I've noticed that standard out of the box Moodle (using 3.8) allows anyone to access the /pix folder (eg. http://your_moodle_site/pix ) and view/download the images. Without even logging in.
site/blocks returns a blank page.
site/enrol returns an error message.
site/course sends you to the login page. This is what I would expect in all cases.
I've tested it on other random moodle sites and most of them have the same results. One gave a 403 error for pix, but the same error for enrol.
How does one redirect traffic to the login page for all these instances?