The includes
folder is blocked by default, because with most websites, the includes
folder holds PHP files which are included into other pages through PHP include
(or related) statements.
We’ve had problems in the past where many websites got hacked because private information was exposed by accessing files in the includes
path directly. To prevent more hacks and subsequent server issues, we’ve decided to block this path entirely.
If these are not include
d scripts, but rather actual pages, please move them to a different directory.