Security update for ModX CMS
I just installed the security update for ModX (0.9.2.1) on one of my installations. I’ve got to say, the devs at ModX are slick-slick-slick. It went about as easily as any update I ever did AND I chose to do a full upgrade rather than just a patch, since there were some new features available in the full that weren’t in the patch package. I should also mention that the security issue was dealt with within one day of it being reported. Re me and upgrading- it’s one of those necessary things I hate since I’ve had such issues with it (and YES, I follow the stinking instructions!) but this was truly a breeze.
Though ModX still has just a bit of a ways to go in terms of ease of development from MY end, it’s very slick for the end user now, and Ryan and the other devs keep telling us we ain’t seen nothin’ yet! Judging by what I’ve seen so far I’m really loving this web ap. It’s very possible that if the 1.0 release, due out sometime soon, is as versatile and as easy to use and set up as they say that it could very easily replace WordPress as the ap behind the kickass site and also behind many client sites.
Why? WordPress seems to be getting worse instead of better. ModX just keeps on improving. Also, there is no attitude with the devs on the ModX project like there is with WP- though most of the WP devs are a nice bunch there are very few who will buck whatever trend Matt proclaims is the “in” trend, and those who would stand up to Matt seem to be disappearing from the team one by one. The ModX devs listen to all their users with respect, continue the conversation, and incorporate the improvements arrived at through that dialog as quickly as they can. Any good snippet/mod/or other extended code that sees a lot of use is incorporated into core at the next release. This is SO DIFFERENT from what we’ve been seeing over at WordPress, where stuff is released buggy and in alpha form, and where things WP users beg for and complain about over and over and over again are never addressed in any form. Not to mention that there are security holes that have been reported on WP hackers list months ago that haven’t even been touched. That head in the sand attitude at WP is not only annoying, it’s dangerous. ModX devs are a much more responsible and responsive bunch.
Also, the past versions of WordPress used to let me nail down the design on static html, then when it was sliced and diced into a theme there was very little, if any, adjustment to be made. Now, with the 2.0 versions, I find myself hacking to DEATH just to get things to work, especially when the site in question is running adsense javascripts or any other javascripts. It’s bizarre. The same page that runs fine with no hacks when called as static html will BORK BIGTIME when called through WP. Also, the best layouts for SEO, which are the negative margin layouts from Ryan Brill, PIE and Ruthsarian, rarely work in WP 2.0.x. And it’s only since WP 2.0.x that I’ve found myself looking for hacks for FireFox, Opera and Safari, three GOOD browsers . . . in one case I found myself resorting to using a table. I’m ashamed to say it solved the problem. That’s what WP has reduced kickass layouts to. Ridiculous.
With ModX I can use any fab xhtml/css layout I want — HACK FREE (well, almost hack free- with no more hacks than would be in a static html page. ModX doesn’t screw with my code, and doesn’t cough up a hairball with javascript.) Clients love that they can quickedit directly on the page and RIGHT OUT OF THE BOX with no plugins or other hacks. I, as the developer, can design it so every part of any page is editable by the user. ModX also gives users template flexibility, so specialized templates for different areas of a site can be created and specified through admin. You want the exact same layout but in 5 different colors for the 5 different sections of your site? No problem.
Then there’s accessibility– Joomla has been promising it for a couple years now and still hasn’t hit the mark. ModX is already there, as long as the dev creating the template incorporates it into the layout, which is as simple as adding the correct xhtml and proper css.
Over the next few weeks I’ll be announcing the launch of a couple ModX sites that are right now in the pipeline. I hope you check back so you can judge for yourself. In the meantime, check out some of these sites that are powered by ModX.
Yes, I’m sounding like a ModX commercial– but this is open source software I’m talking about. Think about what that means. Wow.
[tags]ModX, WordPress, Joomla, CMS, Security, xhtml, css, standards[/tags]
