I have recently found a lot of SQL Inject Attempts on my site with people trying to hack the Manager/Index.php file.
In future versions, please all the BASE PATH to the Manager to be a variable as well.
define(’MODX_USERDEFINED_MANAGER_PATH’, ’SECRETFOLDER’);
if (!defined(’MODX_MANAGER_PATH’)) define(’MODX_MANAGER_PATH’, $base_path.’manager/’);
if (!defined(’MODX_MANAGER_URL’)) define(’MODX_MANAGER_URL’, $site_url.’manager/’);
if (!defined(’MODX_MANAGER_PATH’)) define(’MODX_MANAGER_PATH’, $base_path.MODX_USERDEFINED_MANAGER_PATH);
if (!defined(’MODX_MANAGER_URL’)) define(’MODX_MANAGER_URL’, $site_url.MODX_USERDEFINED_MANAGER_PATH’);
Jason Buck
-
☆ A M B ☆
- 3,112 Posts
Evo? Revo?
By what did you find this, so I can check my sites too.
Rico
Genius is one percent inspiration and ninety-nine percent perspiration.
Thomas A. Edison
MODx is great, but knowing how to use it well makes it perfect!
www.virtudraft.com
Security, security, security! |
Indonesian MODx Forum |
MODx Revo's cheatsheets |
MODx Evo's cheatsheets
Author of
Easy 2 Gallery 1.4.x,
PHPTidy,
spieFeed,
FileDownload R,
Upload To Users CMP,
Inherit Template TV,
LexRating,
ExerPlan,
Lingua,
virtuNewsletter,
Grid Class Key,
SmartTag,
prevNext
Maintainter/contributor of
Babel
Because it's hard to follow all topics on the forum, PING ME ON TWITTER
@_goldsky if you need my help.