Log out reminder
If you cannot immediately move your vendor directory, block HTTP access to it. Deny from all Use code with caution. For Nginx (inside the server block): location /vendor/ deny all; return 404; Use code with caution. To help secure your specific environment, let me know:
Add the following block inside your server configuration: location ~ /vendor/ deny all; return 404; Use code with caution.