Sensitive Files

PrestaShop parameters.php File Access Check

The parameters.php file contains PrestaShop database credentials. Verify it is not publicly accessible and learn how to secure it.

What this test checks

This test checks whether the PrestaShop configuration file (parameters.php) is publicly accessible. This file contains database connection credentials, security settings, and encryption keys for your store. Its exposure allows an attacker to steal customer data, orders, and take full control of your e‑commerce site.

Our recommendation

Ensure that the parameters.php file is not accessible from the web. By default, it is placed in the /app/config/ folder, which should be protected by your server. Use restrictive permissions (chmod 644) and add a rule in your .htaccess to block direct access to this file. Regularly verify its accessibility.

Security tests

View all tests

Data Exposure

PrestaShop parameters.php File Access Check

What this test checks

Our recommendation

Read more

API Key Exposure Check

Drupal Upload Folder Indexing Check (sites/default/files/)

wp-config.php File Access Check

X-Frame-Options Header Check

Permissions-Policy Header Check

Content-Security-Policy Header Check

Magento Session Cookie Security Check

Clear-Site-Data Header Check

PrestaShop Admin Login Page Protection Check

Directory Indexing Check

PHP Error Display on PrestaShop Check

Shopify phpinfo Exposure Check

Joomla Cron Access Check

CNIL Mention in Privacy Policy Check

Server Configuration Information Check

Magento Configuration File Exposure Check

Plaintext Password Exposure Check

CAPTCHA Presence on Public Forms Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Login Attempt Limiting Check

Cross-Origin-Embedder-Policy Header Check

Shopify Contact Form CAPTCHA Protection Check

Upload Folder Indexing Check

Shopify Sensitive File Exposure Check

Cookie Consent Banner Presence Check

Shopify XSS Protection Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Shopify REST API Exposure Check

Magento Admin Access Restriction Check

Drupal Admin Access Restriction Check

admin-ajax.php Accessibility Check

Shopify Version Check

Joomla Admin Login Page Protection Check

HSTS Header Check (HTTP Strict Transport Security)

Joomla configuration.php Exposure Check

Magento Backup File Exposure Check

Shopify Environment Information Exposure Check

Drupal Log File Exposure Check

Shopify CSRF Protection Check

Drupal Backup File Exposure Check

Index File Presence in Upload Folders Check

Known CVE Vulnerability Check on Used Technologies

Shopify X-Frame-Options Header Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Shopify Permissions-Policy Header Check

Shopify Log File Exposure Check

CAPTCHA Presence on Client Login Page Check

Joomla REST API Access Check

Magento Cache Folder Access Check

Shopify HTTPS Redirect Check

Shopify Referrer-Policy Header Check

CAPTCHA Presence on Registration Page Check

WordPress Admin Access Check

X-Content-Type-Options: nosniff Header Check

Shopify API Key Exposure Check

PrestaShop Upload Folder Indexing Check

Shopify Content-Security-Policy Header Check

Joomla Log File Exposure Check

Cross-Origin-Resource-Policy Header Check

Referrer-Policy Header Check

Magento Git File Exposure Check

PHP Error Display on Drupal Check

WordPress Version Check

Shopify File Upload Security Check

Cookie Security Check

Magento Admin Login Page Protection Check

Server Status Pages Access Check

Shopify Registration CAPTCHA Protection Check

Database Backup File Exposure Check

CAPTCHA Presence on Contact Form Check

Joomla Version Check

Drupal Admin Login Page Protection Check

Installation Log File Exposure Check

WordPress REST API Access Check

Joomla Admin Access Check

Magento Log File Exposure Check