I'm struggling trying to solve this very annoying problem on my Magento 2.3.3 store. Today I forced the SSL on the website (I did it that by enabling the https on the unsecure URL). After 10-15 mins, while I was editing some coupon codes, I got this notification on my backend:
Your web server is set up incorrectly and allows unauthorized access to sensitive files. Please contact your hosting provider.
I tried EVERYTHING. The /app folder has the .htaccess file and has this rule (everybody was suggesting this as a fix).
<IfVersion < 2.4>
order allow,deny
deny from all
</IfVersion>
<IfVersion >= 2.4>
Require all denied
</IfVersion>
All my folders seem to have 755 and all the files 644 permission.
PLEASE NOTE: This error occurs when the /app folder is visible to everybody. The weird thing is that if I try to navigate on that folder, or app/etc/config.php, it gives me error 404, so it looks like my files are safe.
Why I'm getting this error?
PLEASE, HELP !!!