Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Edit Suggestion] Hardening MODX Revolution #210

Open
mike-short opened this issue Sep 1, 2017 · 2 comments
Open

[Edit Suggestion] Hardening MODX Revolution #210

mike-short opened this issue Sep 1, 2017 · 2 comments

Comments

@mike-short
Copy link

Page Title

Hardening MODX Revolution

URL

https://docs.modx.com/revolution/2.x/administering-your-site/security/hardening-modx-revolution

Issue or Suggestion

Under the heading "Path Followup" there is the text "then re-run the MODX setup utility". But I couldn't find anywhere in the MODX documentation where the setup utility is located. I tried browsing to /setup but that failed, even without moving the core directory. Could it be that I installed using Softaculous in my cpanel.
Sooo, it would be really nice if this section could explain better how to run setup. Without being able to run setup this entire help page is worthless, right? Which means my MODX can never be secure.

@Mark-H
Copy link
Collaborator

Mark-H commented Feb 9, 2018

Softaculous has probably (rightly so) removed the setup directory. You can download a copy of MODX from modx.com/download and upload just the setup directory to run it.

The entire page is not worthless; what's on that page can still be done without having to run the setup. The setup is just very useful at identifying problems and updating config files as needed.

@mike-short
Copy link
Author

Mark,
Thanks for the reply. Did I really use the word "useless"? Sorry about that, but maybe you can understand how frustrated I was.
Can you move core without running setup? I'm pretty sure that when I tried it without running setup it didn't work. You would know better than I.
Now that I know that Softaculous removed setup (for security) and that I can download it from MODx it all seems so easy. But, believe me, it was really frustrating at the time. I spend a day or so trying to figure it out, it was only when I downloaded revo and inspected the files that the light went on.
Sooo, I still say it would be nice to slip in a line or two into the doc to point out that some installations delete setup but you can manually download it and ftp it up to your site (and delete it after you are done).
Thanks for your help. Mike/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants