Sensitive Files

Drupal Temporary Folder (tmp/) Access Check

The Drupal temporary folder may contain sensitive data. Verify that it is not publicly accessible to avoid information leaks.

What this test checks

This test checks whether the Drupal temporary folder is publicly accessible. This folder may contain temporary files, sessions, and data being processed. Its exposure can reveal information about your site's architecture.

Our recommendation

Place the /tmp/ folder outside your site's public directory by configuring the path in settings.php. If not possible, protect it with a .htaccess file. Regularly check that the folder is not navigable.

Security tests

View all tests

CMS Security

Drupal Temporary Folder (tmp/) Access Check

What this test checks

Our recommendation

Read more

Shopify Password Protection Check

Drupal Backup File Exposure Check

Shopify Content-Security-Policy Header Check

Drupal Version Check

Shopify Version Check

Installation Log File Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

PHP Error Display in Production Check

SSL Certificate Check

Magento Session Cookie Security Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Log File Exposure Check

X-Frame-Options Header Check

PHP Error Display on WordPress Check

Privacy Policy Page Presence Check

Magento Configuration File Exposure Check

Magento Git File Exposure Check

Cross-Origin-Embedder-Policy Header Check

CMS Vulnerability Check

Cross-Origin-Resource-Policy Header Check

Configuration File Exposure Check

Magento env.php File Access Check

Shopify Client Login CAPTCHA Protection Check

Joomla Version Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify Permissions-Policy Header Check

.htaccess File Presence and Security Check

WordPress Theme Editor Access Check

PHP Error Display on Magento Check

Shopify HTTPS Redirect Check

Development File Exposure Check

Shopify SQL Injection Protection Check

Shopify Registration CAPTCHA Protection Check

Shopify Password Reset CAPTCHA Protection Check

PHP Error Display on PrestaShop Check

Shopify REST API Exposure Check

PrestaShop Backup File Exposure Check

Cookie Consent Banner Presence Check

Malicious File Presence Check in Upload Folders

admin-ajax.php Accessibility Check

Two-Factor Authentication (2FA) Check

Shopify SSL/TLS Configuration Check

CAPTCHA Presence on Admin Page Check

Plaintext Password Exposure Check

Shopify Cookie Consent Banner Presence Check

Shopify HSTS Header Check

Drupal Admin Access Check

Shopify Cart Endpoint Exposure Check

Content-Security-Policy Header Check

Shopify Upload Folder Security Check

Shopify Referrer-Policy Header Check

Drupal Log File Exposure Check

SQL Query Exposure Check

Drupal Upload Folder Indexing Check (sites/default/files/)

robots.txt File Check

Shopify X-Content-Type-Options Header Check

WordPress Version Check

Joomla Backup File Exposure Check

HSTS Header Check (HTTP Strict Transport Security)

WordPress Login Page Access Check (wp-login.php)

Permissions-Policy Header Check

WordPress Debug Log Exposure Check

CNIL Mention in Privacy Policy Check

Drupal Admin Login Page Protection Check

Server Configuration Information Check

Server Status Pages Access Check

Shopify Environment Information Exposure Check

WordPress Heartbeat API Check

Drupal Admin Access Restriction Check

CAPTCHA Presence on Password Reset Form Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Index File Presence in Upload Folders Check

Joomla Temporary Folder (/tmp/) Access Check

Information Leak via HTTP Headers Check

Login Attempt Limiting Check

PrestaShop Session Cookie Security Check