We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 40092
    • 265 Posts
    Hi Guys,

    Been a while, but here i am again:-)
    I'm running a site on the latest evolution and lately i've been getting this warning, i can't find any changed file whatsoever nor do the logs tell me there's been snooping around. I'm wondering if anyone knwo this has anything to do with using cloudflare as a CDN for that site(not that that actually changes the files, it merely saves a copy at their servers and alter it by adding rocketloader scripts).

    Or, am i missing a trigger that sets this warning off, that i am not aware of?

    Regards,
    Robin
      • 22840
      • 1,572 Posts
      Depends what files it is stating have been changed, for example every time it backs up the cache files will have changed, however if it is stating the index.php file has changed then you need to start worrying
        • 40092
        • 265 Posts
        It is not stating a specific file, just 'some' files.

        The warning:

        Configuration warning: 'Important System Files have been modified.'
        
        What does this mean?
        You have enabled the setting to check important system files to detect possible website script attacks. This doesn't necessarily mean that your site has been compromised, however, you should review the changed files.(index.php, .htaccess, manager/index.php, manager/includes/config.inc.php)
          • 3749
          • 24,544 Posts
          The list of files it checks is in the message: "index.php, .htaccess, manager/index.php, manager/includes/config.inc.php"

          If you haven't edited any of them, take a close look at them. Your host might be adding some things to index.php or .htaccess.
            Did I help you? Buy me a beer
            Get my Book: MODX:The Official Guide
            MODX info for everyone: http://bobsguides.com/modx.html
            My MODX Extras
            Bob's Guides is now hosted at A2 MODX Hosting
            • 36192 ☆ A M B ☆
            • 55 Posts
            I changed my .htaccess file and am getting this message- how do I disable the warning?
              • 36192 ☆ A M B ☆
              • 55 Posts
              Hi, Bob,

              If these files have been edited legitimately is there any way to disable the warning from ModX?

              Thanks & best regards,

              Tonkatrucker

              Quote from: BobRay at Jun 08, 2013, 03:19 AM
              The list of files it checks is in the message: "index.php, .htaccess, manager/index.php, manager/includes/config.inc.php"

              If you haven't edited any of them, take a close look at them. Your host might be adding some things to index.php or .htaccess.
                • 1343 ☆ A M B ☆
                • 2,213 Posts
                Hello,

                I believe you need to run the installer again in upgrade mode to update the hash for those files. It's one feature that needs to be better documented with 1.0.10. The alternative is to remove the .htaccess file from the files to check in the system settings.
                  Patrick | Server Wrangler
                  About Me: Website | Tweets |  MODX Hosting
                  • 36192 ☆ A M B ☆
                  • 55 Posts
                  Thanks, I'll give this a try!

                  Quote from: AMDbuilder at Jul 29, 2013, 07:55 PM
                  Hello,

                  I believe you need to run the installer again in upgrade mode to update the hash for those files. It's one feature that needs to be better documented with 1.0.10. The alternative is to remove the .htaccess file from the files to check in the system settings.
                    • 36192 ☆ A M B ☆
                    • 55 Posts
                    This is a good system check and useful. It would be nice to have a few more features associated with this, like the ability to see which file(s) were modified and the ability to clear the warning (without running the installer). I'll check the tracker/git to see if there's already something in the works.

                    And here it is: http://tracker.modx.com/issues/9858

                    It looks like the issue was closed and should be incorporated into 1.0.12 but I'm not seeing the features outlined in this post & issue 9858.

                    Am I missing where this is in the manager? [ed. note: tonkatrucker last edited this post 12 years, 10 months ago.]
                      • 16903
                      • 39 Posts
                      You should try to save the configuration via manager.
                      That should reset the warning.