Sensitive Files
Joomla configuration.php Exposure Check
The Joomla configuration.php file contains critical credentials. Verify it is not publicly accessible to avoid data leaks.
What this test checks
This test checks whether the Joomla configuration file (configuration.php) is publicly accessible. This file contains database credentials, security keys, and site parameters. Its exposure allows an attacker to take full control of your site.
Our recommendation
Ensure that configuration.php is not accessible from the web. Use restrictive permissions and add a rule in your .htaccess. Regularly check access to this file.
Security tests
Read more
Header Security