To harden MODX, I moved the core directory above public_html. I attempted to follow the directions
here (which, frankly, lacked sufficient detail so it took a lot of trial and error. I've applied to be a Documents editor so I can make things easier for the next hapless noob.)
The published document gives me this list of files to change:
- core/config/config.inc.php (change the $modx_core_path variable)
- /config.core.php (at the site root)
- /connectors/config.core.php
- /manager/config.core.php
- The modx_workspaces database table
but while the first had the full path laid out (and was therefore pretty clear), others had:
define('MODX_CORE_PATH', dirname(__FILE__) . '/core/');
I have enough php coding experience to guess that "dirname(__FILE__) . " should probably be deleted so that the entire line of code reads:
define('MODX_CORE_PATH', '/home/myusername/core/');
At this point, I stopped getting 503 errors and actually got the Congratulations! page back. Still, the procedure wanted me to change the entry in the workspaces table of the database, so I went to phpMyAdmin, opened the database and navigated to the myprefix_workspaces table. By default, it read simply "{core_path}". I changed it to "/home/myusername/core/" - no quotes. Should I have wrapped it in single quotes? It doesn't seem to matter, I've tried it both ways and no matter what, when I try to access the ACP, I get
The www.[mydomain].com page isn’t working
www.[mydomain].com is currently unable to handle this request.
HTTP ERROR 500
I'll hasten to add that, yes, I
did update core/config/config.inc.php to reflect my new manager directory.