matomo-for-wordpress icon indicating copy to clipboard operation
matomo-for-wordpress copied to clipboard

"YML files should not be accessible - warning"

Open Tomxcontents opened this issue 7 months ago • 7 comments

Hi! In the diagnostics i got this warning: "The .yml files in the wp-content/plugins/matomo/app/vendor directory are accessible from the internet. This can cause some web security tools to flag your website as suspicious. If you are using Apache, it is probably due to your server configuration disabling the use of .htaccess files. If you are instead using nginx, it is due to your nginx configuration allowing .yml files. You may need to contact your hosting provider to fix this."

I wrote to my host provider to solve it, they said they did what think should be but still this the warning exist. They wrote me this: "We did whatever required from our end, still it showing same warning, it may be due to cache, by the way it's not a critical issue, still you can co-ordinate with the plugin developer and ask them what exactly they want us to disable from our server, we'll do that accordingly."

Can you be more specific how can they solve this problem? Thank you!

Tomxcontents avatar Jul 07 '24 08:07 Tomxcontents