Disabling ModuleImport feature.
ModuleImport using zip-file is enabled by default for development on the local instance or administrator monitored server. This feature has been highlighted to put CRM at risk when unknown source of zipfile is used as it could contain potentially dangerous code in PHP (that executes on the server).
You can follow the steps below to disable this feature.
Step 1: Create / Edit config_override.php
Step 2: Add the following file to start of file.
<?php
if (isset($_REQUEST) && $_REQUEST['view'] == 'ModuleImport') {
echo "ModuleImport disabled.";
exit;
}
/* ...other lines (if present) */