I have a question about MODX 3
On MODX dashboard I have this message:
“One or more configuration details didn’t check out OK:
Core folder is accessible by web”
As the Advanced Installation Package still available, can MODX 3 be installed securely by changing the location and name of the “core” folder?
The reason moving the core file is not possible any longer in MODX 3 was due to the addition of composer dependencies which requires predictible installation paths.
You can easily prevent access to the core folder by blocking web access to the directory using Apache’s .htaccess or Nginx web config rules to send a 403 for external requests to that directory.
The recommended methods are detailed here: Hardening MODX Revolution - Maintenance | MODX Documentation