Server Configuration

PHP Error Display on Joomla Check

Displaying PHP errors on a Joomla production site exposes sensitive configuration and code information. Learn how to disable them to enhance security.

What this test checks

This test checks whether PHP errors are displayed publicly on your Joomla site. Displaying errors in production reveals information like file paths, PHP versions, SQL queries, and sometimes credentials. This data facilitates targeted attacks and compromises your site's security.

Our recommendation

Disable error display in production in the Joomla global configuration (Error Reporting = None). If you use a custom php.ini, set display_errors to Off. Use Joomla logs for debugging. Regularly test your site to ensure no errors are displayed publicly.

Security tests

View all tests

Header Security

PHP Error Display on Joomla Check

What this test checks

Our recommendation

Read more

Cache Policy Check (Cache-Control, Pragma, Expires)

Drupal Log File Exposure Check

Content-Security-Policy Header Check

Joomla Log File Exposure Check

Shopify phpinfo Exposure Check

Cross-Origin-Embedder-Policy Header Check

Shopify Admin Access Restriction Check

Configuration File Exposure Check

Drupal settings.php File Access Check

Magento Version Check

PHP Error Display on WordPress Check

CNIL Mention in Privacy Policy Check

Privacy Policy Page Presence Check

Server Status Pages Access Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Shopify Contact Form CAPTCHA Protection Check

PrestaShop Admin Login Page Protection Check

PrestaShop Session Cookie Security Check

Joomla Temporary Folder (/tmp/) Access Check

Shopify X-Frame-Options Header Check

Shopify Content-Security-Policy Header Check

Shopify Permissions-Policy Header Check

Magento Admin Access Check

HttpOnly Flag on Joomla Session Cookies Check

WordPress Admin Access Check

Joomla Cron Access Check

Shopify File Upload Security Check

Magento Git File Exposure Check

Index File Presence in Upload Folders Check

Magento Log File Exposure Check

Magento env.php File Access Check

Two-Factor Authentication (2FA) Check

Shopify Password Protection Check

Shopify X-Content-Type-Options Header Check

HSTS Header Check (HTTP Strict Transport Security)

X-Content-Type-Options: nosniff Header Check

Upload Folder Protection Check (.htaccess, index.html files)

Installation Log File Exposure Check

Drupal Backup File Exposure Check

Cross-Origin-Opener-Policy Header Check

Shopify HSTS Header Check

Plaintext Password Exposure Check

Database Backup File Exposure Check

Magento Admin Access Restriction Check

Information Leak via HTTP Headers Check

Magento Session Cookie Security Check

X-Frame-Options Header Check

CORS Configuration Check (Access-Control-Allow-Origin)

Cookie Policy Page Presence Check

Magento Backup File Exposure Check

xmlrpc.php Access Check

admin-ajax.php Accessibility Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Shopify Admin CAPTCHA Protection Check

Drupal Admin Access Check

SQL Query Exposure Check

Email Address Exposure Check

Permissions-Policy Header Check

Shopify Client Login CAPTCHA Protection Check

Shopify CSRF Protection Check

PHP Error Display in Production Check

PrestaShop Admin Access Restriction Check

Magento Admin Login Page Protection Check

Shopify Environment Information Exposure Check

wp-config.php File Access Check

Shopify Upload Folder Security Check

Joomla REST API Access Check

Joomla Upload Folder Indexing Check (images/)

Server Configuration Information Check

Authentication File Exposure Check (.htpasswd, .user.ini)

CAPTCHA Presence on Password Reset Form Check

PrestaShop Upload Folder Indexing Check

CAPTCHA Presence on Admin Page Check

Joomla Admin Access Check

Shopify Password Reset CAPTCHA Protection Check

WordPress Backup File Exposure Check