Core folder is accessible by web / Move core directory out of the web server's document root

Renaming ht.access to .htaccess in the /core folder made the warning disappear.