Core folder is accessible by web

Hi, I just installed 2.4.2. Setup was okay but when I logged-in to the Dashboard, I see this:
---
One or more configuration details didn't check out OK:
Core folder is accessible by web
MODX detected that your core folder is (partially) accessible to the public. This is not recommended and a security risk. If your MODX installation is running on a Apache webserver you should at least set up the .htaccess file inside the core folder /home2/paraorg/public_html/core/. This can be easily done by renaming the existing ht.access example file there to .htaccess.
---
So I edited the ht.access to .htaccess at "core" folder. I also made the permissions to "core/cache" and "core/config" back to "7-5-5". I refreshed the Dashboard and I still see the error above. Any help or tips on how to remove the error?

Change the content of the core/.htaccess file to this:


EDIT: updated to include * in the directives above as pointed out @jdaehne. [ed. note: treigh last edited this post 10 years, 10 months ago.]

I am having the same issue with the .htaccess already set.
It does not seem to be something about the "core" folder permissions (I tried to remove all permissions except executing permission which is necessary to Modx and it does nothing).

Quote from: romainfallet at Nov 23, 2015, 11:32 AM

I am having the same issue with the .htaccess already set.
It does not seem to be something about the "core" folder permissions (I tried to remove all permissions except executing permission which is necessary to Modx and it does nothing).

Are you sure you've edited the .htaccess file in the core folder to contain the above, you need to remove the *.php from the standard content

Quote from: treigh at Nov 22, 2015, 08:58 PM

Change the content of the core/.htaccess file to this:

IndexIgnore */*
<files>
    Order Deny,Allow
    Deny from all
</files>

Thanks but it's still there even if the .htaccess at /core folder contain the above code. Any other suggestions? Help please.

One or more configuration details didn't check out OK:
Core folder is accessible by web
MODX detected that your core folder is (partially) accessible to the public. This is not recommended and a security risk. If your MODX installation is running on a Apache webserver you should at least set up the .htaccess file inside the core folder /home2/paraorg/public_html/core/. This can be easily done by renaming the existing ht.access example file there to .htaccess.

Which web server are you on? What are the folder permissions for the /core folder?

Quote from: treigh at Nov 23, 2015, 05:14 PM

Which web server are you on? What are the folder permissions for the /core folder?

I'm using Hostgator (Linux+Apache). Folder permission for /core is 755.

Change the /core folder permissions to 775 and see if it fixes it.

Quote from: treigh at Nov 23, 2015, 05:46 PM

Change the /core folder permissions to 775 and see if it fixes it.

I just did that. Hmm it's still there. I will try to restart and clear cache.

Would you suggest to check the "Recurse into subdirectories"? Or just leave as blank? I'm using Filezilla.

Thanks!

Should't the content of the .htaccess file be like this:



I think you are missing the "*" behind "Files".

best regards
Jan