Sensitive Files
Magento env.php File Access Check
The env.php file contains critical credentials for Magento. Verify it is not publicly accessible to avoid compromise.
What this test checks
This test checks whether the Magento configuration file (app/etc/env.php) is publicly accessible. This file contains database credentials, encryption keys, and security settings. Its exposure allows an attacker to steal your data and take control of your store.
Our recommendation
Ensure that app/etc/env.php is not accessible from the web. Use restrictive permissions and add a .htaccess rule. Regularly verify its accessibility.
Security tests
Read more
Legal Compliance