I clean installed a new Magento shop and everything works fine. I only have a problem with the protection of the subfolders.
For example i can type in the URL
this url is reachable and i dont know how i can protect it.
Magento Stack Exchange is a question and answer site for users of the Magento e-Commerce platform. It only takes a minute to sign up.Sign up to join this community
The best would be to move your /vendor folder one level up which means it's outside the DocumentRoot.
Given that you use Apache, create an new file
.htaccess in your vendor folder:
Order deny,allow Deny from all
You should also do the same for your .modman folder if this one is within the document root.