Server Configuration

Shopify phpinfo Exposure Check

The phpinfo() file can reveal sensitive server information. Check that it is not publicly accessible on your Shopify store.

What this test checks

This test checks whether the phpinfo file is publicly accessible on your Shopify store. phpinfo() displays details about your PHP configuration (version, extensions, paths, environment variables), which can help an attacker prepare targeted attacks. Its exposure is a critical information leak.

Our recommendation

Ensure that phpinfo is not accessible via a public URL. Delete any phpinfo.php file from your production server. Use Shopify's built‑in security settings to block access to this information.

Security tests

View all tests

CMS Security

Shopify phpinfo Exposure Check

What this test checks

Our recommendation

Read more

WordPress Login Page Access Check (wp-login.php)

Cache Policy Check (Cache-Control, Pragma, Expires)

PrestaShop Version Check

Cookie Security Check

PHP Error Display on WordPress Check

.htaccess File Presence and Security Check

Server Configuration Information Check

Drupal settings.php File Access Check

Joomla Log File Exposure Check

PHP Error Display on Drupal Check

X-Frame-Options Header Check

CMS Vulnerability Check

Database Administration Tools Access Check

Cookie Policy Page Presence Check

Shopify Admin CAPTCHA Protection Check

Database Backup File Exposure Check

Drupal Log File Exposure Check

Shopify Password Reset CAPTCHA Protection Check

Magento Admin Access Check

Shopify Client Login CAPTCHA Protection Check

HttpOnly Flag on Joomla Session Cookies Check

PrestaShop Log File Exposure Check

Shopify Environment Information Exposure Check

X-Content-Type-Options: nosniff Header Check

Shopify Backup File Exposure Check

Cross-Origin-Resource-Policy Header Check

Joomla Backup File Exposure Check

Configuration File Exposure Check

Shopify Content-Security-Policy Header Check

PHP Error Display on Joomla Check

PHP Error Display in Production Check

WordPress REST API Access Check

Server Status Pages Access Check

Shopify HSTS Header Check

Magento Admin Login Page Protection Check

Shopify SSL/TLS Configuration Check

Joomla Admin Login Page Protection Check

Email Address Exposure Check

Magento Configuration File Exposure Check

Drupal Admin Access Restriction Check

Cookie Consent Banner Presence Check

Magento Log File Exposure Check

Shopify Contact Form CAPTCHA Protection Check

Plaintext Password Exposure Check

Magento env.php File Access Check

SQL Query Exposure Check

CNIL Mention in Privacy Policy Check

Magento Backup File Exposure Check

wp-config.php File Access Check

robots.txt File Check

CAPTCHA Presence on Public Forms Check

Shopify Log File Exposure Check

Joomla Version Check

Shopify Cookie Consent Banner Presence Check

Upload Folder Indexing Check

Shopify X-Content-Type-Options Header Check

Magento Session Cookie Security Check

Shopify Registration CAPTCHA Protection Check

Drupal Temporary Folder (tmp/) Access Check

Access to wp-cron.php Check

SSL Certificate Check

Shopify HTTP Security Headers Check

admin-ajax.php Accessibility Check

Shopify CSRF Protection Check

Privacy Policy Page Presence Check

Shopify Permissions-Policy Header Check

Shopify XSS Protection Check

Shopify Upload Folder Security Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Magento Cache Folder Access Check

WordPress Heartbeat API Check

WordPress Debug Log Exposure Check

PrestaShop Session Cookie Security Check

Joomla Cron Access Check

CAPTCHA Presence on Client Login Page Check

Joomla configuration.php Exposure Check