I just figured out how to add .htaccess file to secure assets, but now I realized if I go from a pdf link in my site, and am clever enough to take out www. ahead of url, I can get in to modx manager. This seems way too easy for someone to really mess with my site and very insecure...is there an easy fix for this?
What is your htaccess rule?
http://modxcms.com/forums/index.php/topic,30850.msg240457.html#msg240457
Are you sure you were logged out from the manager when you tested?
-
MODX Staff
- 12,272 Posts
I’m not following how removing a www. from your URL would impact security?
Ryan Thrash, MODX Co-Founder
Follow me on Twitter at @rthrash or catch my occasional unofficial thoughts at thrash.me
I wasn’t logged out...duh. I think I need a break!
