Sensitive Files
Database Backup File Exposure Check
Database backup files (.sql, .bak, .dump) are often overlooked. Learn how to protect them against data leaks and unauthorised access.
What this test checks
This test checks whether database backup files (like backup.sql, database.sql, dump.sql, .bak) are publicly accessible. These files contain the entirety of your site's data: user accounts, orders, articles, etc. Their exposure is a critical flaw that can lead to massive data theft.
Our recommendation
Place all backup files outside your site's public directory. If you must store them on the server, protect them with restrictive permissions (e.g., 600) and a .htaccess file to block direct access. Delete obsolete backups and use secure external backup services.
Security tests
Read more
Sensitive Files