Dear Moodlers,
Our security team have recently informed us that the following Moodle directory 'admin/tool' is unprotected, any idea why ? Shouldn't this directory be protected like all other directories ?
Hi Mario,
What security issue do they say this creates? Do the contents differ from https://github.com/moodle/moodle/tree/master/admin/tool ? Which other directories have you protected?
As Paul has indicated this is most likely a file system/web server configuration issue rather than a Moodle issue