Core Folder is accessible

670 Posts

Andy Jones Reply #1, 10 years, 11 months ago

HI - Since the last update, all my sites have the message:

Core folder is accessible by web

MODX detected that your core folder is (partially) accessible to the public. This is not recommended and a security risk. If your MODX installation is running on a Apache webserver you should at least set up the .htaccess file inside the core folder /Users/admin/Documents/local-server/eshot-creator/core/. This can be easily done by renaming the existing ht.access example file there to .htaccess.

But the ht.access file within the Core folder IS already renamed to .htaccess

Any ideas anyone?

Thanks
Andy

This question has been answered by paulp. See the first response.

discuss.answer

1,572 Posts

Paulp Reply #2, 10 years, 11 months ago

Change the content of the .htaccess in that folder to

IndexIgnore */*
<Files *>
Order Deny,Allow
Deny from all
</Files>

670 Posts

Andy Jones Reply #3, 10 years, 11 months ago

Quote from: paulp at Nov 17, 2015, 04:23 AM

Change the content of the .htaccess in that folder to
IndexIgnore */*
<files *="">
Order Deny,Allow
Deny from all
</files>

Super job - thanks!

Answered Core Folder is accessible