We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 35377
    • 1 Posts
    I had lots of problems with being hacked when I used Drupal and I’m looking for a more secure CMS. What are others’ experiences?

    Thanks. rolleyes
      • 21838
      • 284 Posts
      MODX Revolution is safest CMF I’ve seen so far.
        MODX Free Template Base: MODX-Boilerplate | my blog (lots of MODX stuff) | my gitHub (translations) | MODX User Groups Germany (Facebook)
        • 1343 ☆ A M B ☆
        • 2,213 Posts
        If you keep it up to date you should be worry free. I have three servers loaded with MODX sites and no problems smiley
          Patrick | Server Wrangler
          About Me: Website | Tweets |  MODX Hosting
          • 28042 ☆ A M B ☆
          • 24,524 Posts
          I’ve been using Evo for more than six years, across three continents, and with a bit of care and attention to the security announcements have never had a problem.
            Studying MODX in the desert - http://sottwell.com
            Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
            Join the Slack Community - http://modx.org
            • 36404
            • 307 Posts
            hi,

            just my two cents about security, a way not to be easily hacked is not having people guess what cms you’re using too easily...

            having a look at the source code is the first way one know what tool you’re site is running with (don’t you guess what cms is behind a website with wp-content in the link/script tags in the head part.

            MODx has a very generic /assets/css... and so on "annoucement" which is a good beginning smiley

            This, of course not speaking about how things are coded (drupal is not exactly known to be an example about this, particularly when it comes to its sql requests...)

            Something else, of course i wish MODx to be knwon as The cms that FTW but, in the other hand, the more a cms is wellknown and claiming to be the best the more it is hacked, remember PhpBB a few years ago... claiming to be the best and... being the most hacked forum machine... i would bet MODx is not tempting hackers as much as Drupal or Joomla (so far...)

            Have swing
              réfléchir avant d'agir
              • 11055 ☆ A M B ☆
              • 3,112 Posts
              Please note that the security breach can also been done through the plugin.
              Each of developers must be responsible to their own codes on this matter.

              Currently MODX does not have the security assessment procedure to the submitted extra, but we do seriously concern about the security.

              MODX has a Security Team.
              Perhaps the standard have not been set, yet, but you can read my post about it (look at the link on my signature).

              Cheers.
                Rico
                Genius is one percent inspiration and ninety-nine percent perspiration. Thomas A. Edison
                MODx is great, but knowing how to use it well makes it perfect!

                www.virtudraft.com

                Security, security, security! | Indonesian MODx Forum | MODx Revo's cheatsheets | MODx Evo's cheatsheets

                Author of Easy 2 Gallery 1.4.x, PHPTidy, spieFeed, FileDownload R, Upload To Users CMP, Inherit Template TV, LexRating, ExerPlan, Lingua, virtuNewsletter, Grid Class Key, SmartTag, prevNext

                Maintainter/contributor of Babel

                Because it's hard to follow all topics on the forum, PING ME ON TWITTER @_goldsky if you need my help.
                • 25663 MODX Staff
                • 12,272 Posts
                We do actually take a cursory look at every submitted extra before publishing them to the repository. That being said, the ones that come from the core team are monitored religiously and take advantage of the security protections inherent in Revo. I think a testament to this approach can be seen in the volume of security reports at secunia.com compared to the other "better known" solutions out there. We’ve had roughly a dozen—and most of them on Evo—compared to 100, 200 or more on each of the "big three".
                  Ryan Thrash, MODX Co-Founder
                  Follow me on Twitter at @rthrash or catch my occasional unofficial thoughts at thrash.me