moving core outside documentroot

- 19 Posts
airone12 Reply #1, 13 years ago
hi everybody,
i'm sorry if i'm going to ask stupid questions but i'm beginning to think that i'm actually stupid....
so... i am going to put online my modx site, so after the development i thought it was a good idea to do some security hardening, so i read http://rtfm.modx.com/revolution/2.x/administering-your-site/security/hardening-modx-revolution.
first i tried to move core dir... and here are starting my problems. i updated all config.core.php files listed in the document, the only thing i couldn't do is update workspace table, 'cause i checked and it's empty and i can't understand how to launch the setup rocess... the site (and the manager) are not working and test_config.php says: "The following errors were detected: Incorrect path to core!"

i'm beginning to think that my apache virtualhost configuration is wrong, so here it is
```
<VirtualHost *:8080>
  DocumentRoot "C:/test/public/www/modx"
  ServerName www.mysite.com
  DirectoryIndex index.php
  <Directory "C:/test">
    AllowOverride All
    Allow from All
  </Directory>
</VirtualHost>
```
i tried to move core dir in c:\test\private\core
i hope someone can show me what mistake i'm doing.
thanks in advance
- ☆ A M B ☆
- 2,475 Posts
Everett Reply #2, 13 years ago

Your virtual host directive shouldn't change -- that has nothing to do with moving the core. Specifically the directory listed in Directory "C:/test" should match the directory listed for your DocumentRoot. Does Windows let you use forward slashes there?

For the core directory, it can be useful to hit all of your config files in a browser and have them print out the MODX_CORE_PATH for visual inspection. If any of them are different from one another, or if they are referencing a directory other than your actual core directory.

A simpler solution is to rename the core's ht.access file to .htaccess so that requests to that directory are blocked.
Hosting stuff: http://fireproofsocks.com/
Coding stuff: http://craftsmancoding.com/
Blog stuff: http://tipsfor.us/