Customizing the Manager Login page?

In Revo 2.2.0-rc1 and beyond, is there a way to customize the manager login page? This is nice for eye-candy (e.g. clients who want their logo on there), but it's also important to avoid easy fingerprinting. You can move the manager URL, but as soon as someone sees the MODX login page, the secret is out as to which system you're using and the hacks would become more targeted. Ideally, it'd be useful to come up with some sort of custom HTML that wouldn't show up in any fingerprinting databases.

Anyone done this?

Yes, just create a custom manager theme, only copying the login template file, and switch to that theme in the system setting. MODX will fallback to the default theme for all the other files.

Thanks Shaun. I somehow missed that before. So just to be thorough, the process here would be to copy/modify the manager/templates/default directory and then update the system setting for the manager_theme to point to the new directory, right?

You just need to copy the files you want to override. If MODX doesn't find the tpl file in your theme directory, it will fallback to the default/ directory theme tpl.

Ah, so if you make a new directory in manager/templates, MODX will do a file-by-file override so long as you have updated the manager_theme setting?

Yes. If all you have in there is the login.tpl, it will *only* use that file for that theme (and any other templates/controllers you've overridden for that theme), if you've set that theme to the manager_theme. The rest will fall back to default.

Think of it like extending a class. You're only overriding the methods you need.

Brilliant. Thanks, I think I got this going now... I'm not up to speed Smarty tags here, but there's not much I need to change. I'll start a couple docs @ rtfm.modx.com.

Couldn't you use the Login snippet in the front end and redirect to any Manager page once the user is logged in? That might be simpler if it would work.

Yes, I could do that... but I also wanted to field the issue of fingerprinting. The first step of a hack is to identify what kind of site you're running, so if you can at least keep the ne'er-do-wellers guessing a bit longer, then that'd be a good thing.