The dataroot is the directory where Moodle stores user files. It should not be directly accessible via the web. (From the docs report/security/report_security_check_unsecuredataroot.)
Installing and upgrading help
Dataroot location is not secure
This discussion has been locked because a year has elapsed since the last post. Please start a new discussion topic.