Answered Configuration Warning: Core folder is accessible by web

If I remember correctly, after updating to 2.5.1, all I needed to do was change the filename of the core ht.access to .htacess, and then the warning went away. I didn't have to make any custom edits to the file.

Quote from: tm2000 at Oct 28, 2016, 04:44 PM

I know this is an old post - but I have the same problem with V 2.5.1

But the contents of my .htaccess within the core folder is totally different to previous versions:

# deny access to _all_ files in the core, including changelog.txt and error.log
# original borrowed from owncloud

# line below if for Apache 2.4
<ifmodule mod_authz_core.c="">
    Require all denied
</ifmodule>

# line below if for Apache 2.2
<ifmodule !mod_authz_core.c="">
    deny from all
    Satisfy All
</ifmodule>

# section for Apache 2.2 and 2.4
IndexIgnore *

Any ideas?
Thanks
Andy