I have just installed 2.4.0 on two sites. I'm getting a warning that on the dashboard of both sites that says "Core folder is accessible by web"
I do have an .htaccess in the core folder on both sites that contains
IndexIgnore */*
<Files *.php>
Order Deny,Allow
Deny from all
</Files>
These sites are each in a folder on the same server (Hostmonster). If I attempt to access a file in the core folder via a browser I get the 404 page I specified in Modx.
I assumed that warning would not appear when the .htaccess file is present in the core folder. I've cleared the modx cache manually and deleted cookies and cache in my browser.
Thoughts?