We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
MODX Community Forums Archive

Forbid access to « Connectors » with .htaccess ?

    • 34197
    • 138 Posts
    carlo_13 Reply #1, 10 years, 1 month ago
    Hi everyone.

    I'm worried about security, and my question is quite simple:
    Should I forbid access to the “connectors” folder using .htaccess ? The same way I did for the “core” folder?

    Is there any chance this break the website?


    Thanks.
      Webdesigner and musician.
      • 18373 ☆ A M B ☆
      • 3,141 Posts
      Mark Hamstra Reply #2, 10 years ago
      The connectors folder is used by the manager, so it needs to remain accessible to manager users. You can (using the advanced distribution or just moving folders and updating the config file) rename it or move it elsewhere for some added "security through obscurity".
        Mark Hamstra • Developer spending his days working on Premium Extras and a MODX Site Dashboard with the ability to remotely upgrade MODX and extras to make the MODX world a little better.

        Tweet me @mark_hamstra, check my infrequent blog at markhamstra.com, my slightly more frequent ramblings at MODX.today or see code at Github.