Modx user page in the admin panel. Blocking a user when logging into the MODx admin panel

1. Login to the site admin panel on Modx

You need to go to the site admin address (type www.site.ru/manager/), enter your login and password:

Enter your login information: login and password.

2. Modx admin

3. Document tree - site pages in the admin panel

To edit the required page on the site, you need to select the corresponding document in the document tree.

Example: we want to edit the “About the Company” section. To do this, click on the corresponding document in the site’s document tree.

The “About the Company” document editing page will open in the admin work area.

You can change the information in the page text,

After making changes, be sure to click the “Save” button for the changes to take effect.

5. Adding pictures to text

The "Image Options" window opens

select an image from the server

  1. Select a folder
  2. Selecting an image
  3. Click OK

by selecting the necessary parameters (alignment, vertical indent, horizontal indent, border), we see how the picture will be displayed on the page,
example (the picture is displayed on the right, with 10px indentation on each edge)

We refresh the page in the browser (press Ctrl and F5) and look at the changes made.

So, the system is already installed and even functioning. This is visible in the browser. But if you go to the site now, you won’t see anything except a meager English inscription.

So let's start slowly understanding the admin panel.

Where is the MODx admin panel?

To log in to the admin panel, go to http://site.name/manager, where site.name is the domain address of your site. A simple window will open where you will need to enter the administrator login and password that you specified during installation.

And here she is in front of you - MODx Evolution control system in all its glory. After installation from scratch and the first authorization in the admin panel, you will be automatically redirected to the system configuration page (this is where the main settings are set). After making the necessary changes, click the “save” button - otherwise the results will not change.

In the future, you can get to the settings page from the admin panel by sequentially clicking the Tools - Configuration tabs.

Basic MODx Settings

Now it's time to start tweaking the basic system settings. In principle, most parameters do not need to be changed, since the system is already user-oriented. But if there is a need to tweak something somewhere, then you will at least know approximately where to look for it. Usually, setting up MODx takes no more than a minute, especially since there is a small hint in Russian next to each parameter - it’s just a lot of text, and you actually don’t need to do anything there

"Site" tab

Site title

Here you must enter the name of your site. In this field you can write anything you want, or one word, or the name of a domain, or even the name of a site with a small description of it. Because Since we will make this heading appear in the page title in the future, I would suggest entering a short description. Such a description will never be superfluous for search engines.

Control language

From the drop-down list you can select the language into which the administrative part of the management system will be completely translated. It's just super convenient. First, you can work with specific language skills with clients from different countries, while giving them the opportunity to manage their site in their native language. The list of supported languages ​​is quite large, from Bulgarian to Spanish, and even includes such exotic languages ​​as Japanese, Chinese and others. Secondly, you don’t have to look anywhere for localization of your system into any language or ask on various forums for help with translation. Thirdly, the translation provided by the system is a professional, complete translation, that is, absolutely all pages and minor elements (tooltips, comments, etc.) are translated.

The default language is the one you specified when installing MODx. We have Russian-UTF8 by default, leave it unchanged and move on to the next field.

Encoding

Here we set the encoding of the site pages. From the drop-down list, select "Unicode (UTF-8) - utf-8".

If this option is enabled, all ampersands (&) in links will be replaced with & construction in accordance with the XHTML format. Don’t bother too much here - leave the default “Yes”

First page

Here you need to enter the ID of the page that you want to make the start page; the visitor will go to it when the site loads. The default is ID=1. I advise you to leave it as is, but keep in mind where changes need to be made in order to temporarily direct the visitor to another page, for example, with very important information or news, without changing the main page.

404 error page

Enter the ID of the page that should be taken to by a visitor who types the address of a non-existent page in the browser, or clicks on a “broken” link on your site. This can happen periodically, and you have the opportunity to direct such a user to a special page that notifies you that the page is missing. To be honest, it is now very fashionable to create interesting designs for 404 error pages, and many, when developing website designs, include requirements for the original 404 page in the technical specifications.

By default ID=1, this means that a person who requests a non-existent page will be sent to the main page of the site. As long as you don’t have a 404 error page design, you can leave it as default and we’ll decide what to do with it along the way.

Access Denied page

ID of the page that visitors should see if they try to access a closed page (403 - access denied). Leave it unchanged. The default is one.

Site status

Leave "online". If you select "offline", site visitors will see a message that the site is unavailable and will not be able to view the site itself. This can be useful when carrying out technical work on the site, updating the design, structure, etc., in order to limit access to the site and leave it only to the administrator.

“Site-unavailable” page and message about site unavailability

If for some reason you have set the site status to “offline”, then you can use these fields to set the ID of the page that visitors should see if they try to access the site. By default, the page is not created, and the visitor will simply see a message about the site being unavailable, which you can change in the “message about the site being unavailable” field.

Register visits

Provides data to the analytics plugin, such as a flag that determines whether to count views on a particular resource. Leave “no” until we need it.

Number of best indicators

Number of best indicators in statistics reports. Leave the default - 10.

Default template

You need to select a template that will be applied to new resources by default. When editing a resource, you can set any template. The “Minimal Template” template was initially created and installed by default. For now we will leave it as it is, later we will change it or create a new one.

Publish by default

While you are working on your local computer, you can set the value to “Yes” so that new pages are immediately published after saving. But when managing a ready-made website published on the Internet, it is better to set it to “No”, so that after saving you can modify the publication, make a preview, correct errors, if any, and, only after that, check the “Publish” checkbox in the page settings . This way you can avoid website visitors viewing intermediate versions of your publications.

"Cacheable" by default

Select Yes to have new resources cached by default when created.

A few words for beginners about what caching of Internet pages is and why it is needed. Caching of Internet pages is the process of storing frequently requested documents on (intermediate) proxy servers or the user's machine, in order to prevent them from constantly being downloaded from the source server and reduce traffic. Alternatively, caching of web pages can be carried out using the CMS of a specific site to reduce the load on the server during high traffic. This means that when a user loads the same page again, it will be partially taken from the cache, and loading will take less time.

"Searchable" by default

In most cases, you will need to create pages that are searchable throughout the site, so leave this set to Yes. Using this parameter, you can hide various service pages on your site from the internal search engine.

Add to default menu

Leave "Yes" to enable automatic addition of the item to the menu.

Content-Types

Here you can add Content-Types for the site. You don't have to add anything for now.

Time difference

Select the adjustment (number of hours) between the time at your location and the server location. This parameter can be set after publishing the site on the Internet. For example, if I am in Perm, and the server is located in Germany, then I can enter a 5 hour correction (time zone difference) to synchronize the time.

Server type

The default is “http”, if you intend to use https connections on your site, indicate this here.

Note: https (Hypertext Transfer Protocol Secure) is an extension of the http protocol that supports encryption. Provides protection for transmitted data and is used to provide authentication and a secure connection. Widely used, for example, in payment systems in online stores in order to encrypt transmitted credit card data. Currently, https is supported by the most popular browsers.

Check server HTTP_REFERER headers

Leave the default - “Yes”.

RSS News Feed and RSS Security Feed

The addresses of the MODx RSS news feed and the security RSS feed are included. These feeds will be broadcast on the main page of the administrative panel on the “MODx News” and “Security News” tabs. They will broadcast news about the release of new versions of MODx or about discovered vulnerabilities. This is very convenient; without leaving the admin panel, you can monitor all updates and warnings from developers and quickly respond to them. The news, however, is broadcast in English, but even a superficial knowledge should be enough for you to understand it. If you do not want to use this RSS feature, you can delete the addresses of the RSS feeds, or enter there the address of any of your favorite feeds that you periodically read.

Friendly URLs Tab

Use friendly URLs

Select Yes. This setting allows you to allow the use of friendly URLs on the site. It was for this parameter to work that at the very beginning of the installation we renamed the ht.access file included in the MODx distribution to .htaccess; after setting the value to “Yes”, additional items will appear for further setting up friendly URLs.

Prefix for friendly URLs

We leave this field empty.

Suffix for friendly URLs

Here you can specify a suffix for friendly URLs, which will be separated by a dot from the page alias. In particular, this looks like file extensions, such as .html, .htm, .php and others. The default is .html, but you can change it or remove it altogether. But, in my opinion, with the presence of this suffix, the URL of the pages looks somehow more complete, so I left it as default.

Use aliases in URLs

Select “Yes”, then the value entered in the “Alias” field will be used as the page alias when editing the page. For example, in this field about will be entered and at the same time you left the suffix for friendly URLs as.html, which means the URL of this page will look like this - http://your_site/about.html. If the “Alias” field is left empty, the URL will be generated based on the document ID and will look like http://your_site/2.html, where 2 is the page identifier.

Use nested URLs

Select Yes to get a nested URL structure. For example, if the child resource is called "child" and the parent resource is called "parent", we will get a URL like this: http://example.com/parent/child.

Allow duplicate aliases

Select Yes to allow duplicate aliases. Note: This setting must be used in conjunction with the Use Nested URLs feature being enabled.

Automatically generate nickname

Select Yes to have the system automatically generate aliases based on page titles. That is, even if you leave the “Nickname” field empty when editing or creating a page, it will be generated automatically based on the page titles. If the site is English and the page names are written in Latin, then to enable the automatic generation of aliases, just this checkbox is enough. If the site is Russian, and therefore the page names are written in Cyrillic, you should configure the TransAlias ​​plugin (after saving the configuration settings). To configure the plugin, you need to follow: Elements tab → Element management → Plugins → TransAlias ​​→ Configuration tab → Set the Trans table parameter to Russian and save.

Users Tab

On the users tab, all parameters can be left unchanged.

On this tab, you can edit email templates sent to users upon registration, when changing their password, and so on. You can also configure the number of failed login attempts that are allowed before the user is locked out (to prevent attackers from trying to guess your password). To enhance security during authorization, you can enable a security code, and in order to enter the admin panel you will need to enter a code that is unrecognizable by various types of scripts (shown as a graphic image), in the “Words for generating CAPTCHA codes” field, you can enter the words , which will be used to generate these security graphics.

Interface and Presentation Tab

Show tab with META tags and keywords

Set to “Yes”, then when editing a resource, an additional “Keywords” tab will appear, where you can select from a list of keywords those that are suitable for the page you are editing.

Path to files

Enter the physical path to the files folder. On your local computer there will be something similar: Z:/home/site/www/assets/. When transferring a finished site to a server (if you developed the site on a local computer), this path is not always entered automatically, therefore, when transferring the site to hosting, I strongly recommend that you check this field and, if necessary, change it to the required one. On the server, this path might look something like this: /home/site/public_html/assets/.

On the “Interface and Presentation” tab, you can also specify file formats that can be loaded into folders with images, flash files and media files through the admin panel (this is indicated so that only graphic files can be loaded into the folder with images and so on). On the same tab you can configure the HTML editor. Leave everything as default for now.

File Manager Tab

Path for file manager

Enter the physical path to the root folder for the file manager to work correctly. This field also needs to be double-checked for correctness when transferring the finished site to the server. On a local machine, the path may look like Z:/home/site/www/, and on the server /home/site/public_html/.

Files allowed for uploading

Here you can specify, separated by commas, which extension files can be uploaded to the server via the file manager.

Maximum download size

Maximum size of uploaded files, value in bytes. Leave it at the default (1048576), but keep in mind where you will need to change it if necessary.

Rights to a new file and rights to a new folder

Leave as default.

Well, that's all, actually. You've become familiar with the basic settings that you can configure on the system configuration page. You can return to the configuration page at any time, so don't worry if you missed anything.

Many MODx developers already know the answer to how to get out of this situation. However, for beginners who have recently become acquainted with CMS MODx, this problem often occurs (I drew this conclusion from the number of requests with a similar problem). If you have a similar situation, don’t be alarmed, it’s not a mistake! This is, so to speak, a defensive reaction of the system to the possibility of guessing a password when entering the administrative part of the site.

The essence of the problem.

The point is to protect yourself from password guessing when entering the administrative part, CMS MODx provides excellent protection. Its essence is to block the user if the password is entered incorrectly three times in a row. The measure is necessary and extremely useful.

Unlocking a CMS MODx user

To unblock a user, go to our database, for example, through phpMyAdmin, then find the “modx_user_attributes” table and set the value of the “blocked” field of the desired user to “0”. The user's blocking has been lifted, we are checking.

Go to “yoursite”, “zone”/manager/ and enter your data - login and password. The entrance must be accessible.

To avoid such a situation, I recommend not using “admin”, “user”, “superuser”, “administrator”, “manager” and other popular logins when installing the system as a user login with “administrator” rights. Attackers will first start working with this phrase as a login. Do not use simple passwords - “qwerty, 12345”; it is better that your password contains a combination of upper and lower case letters, as well as numbers.

In order to get to the administrative panel of the site on MODX Revolution, you need to go to:
your-site/manager. As a result, we get to the page:

We substitute the login and password, and then go to the page

The actual site pages are stored in the leftmost tab (Resources) of the left column of the administrative panel.

You should know that by deleting a document in this column, we move it to the trash. That is, if necessary, it can be restored. To permanently delete it, click on the trash can symbol and confirm deleting the document.

The middle tab in the left column contains site templates, plugins, snippets, modules, and custom add-ons. Deleting any document in this column may affect the performance of the entire resource. The deleted document is permanently deleted, without the possibility of recovery. Unless absolutely necessary or without understanding what you are doing, it is not recommended to edit anything in the documents in this tab. If you have any doubts, you should contact the person who carried it out for you.

The third tab “Files”, which opens when you click the mouse, also contains important components of the web resource, changing the parameters of which may result in the site not working. However, the file system column contains folders and files that will still need to be edited, for example, when adding prices or images.

If, when entering the site's admin panel, you enter the wrong login or password several times (by default 3 times), the management system will block you and you will see the message “Your access to the management system is blocked by the administrator.”

The simplest solutions:

  1. If for some reason you do not know the “Email account” or there is no access to this email, you can restore access by changing the email in phpMyAdmin:
    modx_user_attributes and in the field email
  2. Login to the database via phpMyAdmin. Finding the table modx_user_attributes
    ;
  3. We exit phpMyAdmin, refresh the login page in the admin panel, after which you can log into the admin panel using your username and password.

Important: The "modx_" prefix in your database may be different! Depends on the database settings.

How to change MODX Revolution user password via phpMyAdmin

  1. modx_users hash_class put hashing.modMD5, fields salt and cachepwd we clean, and in the field password change the value to:

    Now the password for the control panel is qwerty

qwerty to safe.

How to unblock a MODX Evolution admin panel user

  1. Click "Forgot your password?" indicate "E-mail account" and you will receive a link to reset your password by email.
  2. If you do not know the “Email account” or there is no access to this email, you can restore access by changing the email in phpMyAdmin:
    Login to the database via phpMyAdmin. Finding the table modx_user_attributes and in the field email change your email to yours and return to step 1 to request a password change.
  3. Login to the database via phpMyAdmin. Finding the table modx_user_attributes and change the contents of the fields to 0 (zero) (if there is something there):
    blocked, blockeduntil, failedlogincount;
  4. Exit phpMyAdmin, refresh the login page in the admin panel, everything should work.

How to change MODX Evolution user password via phpMyAdmin

  1. Login to the database via phpMyAdmin. In the table modx_manager_users the desired user has a value in the field password change the value to:

    d8578edf8458ce06fbc5bb76a58c5ca4

    When editing, in the phpMyAdmin "Function" column, specify MD5. Now the admin password is qwerty(above is the qwerty password in the MD5 hash)

  2. Exit phpMyAdmin, refresh the login page in the admin panel, enter your login and new password, everything should work.

Don't forget to change the user's password in the admin panel qwerty to safe.