Server Configuration

PHP Error Display on PrestaShop Check

Displaying PHP errors on a PrestaShop production site exposes sensitive information. Learn how to disable them to enhance store security.

What this test checks

This test checks whether PHP errors are displayed publicly on your PrestaShop site. Displaying errors in production reveals information like file paths, PHP versions, SQL queries, and sometimes credentials. This data facilitates targeted attacks and compromises your store security.

Our recommendation

Disable error display in production by setting _PS_MODE_DEV_ to false in your config/defines.inc.php. For debugging, use a log file configured in PrestaShop advanced settings. Also ensure display_errors is Off in your php.ini.

Security tests

View all tests

Sensitive Files

PHP Error Display on PrestaShop Check

What this test checks

Our recommendation

Read more

Drupal Log File Exposure Check

Shopify HTTPS Redirect Check

WordPress Admin Access Check

xmlrpc.php Access Check

Shopify X-Content-Type-Options Header Check

Configuration File Exposure Check

Shopify File Upload Security Check

Shopify REST API Exposure Check

Privacy Policy Page Presence Check

CAPTCHA Presence on Admin Page Check

CAPTCHA Presence on Contact Form Check

Shopify Upload Folder Security Check

CAPTCHA Presence on Registration Page Check

SQL Query Exposure Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

PrestaShop Session Cookie Security Check

WordPress REST API Access Check

Shopify Version Check

Magento env.php File Access Check

.htaccess File Presence and Security Check

Shopify Contact Form CAPTCHA Protection Check

Shopify SQL Injection Protection Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Malicious File Presence Check in Upload Folders

Plaintext Password Exposure Check

Database Administration Tools Access Check

Drupal settings.php File Access Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Shopify Permissions-Policy Header Check

Information Leak via HTTP Headers Check

Cross-Origin-Embedder-Policy Header Check

Joomla Cron Access Check

Development File Exposure Check

WordPress Login Page Access Check (wp-login.php)

Cookie Security Check

Installation Log File Exposure Check

HttpOnly Flag on Joomla Session Cookies Check

Upload Folder Protection Check (.htaccess, index.html files)

Cross-Origin-Opener-Policy Header Check

Shopify Error Display Check

Login Attempt Limiting Check

WordPress Heartbeat API Check

Upload Folder Indexing Check

X-Content-Type-Options: nosniff Header Check

Joomla Admin Login Page Protection Check

Shopify Registration CAPTCHA Protection Check

Magento Cache Folder Access Check

Joomla configuration.php File Access Check

Shopify CSRF Protection Check

CAPTCHA Presence on Client Login Page Check

Cookie Policy Page Presence Check

PrestaShop Admin Access Restriction Check

WordPress Theme Editor Access Check

Magento Version Check

Shopify Environment Information Exposure Check

Permissions-Policy Header Check

WordPress Debug Log Exposure Check

Shopify Storefront API Exposure Check

CAPTCHA Presence on Public Forms Check

Shopify SSL/TLS Configuration Check

PrestaShop Backup File Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

Magento Backup File Exposure Check

X-Frame-Options Header Check

Shopify Cookie Consent Banner Presence Check

Shopify Log File Exposure Check

Magento Configuration File Exposure Check

Shopify Cart Endpoint Exposure Check

CNIL Mention in Privacy Policy Check

Drupal Admin Access Check

Shopify API Key Exposure Check

Access to wp-cron.php Check

Server Status Pages Access Check

Magento Admin Access Restriction Check

PHP Error Display on Drupal Check

Clear-Site-Data Header Check