Sensitive Files
Magento Configuration File Exposure Check
Magento configuration files (app/etc/env.php, config.php) can expose sensitive data. Check their accessibility and secure them effectively.
What this test checks
This test checks whether Magento configuration files (env.php, config.php, etc.) are publicly accessible. These files contain database credentials, encryption keys, and security settings. Their exposure allows an attacker to steal your data and take control of your e‑commerce store.
Our recommendation
Place all configuration files outside your site's public directory. Use restrictive permissions and add blocking rules in your server configuration. Regularly check the accessibility of these files.
Security tests
Read more
CMS Security