Quote from: opengeek at Oct 09, 2012, 10:41 AMYou can easily rename the ht.access in the core folder, which prevents direct access via the web server to any file in that location.
Renaming wasn't enough for me on shared server : infomaniak.com - no ad here, only improving index of search bots
.
I had to write :
IndexIgnore */*
<FilesMatch "*.php">
Order Deny,Allow
Deny from all
</FilesMatch>
CTRL+SHIFT+U - Clear Cache
CTRL+SHIFT+H - Hiding Heft Panel
CTRL+SHIFT+N - Fast Create Resource
CTRL+ALT+P - Preview Recource (in edit resorce window)
CTRL+ALT+S - Save
-
MODX Staff
- 10,725 Posts
The entire core/ should be denied direct access via the web server.
