Sensitive Files
PrestaShop Backup File Exposure Check
PrestaShop backup files (backup.sql, backup.zip) can expose your entire store. Detect their presence and learn how to secure them.
What this test checks
This test checks whether PrestaShop backup files (backup.sql, backup.zip, backup.tar, backup.gz, etc.) are publicly accessible. These files contain your entire database, files, and sometimes credentials. Their exposure allows an attacker to steal all your customer data, orders, products, and compromise your e‑commerce activity.
Our recommendation
Place all backup files outside your site's public directory. Use backup modules (e.g., PrestaShop Backup) that store files in a non‑web‑accessible folder. Delete obsolete backups. Use secure external backup services (e.g., Google Drive, Dropbox) with private permissions.
Security tests
Read more
CMS Security