Sensitive Files

PrestaShop Log File Exposure Check

PrestaShop log files can reveal sensitive information. Check that they are not publicly accessible and learn how to secure them.

What this test checks

This test checks whether PrestaShop log files (in /log/, /logs/, /cache/logs/, /var/logs/) are publicly accessible. These logs contain detailed information about errors, admin accesses, SQL queries, and sometimes personal data or intrusion attempts. Their exposure can facilitate targeted attacks or information theft.

Our recommendation

Place PrestaShop log files outside the site's public directory. In PrestaShop, you can configure the log path via parameters.php. Use restrictive permissions and protect the log folder via .htaccess. Regularly check log size and archive them if necessary.

Security tests

View all tests

Server Configuration

PrestaShop Log File Exposure Check

What this test checks

Our recommendation

Read more

Server Configuration Information Check

Magento Admin Access Check

WordPress Backup File Exposure Check

Login Attempt Limiting Check

Information Leak via HTTP Headers Check

Shopify CSRF Protection Check

WordPress Login Page Access Check (wp-login.php)

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Backup File Exposure Check

Shopify SSL/TLS Configuration Check

Shopify Permissions-Policy Header Check

.htaccess File Presence and Security Check

Drupal Log File Exposure Check

Plaintext Password Exposure Check

Index File Presence in Upload Folders Check

xmlrpc.php Access Check

Directory Indexing Check

Shopify HSTS Header Check

Shopify XSS Protection Check

Shopify Cart Endpoint Exposure Check

PrestaShop parameters.php File Access Check

Shopify Client Login CAPTCHA Protection Check

WordPress Theme Editor Access Check

Magento Admin Login Page Protection Check

HttpOnly Flag on Joomla Session Cookies Check

SSL Certificate Check

Shopify Upload Folder Security Check

PHP Error Display in Production Check

PHP Error Display on WordPress Check

Shopify File Upload Security Check

wp-config.php File Access Check

Cross-Origin-Opener-Policy Header Check

Shopify SQL Injection Protection Check

Magento Admin Access Restriction Check

X-Content-Type-Options: nosniff Header Check

Shopify Registration CAPTCHA Protection Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Joomla Cron Access Check

Joomla configuration.php Exposure Check

Joomla Backup File Exposure Check

PHP Error Display on PrestaShop Check

CAPTCHA Presence on Client Login Page Check

CNIL Mention in Privacy Policy Check

Shopify X-Content-Type-Options Header Check

PrestaShop Admin Access Restriction Check

Joomla Log File Exposure Check

CAPTCHA Presence on Password Reset Form Check

robots.txt File Check

WordPress Admin Access Check

Cookie Policy Page Presence Check

Magento env.php File Access Check

Shopify phpinfo Exposure Check

Cross-Origin-Embedder-Policy Header Check

Malicious File Presence Check in Upload Folders

Upload Folder Indexing Check

PHP Error Display on Magento Check

WordPress REST API Access Check

Drupal Admin Login Page Protection Check

Drupal Temporary Folder (tmp/) Access Check

X-Frame-Options Header Check

Clear-Site-Data Header Check

Joomla configuration.php File Access Check

Drupal Admin Access Check

Shopify HTTP Security Headers Check

PHP Error Display on Joomla Check

Shopify API Key Exposure Check

Database Backup File Exposure Check

Drupal Admin Access Restriction Check

Email Address Exposure Check

PrestaShop Admin Login Page Protection Check

Magento Version Check

PrestaShop Version Check

Shopify Password Reset CAPTCHA Protection Check

Referrer-Policy Header Check

Shopify Error Display Check

SQL Query Exposure Check