a change of pace from the weekly weight loss report.)
I was talking with someone and in passing, they mentioned that IIS has a timeout for application pool recycling. At first I’m thinking the idle timeout, which defaults to 20 minutes and which I think most .NET developers know about and alter to suit their needs (or put in a keep-alive function). But they actually meant a real full recycling of the application pool, as if you did iisreset. It’s happening by default. It might even be happening now!
Here’s an article about it: http://blogs.iis.net/owscott/why-is-the-iis-default-app-pool-recycle-set-to-1740-minutes. Basically, every 29 hours (because Microsoft didn’t want it set to a strict 24 hours and 29 was the first prime number past 24), your application pool recycles. Great for health, but think about what this means. Every 29 hours, whether you’re in the middle of the work day or late at night, your application pool loses session state, application state, and caching state. And now, I think, you’ll see why I’m bringing this up...
I have a client who has, at times, said the site seems slower to them at certain times of the day. I know their network isn’t the best in the world (heck, they know it too) and I chalked it up to that. But what if this was an instance of a recycle event happening? There’s a lot of cached data in play here...user profiles, menus, news articles, etc...and to have to go back to the server not when I told it to, but because of an arbitrary system reset, is potentially a pain in the butt. I imagine if you’re running in the cloud, or running load-balanced servers, you’re more immune to this. But we all know some projects aren’t that distributed.
So, what can you do? Fortunately, there is an override. Head into IIS, go to your application pool, and choose advanced settings. Scroll down to the bottom, and you’ll see that “1740″ setting that represents 29 hours. Make that a big fat 0, and your application pool won’t recycle at all due to time. However, there’s probably value in doing it periodically, so if you look a little lower, you’ll see where you can set specific times to recycle. Aim for some off-peak hours, like the middle of the night.
It’s really going to depend on your business model and audience, so plan accordingly!