Security Check Error: \..* files should not be public

Re: Security Check Error: \..* files should not be public

by salma khan -
Number of replies: 0
It seems that you have encountered an error in the security checks of your Moodle site. The specific error you mentioned is related to the ".git/HEAD" file, which should not be publicly accessible. It appears that the expected permission for this file is 404, but the actual permission is 400.

You mentioned that you have already included the necessary "mod_rewrite" code in your. htaccess file as mentioned in the documentation. Since you couldn't locate the .git/HEAD file on your site, it's possible that it is either not present or located in a different directory.

To resolve this issue, here are a few suggestions:

Double-check your file structure: Ensure that the .git/HEAD file is not present in any public directories or accessible locations. If it exists, consider removing it or moving it to a non-public directory.

Review file permissions: Verify the permissions of the directories and files within your Moodle installation. Ensure that the appropriate permissions are set to restrict access to sensitive files.

Consult Moodle community: Reach out to the Moodle community forums or support channels for more specific assistance. Other Moodle users or experts might have encountered a similar issue and can provide guidance tailored to your situation.

Remember, maintaining the security of your Moodle site is crucial, so addressing this issue promptly is important.
Average of ratings: Useful (1)