Answered Hardening MODX security

I've been hardening a MODX setup that I have and everything seems fine however the manager doesn't want to load the controllers correctly:
'Could not find action file at: /var/www/vhosts/***.com/httpdocs/manager/controllers/default/security/forms.php'

I've tried to rerun the setup but after updating the core path to the new path the setup just returns a blank white page.

Any ideas?

Thanks,

Have you change the path in all config.core.php (in the root, in the connectors and in the manager folder) and the last in core/config/config.inc.php ?

Quote from: Steeve at Aug 09, 2016, 03:56 AM

Have you change the path in all config.core.php (in the root, in the connectors and in the manager folder) and the last in core/config/config.inc.php ?

Thanks for the reply, Steve. I have changed all the paths and everything loads fine except inside of the manager. It looks like the database paths need to be updated but I'm not entirely sure where these would be located? Usually I would just run the setup to update these but after the setup updates the core path it just returns a white blank screen so I can't proceed with the setup as usual.

Quote from: lkfranklin at Aug 09, 2016, 04:11 AM

It looks like the database paths need to be updated but I'm not entirely sure where these would be located?

in the core/config/config.inc.php file, line 6 $database_server. Usually it's localhost or sql-public.

Quote from: lkfranklin at Aug 09, 2016, 04:11 AM

Usually I would just run the setup to update these but after the setup updates the core path it just returns a white blank screen so I can't proceed with the setup as usual.

Have you try with the traditional or advanced installation ?

Sorry, I don't mean where to go to update the database server/details but the queries inside of the database that may hold paths relative to the manager, connectors and such that won't be updated just by editing the config files.

I'm using the traditional.

Best,

Quote from: lkfranklin at Aug 09, 2016, 04:22 AM

Sorry, I don't mean where to go to update the database server/details but the queries inside of the database that may hold paths relative to the manager, connectors and such that won't be updated just by editing the config files.

Sorry but there no path to the manager, core, connectors... inside the database (if i'm not wrong).
To verify you can download the database open it in an editor, make a search with the old path and normally you will see that there is no path inside the database.

Quote from: lkfranklin at Aug 09, 2016, 04:40 AM

My mistake - It was a cache issue

Nice you find it ;-)
Can you tag the post as answered ?

No worries, thanks for the help.

Quote from: lkfranklin at Aug 09, 2016, 04:52 AM

No worries, thanks for the help.

You're welcome