Server Configuration

PrestaShop Upload Folder Indexing Check

PrestaShop upload folders (/upload/, /img/) may be exposed if indexing is enabled. Learn how to protect your files and images from public viewing.

What this test checks

This test checks whether PrestaShop upload folders (like /upload/, /img/, /images/, /files/) are accessible and whether indexing is enabled. An unprotected folder allows any visitor to list all uploaded files, including product images, sensitive documents, invoices, or malicious files.

Our recommendation

Protect upload folders with a .htaccess file containing 'Options -Indexes' or, for Nginx, 'autoindex off;'. Add an empty index.html file in each folder. Regularly check folder access to ensure indexing is disabled. Use a PrestaShop security module for extra protection.

Security tests

View all tests

Header Security

PrestaShop Upload Folder Indexing Check

What this test checks

Our recommendation

Read more

Permissions-Policy Header Check

Shopify Cart Endpoint Exposure Check

robots.txt File Check

Cookie Security Check

Shopify Error Display Check

Drupal Admin Login Page Protection Check

PrestaShop Admin Access Check

Shopify API Key Exposure Check

WordPress Heartbeat API Check

Cookie Consent Banner Presence Check

Directory Indexing Check

CAPTCHA Presence on Public Forms Check

PHP Error Display on Joomla Check

Magento Backup File Exposure Check

PrestaShop Version Check

Information Leak via HTTP Headers Check

Cookie Policy Page Presence Check

Drupal Version Check

SSL Certificate Check

Joomla Cron Access Check

WordPress Debug Log Exposure Check

Drupal Log File Exposure Check

CMS Vulnerability Check

Joomla configuration.php File Access Check

admin-ajax.php Accessibility Check

Installation Log File Exposure Check

Shopify HSTS Header Check

Drupal Backup File Exposure Check

Joomla Upload Folder Indexing Check (images/)

Drupal Upload Folder Indexing Check (sites/default/files/)

PrestaShop parameters.php File Access Check

HttpOnly Flag on Joomla Session Cookies Check

Drupal Admin Access Check

WordPress Login Page Access Check (wp-login.php)

Joomla Temporary Folder (/tmp/) Access Check

wp-config.php File Access Check

Shopify Contact Form CAPTCHA Protection Check

CAPTCHA Presence on Password Reset Form Check

Shopify SQL Injection Protection Check

Upload Folder Protection Check (.htaccess, index.html files)

Magento Session Cookie Security Check

SQL Query Exposure Check

Shopify X-Frame-Options Header Check

Joomla REST API Access Check

Drupal settings.php File Access Check

HSTS Header Check (HTTP Strict Transport Security)

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Joomla configuration.php Exposure Check

WordPress Theme Editor Access Check

.htaccess File Presence and Security Check

Shopify Storefront API Exposure Check

Magento Version Check

Magento Configuration File Exposure Check

Shopify Admin CAPTCHA Protection Check

Malicious File Presence Check in Upload Folders

Magento Cache Folder Access Check

PrestaShop Session Cookie Security Check

Cross-Origin-Resource-Policy Header Check

Magento Admin Access Check

Shopify Backup File Exposure Check

Server Configuration Information Check

CNIL Mention in Privacy Policy Check

WordPress Backup File Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

Development File Exposure Check

Joomla Version Check

PrestaShop Admin Access Restriction Check

Shopify SSL/TLS Configuration Check

PHP Error Display on PrestaShop Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Magento Git File Exposure Check

PHP Error Display on WordPress Check

Shopify Log File Exposure Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

X-Frame-Options Header Check

Two-Factor Authentication (2FA) Check