Hardening, Securing Modx?

Hey Shamblett, did you ever get that downtime to share the security rules?

Thanks

Oops! Forgot about this, bear with me and I’ll post these shortly.

The reason I ask is that one of my modx sites has just been hacked, made a real mess of things.

I ended up doing a new install/upgrade.

I have some more questions after changing some of the permissions for some of the asset folders and files to allow the install, should I change them back to the way there were afterwards?

I’ve already done that for the config file.

Just not sure about the others.

Also make sure your local computer isn’t infected with any number of malware trojans that are floating around that get your login information for anything from SSH and FTP/SFTP to your banking site and pass them on to whomever owns the malware. If you’ve got something like that on your computer, it doesn’t matter how secure your remote server is.