Server Configuration

PHP Error Display on Drupal Check

Displaying PHP errors on a Drupal production site exposes sensitive configuration information. Learn how to disable them to enhance security.

What this test checks

This test checks whether PHP errors are displayed publicly on your Drupal site. Displaying errors in production reveals information like file paths, PHP versions, SQL queries, and sometimes credentials. This data facilitates targeted attacks and compromises your site's security.

Our recommendation

Disable error display in production in settings.php by setting 'ini_set('display_errors', 'Off');'. For debugging, use a log file configured in settings.php (syslog or logfile). Also ensure display_errors is Off in your php.ini.

Security tests

View all tests

Sensitive Files

PHP Error Display on Drupal Check

What this test checks

Our recommendation

Read more

Authentication File Exposure Check (.htpasswd, .user.ini)

Joomla Log File Exposure Check

CAPTCHA Presence on Admin Page Check

WordPress Backup File Exposure Check

Shopify Storefront API Exposure Check

Drupal Version Check

Shopify Sensitive File Exposure Check

Magento Configuration File Exposure Check

Magento Backup File Exposure Check

Configuration File Exposure Check

Shopify SSL/TLS Configuration Check

API Key Exposure Check

PrestaShop Admin Access Check

Shopify Permissions-Policy Header Check

Drupal Log File Exposure Check

Shopify Contact Form CAPTCHA Protection Check

Magento Admin Login Page Protection Check

PrestaShop Admin Access Restriction Check

Content-Security-Policy Header Check

PrestaShop Log File Exposure Check

robots.txt File Check

Shopify Admin Access Restriction Check

WordPress Admin Access Check

Shopify Upload Folder Security Check

Plaintext Password Exposure Check

Joomla Administrator Interface Access Check

CAPTCHA Presence on Client Login Page Check

Installation Log File Exposure Check

Shopify Version Check

Drupal Admin Access Check

Shopify Referrer-Policy Header Check

WordPress Heartbeat API Check

xmlrpc.php Access Check

CAPTCHA Presence on Registration Page Check

wp-config.php File Access Check

Email Address Exposure Check

Shopify HTTPS Redirect Check

Shopify Terms and Conditions (T&C) Presence Check

PHP Error Display in Production Check

Magento Git File Exposure Check

admin-ajax.php Accessibility Check

Shopify Password Reset CAPTCHA Protection Check

Cookie Policy Page Presence Check

CNIL Mention in Privacy Policy Check

Drupal Admin Access Restriction Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Server Status Pages Access Check

Shopify Password Protection Check

Two-Factor Authentication (2FA) Check

Drupal Backup File Exposure Check

PrestaShop Session Cookie Security Check

Joomla Admin Access Check

CAPTCHA Presence on Password Reset Form Check

HttpOnly Flag on Joomla Session Cookies Check

WordPress REST API Access Check

Cookie Consent Banner Presence Check

WordPress Login Page Access Check (wp-login.php)

Shopify Cart Endpoint Exposure Check

Shopify Log File Exposure Check

Server Configuration Information Check

Login Attempt Limiting Check

Access to wp-cron.php Check

Joomla Cron Access Check

Joomla Upload Folder Indexing Check (images/)

Magento Cache Folder Access Check

Joomla Backup File Exposure Check

SQL Query Exposure Check

Magento Admin Access Restriction Check

CAPTCHA Presence on Contact Form Check

PrestaShop Backup File Exposure Check

Cross-Origin-Resource-Policy Header Check

Clear-Site-Data Header Check

Permissions-Policy Header Check

CORS Configuration Check (Access-Control-Allow-Origin)

PrestaShop Upload Folder Indexing Check

Joomla Admin Login Page Protection Check