Sensitive Files

Installation Log File Exposure Check

Installation log files (install.log, setup.log, install.php) can reveal critical server information. Identify and remove them quickly.

What this test checks

This test checks whether installation log files (install.log, setup.log, install.txt, installation.log, install.php, setup.php) are publicly accessible. These files often contain detailed information about the environment, database, configuration errors, or temporary credentials used during installation. Their exposure constitutes a major security flaw.

Our recommendation

Immediately delete all installation log files from your production server. In many CMSs, these files are located in the root directory or in a /logs/ subfolder. Also verify that no installation file (install.php) persists after site setup. Use a file scanning tool to automatically detect these traces.

Security tests

View all tests

CMS Security

Installation Log File Exposure Check

What this test checks

Our recommendation

Read more

Joomla Admin Access Check

Directory Indexing Check

X-Content-Type-Options: nosniff Header Check

Shopify Version Check

Shopify Error Display Check

Index File Presence in Upload Folders Check

WordPress Admin Access Check

PrestaShop Admin Login Page Protection Check

Shopify File Upload Security Check

Drupal Admin Access Restriction Check

Cross-Origin-Embedder-Policy Header Check

Cookie Security Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify HTTPS Redirect Check

Development File Exposure Check

Cookie Consent Banner Presence Check

Login Attempt Limiting Check

Joomla Cron Access Check

Shopify Sensitive File Exposure Check

Joomla Version Check

PHP Error Display on PrestaShop Check

CAPTCHA Presence on Admin Page Check

Magento env.php File Access Check

Shopify Admin Access Restriction Check

Shopify Password Reset CAPTCHA Protection Check

Shopify X-Content-Type-Options Header Check

Joomla REST API Access Check

CAPTCHA Presence on Contact Form Check

Shopify Backup File Exposure Check

PHP Error Display on Drupal Check

CORS Configuration Check (Access-Control-Allow-Origin)

Privacy Policy Page Presence Check

Shopify HTTP Security Headers Check

Shopify Storefront API Exposure Check

Database Backup File Exposure Check

Magento Session Cookie Security Check

Shopify phpinfo Exposure Check

PrestaShop Admin Access Check

Permissions-Policy Header Check

WordPress REST API Access Check

Shopify API Key Exposure Check

Shopify Cookie Consent Banner Presence Check

Joomla Temporary Folder (/tmp/) Access Check

Malicious File Presence Check in Upload Folders

Two-Factor Authentication (2FA) Check

HSTS Header Check (HTTP Strict Transport Security)

Shopify X-Frame-Options Header Check

Shopify Content-Security-Policy Header Check

Known CVE Vulnerability Check on Used Technologies

Joomla configuration.php Exposure Check

SQL Query Exposure Check

Upload Folder Protection Check (.htaccess, index.html files)

PHP Error Display on Magento Check

PrestaShop Upload Folder Indexing Check

Joomla Upload Folder Indexing Check (images/)

Joomla Admin Login Page Protection Check

WordPress Version Check

PrestaShop parameters.php File Access Check

PrestaShop Session Cookie Security Check

Shopify Terms and Conditions (T&C) Presence Check

Drupal Log File Exposure Check

Configuration File Exposure Check

HttpOnly Flag on Joomla Session Cookies Check

Email Address Exposure Check

xmlrpc.php Access Check

Drupal Admin Login Page Protection Check

WordPress Login Page Access Check (wp-login.php)

Magento Git File Exposure Check

Magento Admin Access Restriction Check

CMS Vulnerability Check

Shopify Admin CAPTCHA Protection Check

Shopify Permissions-Policy Header Check

Joomla Log File Exposure Check

API Key Exposure Check

Joomla Administrator Interface Access Check

PHP Error Display on WordPress Check