security report there is no .htaccess file in private:// directory I have this security report  that is constantly saying: 


  Security warning: Couldn't write .htaccess file. Please create a .htaccess file in your private:// directory which contains the following lines:

Deny from all

#Turn off all options we don't need.
Options None
Options +FollowSymLinks

#Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006

&lt;Files *&gt;
  #Override the handler again if we're run later in the evaluation list.
  SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
&lt;/Files&gt;

# If we know how to do it safely, disable the PHP engine entirely.
&lt;IfModule mod_php5.c&gt;
  php_flag engine off
&lt;/IfModule&gt;



I have this exact file in sites/all/default/files/private. what could be wrong?
The private folder has the permissions set to 644.
When you say sites/all/default/files/private I presume you mean sites/default/files/private.

I suggest deleting sites/default/files/private/.htaccess and setting the permissions of sites/default/files/private to 777 temporarily. Drupal should then be able to recreate the .htaccess file which should be exactly correct.

There are other reasons this can happen, I just can't remember off the top of my head sorry. I've had this same problem before.