Modx Uses Unsecure and Outdated code

At least that's what my host keeps telling me.

Every time I start a new modx project it triggers all sorts of infractions with mod security so that I basically can't do anything within modx until they turn all the mod security features off.

I even get my IP black listed for my own account.

Now, I realise saying the cms is at fault is a stock answer all hosts give everywhere about any cms or product.

But it doesn't really help unless we can come back with some answers as to why mod security doesn't like modx.

And nor does name calling the host provider.

There must be am easy solution to this.

Anyone else having similar issues or got any ideas as to what's really going on?

PS And I should say my host is actually pretty good and so I don't really have any reason to leave them.

PPS I did read the info in the Modx Docs on this at https://rtfm.modx.com/revolution/2.x/getting-started/installation/basic-installation/installation-on-a-server-running-modsecurity

But that's pretty daunting stuff.

Any CMS that uses forms to manage user content will run afoul of the same restrictions. These are intended for front-end user interactions to prevent anonymous users from submitting dangerous stuff in contact forms or comment forms. But a Manager user working on the back-end has to be able to submit forms with Javascript code, email and other things that no front-end anonymous user should be allowed to submit.

As far as hosting goes, a good hosting provider such as SkyToaster has no problem tracking down and disabling any specific mod_security rules that are interfering with MODX Manager's functionality. Every now and then a new list of rules is loaded, and one or two will conflict. Those are immediately disabled.

Of course, you can sidestep all of this by using static elements and resources, and editing them via FTP/SFTP.

http://bobsguides.com/modx-friendly-hosts.html