Sensitive Files

Shopify Log File Exposure Check

Shopify log files can reveal sensitive information about your store. Check that they are not publicly accessible to avoid data leaks.

What this test checks

This test checks whether Shopify log files (in /logs/, /var/log/, etc.) are publicly accessible. These logs contain detailed information about errors, admin accesses, API requests, and sometimes personal data. Their exposure can facilitate targeted attacks or information theft.

Our recommendation

Place log files outside your Shopify store's public directory. Use Shopify's built‑in logging tools or dedicated apps to centralise logs securely. Regularly check file permissions.

Security tests

View all tests

Data Exposure

Shopify Log File Exposure Check

What this test checks

Our recommendation

Read more

Email Address Exposure Check

PHP Error Display on PrestaShop Check

HttpOnly Flag on Joomla Session Cookies Check

PHP Error Display in Production Check

Magento Admin Access Restriction Check

PrestaShop Admin Access Restriction Check

PrestaShop Backup File Exposure Check

Magento Log File Exposure Check

Shopify REST API Exposure Check

Cross-Origin-Opener-Policy Header Check

Login Attempt Limiting Check

Magento Backup File Exposure Check

Referrer-Policy Header Check

Directory Indexing Check

WordPress Version Check

Upload Folder Indexing Check

Database Backup File Exposure Check

Clear-Site-Data Header Check

Shopify Upload Folder Security Check

Information Leak via HTTP Headers Check

WordPress Backup File Exposure Check

Joomla Backup File Exposure Check

Malicious File Presence Check in Upload Folders

CAPTCHA Presence on Client Login Page Check

Shopify Terms and Conditions (T&C) Presence Check

PrestaShop Admin Login Page Protection Check

Shopify Content-Security-Policy Header Check

Magento env.php File Access Check

Shopify CSRF Protection Check

Shopify Admin Access Restriction Check

Magento Admin Login Page Protection Check

Drupal settings.php File Access Check

Shopify HTTP Security Headers Check

Magento Git File Exposure Check

Access to wp-cron.php Check

Database Administration Tools Access Check

Upload Folder Protection Check (.htaccess, index.html files)

Known CVE Vulnerability Check on Used Technologies

Drupal Backup File Exposure Check

Cross-Origin-Resource-Policy Header Check

Magento Session Cookie Security Check

Shopify File Upload Security Check

Joomla Upload Folder Indexing Check (images/)

PHP Error Display on Magento Check

Shopify X-Content-Type-Options Header Check

Shopify Client Login CAPTCHA Protection Check

CORS Configuration Check (Access-Control-Allow-Origin)

Shopify Storefront API Exposure Check

Plaintext Password Exposure Check

Development File Exposure Check

Server Configuration Information Check

Shopify Sensitive File Exposure Check

CMS Vulnerability Check

Shopify Cookie Consent Banner Presence Check

Joomla Admin Access Check

Permissions-Policy Header Check

PrestaShop Version Check

Shopify HSTS Header Check

Shopify Admin CAPTCHA Protection Check

wp-config.php File Access Check

Cross-Origin-Embedder-Policy Header Check

X-Frame-Options Header Check

Shopify Password Protection Check

Magento Cache Folder Access Check

Server Status Pages Access Check

PrestaShop Session Cookie Security Check

CNIL Mention in Privacy Policy Check

Shopify SQL Injection Protection Check

Shopify Cart Endpoint Exposure Check

SQL Query Exposure Check

Shopify Error Display Check

Shopify Password Reset CAPTCHA Protection Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Drupal Upload Folder Indexing Check (sites/default/files/)

Cookie Security Check

WordPress Heartbeat API Check