Sensitive Files
Joomla Temporary Folder (/tmp/) Access Check
The Joomla temporary folder (/tmp/) may contain sensitive data. Verify that it is not publicly accessible to avoid information leaks.
What this test checks
This test checks whether the Joomla temporary folder (/tmp/) is publicly accessible. This folder may contain temporary files, sessions, cache files, or data being processed. Its exposure can reveal information about your site's architecture or confidential data.
Our recommendation
Place the /tmp/ folder outside your site's public directory by modifying the path in configuration.php. If not possible, protect it with a .htaccess file (Deny from all) or an Nginx configuration that blocks access. Regularly check that the folder is not navigable.
Security tests
Read more
Form Security