CMS Security

PrestaShop Session Cookie Security Check

PrestaShop session cookies must be protected by Secure and HttpOnly flags to avoid session theft and XSS attacks. Check their configuration and enhance security.

What this test checks

This test checks whether PrestaShop session cookies are protected by the Secure (transmitted only over HTTPS) and HttpOnly (inaccessible via JavaScript) flags. Without these flags, cookies can be intercepted by attackers, especially via XSS attacks, allowing session and admin account theft.

Our recommendation

Enable Secure (HTTPS only) and HttpOnly flags for session cookies in PrestaShop configuration (parameters.php file). Ensure your site is on HTTPS and that HTTP‑to‑HTTPS redirection is active. Test the configuration using browser developer tools.

Security tests

View all tests

CMS Security

PrestaShop Session Cookie Security Check

What this test checks

Our recommendation

Read more

Magento Version Check

Shopify HTTP Security Headers Check

Drupal Log File Exposure Check

Magento Admin Access Restriction Check

Cross-Origin-Opener-Policy Header Check

Drupal settings.php File Access Check

Malicious File Presence Check in Upload Folders

Shopify Upload Folder Security Check

Drupal Admin Access Check

PHP Error Display on PrestaShop Check

Shopify Password Reset CAPTCHA Protection Check

HttpOnly Flag on Joomla Session Cookies Check

WordPress Version Check

Database Administration Tools Access Check

Content-Security-Policy Header Check

Shopify Registration CAPTCHA Protection Check

WordPress Backup File Exposure Check

Permissions-Policy Header Check

Referrer-Policy Header Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify REST API Exposure Check

Upload Folder Protection Check (.htaccess, index.html files)

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Email Address Exposure Check

Magento Log File Exposure Check

Magento Admin Login Page Protection Check

WordPress Debug Log Exposure Check

PrestaShop Backup File Exposure Check

Cookie Consent Banner Presence Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Contact Form CAPTCHA Protection Check

Joomla configuration.php File Access Check

Magento env.php File Access Check

Drupal Temporary Folder (tmp/) Access Check

API Key Exposure Check

Shopify Permissions-Policy Header Check

Installation Log File Exposure Check

WordPress Heartbeat API Check

Access to wp-cron.php Check

Joomla Log File Exposure Check

Joomla configuration.php Exposure Check

Shopify File Upload Security Check

Shopify Storefront API Exposure Check

Shopify Client Login CAPTCHA Protection Check

Magento Cache Folder Access Check

robots.txt File Check

Cross-Origin-Embedder-Policy Header Check

Shopify Content-Security-Policy Header Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Shopify Log File Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

Clear-Site-Data Header Check

Shopify Admin CAPTCHA Protection Check

Magento Configuration File Exposure Check

PHP Error Display on Magento Check

Joomla Cron Access Check

Shopify Error Display Check

Shopify X-Content-Type-Options Header Check

Joomla Temporary Folder (/tmp/) Access Check

CMS Vulnerability Check

CAPTCHA Presence on Public Forms Check

Magento Git File Exposure Check

WordPress Login Page Access Check (wp-login.php)

Shopify Sensitive File Exposure Check

CAPTCHA Presence on Password Reset Form Check

CAPTCHA Presence on Admin Page Check

Magento Backup File Exposure Check

.htaccess File Presence and Security Check

WordPress REST API Access Check

Joomla REST API Access Check

Shopify Cookie Consent Banner Presence Check

CNIL Mention in Privacy Policy Check

PrestaShop Version Check

Shopify API Key Exposure Check

PrestaShop Upload Folder Indexing Check

Shopify X-Frame-Options Header Check