Site Configuration not Secure

Site Configuration not Secure

by Arlo Speer -
Number of replies: 1
My MOODLE gives me the message "Your site configuration might not be secure. Please make sure that your dataroot directory (/home/learning/public_html/Moodle/uploaddata) is not directly accessible via web." on the "Notifications" page of my site.

Is this message a generic one to remind me to check the location of my data route directory .... or does it appear because MOODLE detects a problem.

If there's a problem, what action should I take?
Average of ratings: -
In reply to Arlo Speer

Re: Site Configuration not Secure

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
As the message states; your data directory (uploaddata) is web accessible. This means anyone can download any of the files stored in your Moodle. This directory MUST be above the web level. i.e. outside of the public_html folder.

You need to move this folder ASAP.

Jon