I love BlogEngine.NET, but damn!
Patched, btw.
And a quick fix to keep files secure on a website is to give them extensions that IIS/ASP.NET won't send, such as .config or .cs or other code file extensions.
The opinions expressed herein are my own personal opinions and do not represent my employer's view in anyway.
© Copyright 2008