Hello modx people!
I am very new to modx cms and made my first installation and GUI steps today (version: MODx Revolution 2.0.0-pl).
Initially, I would like to say, that I am not too experienced with PHP at this moment (used it a long time ago, now usually working with Java most of the time, most recently used magnolia cms for web projects), so please forgive the following beginner’s questions in case they are too easy.
I would like to clear them out before diving into modx developing.
1 Where to find detailed information (including discussions) about security of this most recent version?
2 Does this new cms version use prepared statements against sql injection?
3 Is it protected against xss or other common hijacking techniques?
4 Is it possible to move the manager application into a ssl secured subdomain, like
https://edit.mywebsite.com (with help of apache2 of course)?
5 It does not look secure to keep the full php application within the browsable context of the web server. What can be moved upwards and where/how to configure the paths afterwads?
Modx looks very interesting to me, and I like the fact that it seems to be extendable quite easy. This obviously results in less work for the site developer. Furthermore, you guys are using a real message board to talk to each other which in my opinion is a big point compared to a mailing list for user support. Sadly, your board search results are not sortable by date, are they?
However, I am somehow lost in this mass of old information resources targeting former modx versions; especially I did not find information about what security measures have been taken to improve this system (compared to older versions) and what are common techniques of modx to ensure more security.
Thanks for your time.
Regards,
neocreo
