Yes, its is that the web root contains code, at the very least an index.php but likely much, much more.