New modx install

I now have modx installed in a subdomain on my hosting server

I have also been watching a tutorial from Tidus Ant on youtube to get an idea of what Modx is all about.

Before I even get started creating my site, I just want to mention a few things. I am the only one creating this site. It's a small personal site with no users. My main concern is that my site is secure. After installing ModX, I noticed in my modx directory two files. .htaccess and ht.access. Do I delete one of them? Not sure what to do here.

I took a brief look at the modx hardening article. It's really scary the security issues out there!! Should I move my modx install outside my public_html directory or leave it in the subdomain I created?

It would be nice if there was a video that for example listed the 5 security things you should do before using modx, because right now I'm a bit unclear as to what to do. Coming from Wordpress, there are a lot of security plugins available but I would think that they introduce their own issues. That's why I am trying modx.

My current wordpress site is actually quite simple, consisting of the following pages. Home, interviews, contact, three radio show archives pages and that's about it.

I hand coded my yearly radio shows into html table format. Every year has it's own page. The idea of using chuncks to hold the code sounds really cool and flexible. Reminds me of using shortcodes in Wordpress. Before I do anything in Modx, I will wait until someone posts back as to how I should proceed regarding security and the other issues mentioned above.

Thanks!!

My website is www.mcran.com

It past the security scan I used in Wordpress (Wordfence).

The guidelines on this page are fairly clear. Leaving MODX in the public_html directory is fine (and makes some things simpler), but I do recommend moving the core directory above the web root and at least renaming the Manager and connectors directories.

Use separate, unrelated credentials for your Manager login, database login, and cPanel login. Do not use 'admin' or anything similar for a username (ever).

Once you've done the above, MODX is infinitely safer than most WordPress sites.

The ht.access file is just MODX's example. It will be ignored by the server, but it's a good idea to leave it there for reference.

The .htaccess file is the real thing, but if you didn't create it, it may have been installed by your host (or by WordPress), which will make implementing SEO-friendly URLS in MODX a little more tricky, since you'll need to either replace it with what's in ht.access or integrate the code from ht.access into it.

Welcome to MODX.