Sensitive Files

Joomla Log File Exposure Check

Joomla log files can reveal sensitive site information. Check that they are not publicly accessible and learn how to secure them.

What this test checks

This test checks whether Joomla log files (e.g., in /logs/ or /administrator/logs/) are publicly accessible. These logs contain detailed information about errors, admin accesses, SQL queries, and sometimes personal data or intrusion attempts. Their exposure can facilitate targeted attacks or information theft.

Our recommendation

Place Joomla log files outside the site's public directory. In Joomla, you can configure the log path via configuration.php (by setting $log_path). Use restrictive permissions and protect the log folder via .htaccess. Regularly check log size and archive them if necessary.

Security tests

View all tests

Server Configuration

Joomla Log File Exposure Check

What this test checks

Our recommendation

Read more

Directory Indexing Check

PrestaShop parameters.php File Access Check

Magento Admin Access Check

Cookie Consent Banner Presence Check

Magento Log File Exposure Check

Shopify Client Login CAPTCHA Protection Check

Content-Security-Policy Header Check

WordPress Heartbeat API Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Shopify Admin Access Restriction Check

Index File Presence in Upload Folders Check

WordPress Theme Editor Access Check

Drupal Version Check

Shopify Contact Form CAPTCHA Protection Check

Clear-Site-Data Header Check

Joomla Admin Login Page Protection Check

Shopify Admin CAPTCHA Protection Check

PrestaShop Admin Login Page Protection Check

robots.txt File Check

admin-ajax.php Accessibility Check

Installation Log File Exposure Check

Database Backup File Exposure Check

Cross-Origin-Resource-Policy Header Check

Magento Admin Login Page Protection Check

Joomla Upload Folder Indexing Check (images/)

PrestaShop Version Check

Drupal Admin Access Restriction Check

Upload Folder Indexing Check

Upload Folder Protection Check (.htaccess, index.html files)

Server Configuration Information Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Login Attempt Limiting Check

Shopify Log File Exposure Check

HSTS Header Check (HTTP Strict Transport Security)

Drupal settings.php File Access Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify X-Frame-Options Header Check

Malicious File Presence Check in Upload Folders

Access to wp-cron.php Check

Drupal Log File Exposure Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

SSL Certificate Check

Cookie Security Check

.htaccess File Presence and Security Check

HttpOnly Flag on Joomla Session Cookies Check

PrestaShop Admin Access Check

Magento Version Check

PrestaShop Admin Access Restriction Check

CNIL Mention in Privacy Policy Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Database Administration Tools Access Check

Privacy Policy Page Presence Check

Shopify Sensitive File Exposure Check

Shopify SQL Injection Protection Check

Shopify Content-Security-Policy Header Check

PHP Error Display on Joomla Check

Shopify CSRF Protection Check

Shopify HSTS Header Check

Shopify Password Protection Check

Shopify File Upload Security Check

Shopify Password Reset CAPTCHA Protection Check

WordPress REST API Access Check

WordPress Login Page Access Check (wp-login.php)

CAPTCHA Presence on Admin Page Check

API Key Exposure Check

Joomla Cron Access Check

WordPress Debug Log Exposure Check

Referrer-Policy Header Check

Email Address Exposure Check

Shopify XSS Protection Check

Shopify Cookie Consent Banner Presence Check

Joomla REST API Access Check

PrestaShop Upload Folder Indexing Check

xmlrpc.php Access Check

Joomla Administrator Interface Access Check

PHP Error Display in Production Check