We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 20413
    • 2,877 Posts
    I'm really bad promoting my work. But wanted to submit a client website
    to MODX Showcase. I get stuck on "not valid mananger url". See Photo.

    The login form is fake as I set up my EVO sites
    like this: https://forums.modx.com/thread/16739/manager-url#dis-post-90162

    What is the form checking for?

    This question has been answered by mrhaw. See the first response.

      @hawproductions | http://mrhaw.com/

      Infograph: MODX Advanced Install in 7 steps:
      http://forums.modx.com/thread/96954/infograph-modx-advanced-install-in-7-steps

      Recap: Portland, OR (PDX) MODX CMS Meetup, Oct 6, 2015. US Bancorp Tower
      http://mrhaw.com/modx_portland_oregon_pdx_modx_cms_meetup_oct_2015_us_bancorp_tower
      • 27708 MODX Staff
      • 2,502 Posts
      The form is broken. I'll look into it.
        Author of zero books. Formerly of many strange things. Pairs well with meats. Conversations are magical experiences. He's dangerous around code but a markup magician. Blog ✦ Twitter ✦ LinkedIn ✦ GitHub
        • 27708 MODX Staff
        • 2,502 Posts
        It actually appears that the Evo login page has been altered. We do a text match on the page content and I made a minor adjustment but need to review more deeply. It will work now.
          Author of zero books. Formerly of many strange things. Pairs well with meats. Conversations are magical experiences. He's dangerous around code but a markup magician. Blog ✦ Twitter ✦ LinkedIn ✦ GitHub
        • discuss.answer
          • 20413
          • 2,877 Posts
          Thanks! smiley
            @hawproductions | http://mrhaw.com/

            Infograph: MODX Advanced Install in 7 steps:
            http://forums.modx.com/thread/96954/infograph-modx-advanced-install-in-7-steps

            Recap: Portland, OR (PDX) MODX CMS Meetup, Oct 6, 2015. US Bancorp Tower
            http://mrhaw.com/modx_portland_oregon_pdx_modx_cms_meetup_oct_2015_us_bancorp_tower
            • 27708 MODX Staff
            • 2,502 Posts
            I've confirmed the change was made in the core. So it has nothing to do with this form.

            On another note, I am wondering if there is an opportunity to improve the security of Evo without this fakeout? Are you using it for some sort of honeypot?
              Author of zero books. Formerly of many strange things. Pairs well with meats. Conversations are magical experiences. He's dangerous around code but a markup magician. Blog ✦ Twitter ✦ LinkedIn ✦ GitHub
              • 20413
              • 2,877 Posts
              My "2nd level authentication" mod demand the user to type in something like this:
              pizza.com/manager/?bestPizza=ourPizza123

              This to be presented the right tpl and login form. Default manager url has a fake form that if submitted can direct
              the user to a honeypot (or a regular error alert). For the user to recognize the right form one can present captcha or a "hello mike" message.

              But since EVO-1012 we can rename the manager folder! smiley
              Ability to change folder MANAGER ( rename the folder and define the path in assets/cache/siteManager.php)
              http://modx.com/blog/2013/09/13/evolution-1.0.12-released/

              Apache htaccess rules restricting direct access to .tpl and .php files saves one from lot of trouble.
              And I won't allow full URL in $_GET

              phpThumbs is headache!

              # redirect to blackhole
              RewriteCond %{QUERY_STRING} (.*)(http|https|ftp):\/\/(.*) [NC,OR]
              RewriteCond %{QUERY_STRING} (.*)(reflect\.php|contact\.php)(.*) [NC,OR]
              RewriteCond %{QUERY_STRING} proc/self/environ [OR]
              RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
              RewriteCond %{QUERY_STRING} base64_encode.*(.*) [OR]
              RewriteCond %{QUERY_STRING} (<|%3C).*script.*(>|%3E) [NC,OR]
              RewriteCond %{QUERY_STRING} GLOBALS(=|[|\%[0-9A-Z]{0,2}) [OR]
              RewriteCond %{QUERY_STRING} _REQUEST(=|[|\%[0-9A-Z]{0,2}) [OR]
              RewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Bot\ mailto:[email protected] [OR]
              RewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Custo [OR]
              RewriteCond %{HTTP_USER_AGENT} ^DISCo [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Download\ Demon [OR]
              RewriteCond %{HTTP_USER_AGENT} ^eCatch [OR]
              RewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR]
              RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]
              RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Express\ WebPictures [OR]
              RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]
              RewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR]
              RewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR]
              RewriteCond %{HTTP_USER_AGENT} ^GetRight [OR]
              RewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR]
              RewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Grafula [OR]
              RewriteCond %{HTTP_USER_AGENT} ^HMView [OR]
              RewriteCond %{HTTP_USER_AGENT} ^HTTrack [NC,OR]
              RewriteCond %{HTTP_USER_AGENT} ^Image\ Stripper [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Image\ Sucker [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Indy\ Library [NC,OR]
              RewriteCond %{HTTP_USER_AGENT} ^InterGET [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Internet\ Ninja [OR]
              RewriteCond %{HTTP_USER_AGENT} ^JetCar [OR]
              RewriteCond %{HTTP_USER_AGENT} ^JOC\ Web\ Spider [OR]
              RewriteCond %{HTTP_USER_AGENT} ^larbin [OR]
              RewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR]
              RewriteCond %{HTTP_USER_AGENT} ^MaMa\ CaSpEr [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Mass\ Downloader [OR]
              RewriteCond %{HTTP_USER_AGENT} ^MIDown\ tool [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Mister\ PiX [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Navroad [OR]
              RewriteCond %{HTTP_USER_AGENT} ^NearSite [OR]
              RewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR]
              RewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Net\ Vampire [OR]
              RewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Octopus [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Offline\ Explorer [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Offline\ Navigator [OR]
              RewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Papa\ Foto [OR]
              RewriteCond %{HTTP_USER_AGENT} ^pavuk [OR]
              RewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR]
              RewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR]
              RewriteCond %{HTTP_USER_AGENT} ^ReGet [OR]
              RewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR]
              RewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR]
              RewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR]
              RewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR]
              RewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Teleport\ Pro [OR]
              RewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Web\ Image\ Collector [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Web\ Sucker [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebGo\ IS [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Website\ eXtractor [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Website\ Quester [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebWhacker [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Widow [OR]
              RewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [OR]
              RewriteCond %{HTTP_USER_AGENT} ^Zeus
              RewriteRule ^(.*)$ /blackhole/index.php? [R,L]
              


              // Awesome htaccess rules: http://perishablepress.com/stupid-htaccess-tricks/ [ed. note: mrhaw last edited this post 12 years, 6 months ago.]
                @hawproductions | http://mrhaw.com/

                Infograph: MODX Advanced Install in 7 steps:
                http://forums.modx.com/thread/96954/infograph-modx-advanced-install-in-7-steps

                Recap: Portland, OR (PDX) MODX CMS Meetup, Oct 6, 2015. US Bancorp Tower
                http://mrhaw.com/modx_portland_oregon_pdx_modx_cms_meetup_oct_2015_us_bancorp_tower