Renaming the Manager folder - how?

Hi Forum!

I would like to avoid having the obvious logon page of http://mysite.com/manager/ as it seems an unnecessary way of inviting people hacking, or any scans later to try and use some newly discovered vulnerability in my MODx version.

So, I tried to simply rename the manager folder to something else but that didn’t work. I got errors during logon that showed files being asked for under /manager still. So it is either hardcoded in one or several places (worst case even in the database maybe) and takes hacking, or I’ve missed some setting somewhere (noticed I could change the /assets folder but haven’t found anything for the /manager).

Is there some simple way of renaming the /manager folder, or will it be too messy?

It’s not possible to rename the manager folder at this time. There has been threads about this previously and some researching has been done. The manager folder is referred in the code many times in different places and there’s no quick fix to do this, but it will be possible sometime.

EDIT: it seems that garryn actually have gotten pretty far with this (see here), any updates on that garryn?

Haven’t tried it myself, but you might try adding an .htaccess authentication on the folder. Not sure if it needs to be accessed for "normal" site activitity. It would be an additional login/password, but might provide the extra protection you are seeking.

I did it once, but it took a couple of hours and a lot of patience.