Windows Update for ASP.NET Vulnerability 2416728: Sitecore implications *Update*

As you could have been reading in my previous post, Sitecore’s major product Sitecore .NET Web Content Management System is affected by the ASP.NET Vulnerability 2416728. Today, Microsoft has released an update to all the Windows Update Services(WSUS and WU). You can find all the details in Scott Guthrie’s post.

What could potentially happen to your Sitecore installation when applying this patch?

  1. A couple of users get logged out. That’s only really notable for the user who use the check box ‘Remember me’. Just login again. That’s the deal. According to my checks on 6.2, this does not happen.
  2. Potentially you could get an exception for people who have a open session while updating Sitecore. According to my checks, this doesn’t happen.

So it seems that you can install this patch without any unexpected side effect. I’ve checked it on my machines and tested it there(so this is an unofficial Sitecore  statement). If we come across issue, we will let you know. If you come across issues, please let our support team know.

Update: Sometimes an ‘HttpException: Unable to validate data’ happens when people are already authenticated. I couldn’t reproduce this. But it seems to be there. In that case, please review this solution on SDN.

ASP.NET Vulnerability 2416728 and Sitecore

Sitecore’s major product Sitecore ASP.NET Web CMS is affected by the ASP.NET Vulnerability 2416728. Scott Guthrie describes all the nifty details about this threat in this post. Our Support-team has been working intensively with our Product team to get a well tested solution out. It’s available now. 

For more information, please review this article on SDN.

Sitecore, Webforms for Marketers, OMS and Dynamics CRM Campaign integration

Sitecore is moving a lot these days and releasing almost on a monthly base new and cool functionalities. Not everybody has the ability to work with Sitecore on a daily base an keep up with this new exciting functionality. So time for me to step in and guide you back to the highway by creating small and very focused blog posts. This is the first one about Webforms for Marketers and the Dynamics CRM Campaign Integration.

The following diagram shows how the CMS, OMS, Webforms for Marketers and Dynamics CRM Campaign Integration glue together: CRM Integratie

On top of the Sitecore Web CMS you can find the Sitecore Online Marketing Suite(OMS) which is used for gaining more details out of the visitor experience.

The Webforms for Marketers module is added on top of the OMS. It relies heavily on the OMS, so I’ve decided to add it there.
Eventually you can run this module without the OMS, but you’ll definitely not gain all the potential out of it.

For integration with MS Dynamics CRM, we have our new Dynamics CRM Campaign Integration module. This module consists of 2 parts:

  1. Save Actions: An extension to the Webforms for Marketers module. It allows any business user to import data into any CRM entity. All WYSIWYG. So no coding required.
  2. Security Provider: Share Contacts in Dynamics CRM as Users in Sitecore. This means that a contact in CRM can login into your Sitecore website for extranet purposes.

Let’s assume you want to start developing on a similar solution. Then it’s highly advisable for you to setup a sandbox environment. You need the following components:

Then you’re ready to rock!

So far so good for today. We’ve got plenty more to talk about. But that can wait for later.