Server Configuration

PHP Error Display on Magento Check

Displaying PHP errors on a Magento production site exposes sensitive store information. Learn how to disable them to enhance security.

What this test checks

This test checks whether PHP errors are displayed publicly on your Magento store. Displaying errors in production reveals information like file paths, PHP versions, SQL queries, and sometimes credentials. This data facilitates targeted attacks and compromises your e‑commerce store security.

Our recommendation

Disable error display in production by setting 'display_errors' to 'Off' in your .htaccess or php.ini. For debugging, use Magento logs (var/log/) or an error monitoring service.

Security tests

View all tests

Legal Compliance

PHP Error Display on Magento Check

What this test checks

Our recommendation

Read more

Shopify Cookie Consent Banner Presence Check

Drupal Admin Login Page Protection Check

Cross-Origin-Embedder-Policy Header Check

Directory Indexing Check

Joomla REST API Access Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Magento Admin Login Page Protection Check

robots.txt File Check

Shopify X-Content-Type-Options Header Check

Drupal Backup File Exposure Check

Shopify HTTP Security Headers Check

Magento Cache Folder Access Check

PHP Error Display on PrestaShop Check

Joomla configuration.php File Access Check

.htaccess File Presence and Security Check

Shopify Upload Folder Security Check

PrestaShop Session Cookie Security Check

Shopify CSRF Protection Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

PHP Error Display on WordPress Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Joomla Admin Access Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Password Reset CAPTCHA Protection Check

PrestaShop Upload Folder Indexing Check

Shopify SQL Injection Protection Check

Known CVE Vulnerability Check on Used Technologies

Shopify Version Check

Access to wp-cron.php Check

Joomla Log File Exposure Check

Upload Folder Protection Check (.htaccess, index.html files)

CNIL Mention in Privacy Policy Check

Server Configuration Information Check

Referrer-Policy Header Check

Login Attempt Limiting Check

xmlrpc.php Access Check

Upload Folder Indexing Check

Joomla Temporary Folder (/tmp/) Access Check

SSL Certificate Check

Malicious File Presence Check in Upload Folders

PrestaShop Backup File Exposure Check

Shopify Storefront API Exposure Check

PrestaShop Log File Exposure Check

Privacy Policy Page Presence Check

Magento Configuration File Exposure Check

Drupal Log File Exposure Check

WordPress Login Page Access Check (wp-login.php)

CAPTCHA Presence on Public Forms Check

Cookie Policy Page Presence Check

Shopify SSL/TLS Configuration Check

Shopify HSTS Header Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Shopify phpinfo Exposure Check

CAPTCHA Presence on Client Login Page Check

Cross-Origin-Resource-Policy Header Check

Database Backup File Exposure Check

Joomla Admin Login Page Protection Check

Magento Admin Access Check

PrestaShop parameters.php File Access Check

Shopify Cart Endpoint Exposure Check

PHP Error Display on Joomla Check

PrestaShop Admin Access Check

Shopify Error Display Check

Shopify Permissions-Policy Header Check

PrestaShop Admin Access Restriction Check

Content-Security-Policy Header Check

Shopify Password Protection Check

Development File Exposure Check

Shopify API Key Exposure Check

WordPress REST API Access Check

Drupal Temporary Folder (tmp/) Access Check

WordPress Version Check

Magento Git File Exposure Check

WordPress Heartbeat API Check

WordPress Debug Log Exposure Check

Shopify File Upload Security Check