Ensure you have installed the latest version of your web server software. In the web server don’t allow anyone to access the root directory or any other configuration files as only administrators can maintain access control list and whether a file can be viewed or executed by users, as well as other access rights. Also don’t allow attackers to access files from root directory by using the address bar of web browser.