Why is the htaccess file being edited?

Question

MODX

Site on modx revo. In the 20th of July, the site issued a 500 error. The hosting support said that htaccess was edited, this code was added:
RewriteEngine\\x20On
RewriteBase\\x20/
RewriteRule\\x20^".$rewrite_index.".php$\\x20-\\x20[L]
RewriteCond\\x20 %{REQUEST_FILENAME}\\x20!-f
RewriteCond\\x20%{REQUEST_FILENAME}\\x20!-d
RewriteRule\\x20.\\x20".$symbol_url.$rewrite_index.".php [L]
Here are the 20s again and again this damn thing.
What is this code? Hacked?

Answer 1

We stick this design into the htaccess file

#Защищаем .htaccess файл
<files .htaccess>
order allow,deny
deny from all
</files>

and access the file set chmod 444

Answer 2

In order: what or who edited the .htaccess file is a question that you and your host need to find out. It is quite possible that it was you yourself who opened it with a file manager and then saved it. Or maybe this is an application installed by the hosting company and it performs maintenance according to the schedule.
What is this code - it looks like a template .htaccessfor modx. \x20 is a space ( www.codetable.net/hex/20). Apparently, it is generated by the installation file. Did you install modx yourself or as a hosting application, from the control panel?

Answer 3

https://modx.pro/security/16034

Answer 4

it's your friend spaces \\x20
saved through a "bad" editor;)
Of course it gives 500