Server Configuration

Shopify Upload Folder Security Check

Shopify upload folders must be protected to prevent public access to uploaded files. Check their security and strengthen protection.

What this test checks

This test checks whether Shopify upload folders (like /uploads/, /files/) are properly secured. Unsecured folders can expose sensitive files (images, documents) to public access, compromising the confidentiality of customer data.

Our recommendation

Protect upload folders with restrictive permissions and .htaccess files. Use Shopify's built‑in security settings to limit access to uploaded files. Regularly check folder permissions.

Security tests

View all tests

CMS Security

Shopify Upload Folder Security Check

What this test checks

Our recommendation

Read more

WordPress Theme Editor Access Check

Shopify SQL Injection Protection Check

Shopify X-Frame-Options Header Check

Cookie Policy Page Presence Check

Content-Security-Policy Header Check

Server Configuration Information Check

Known CVE Vulnerability Check on Used Technologies

X-Content-Type-Options: nosniff Header Check

X-Frame-Options Header Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Directory Indexing Check

Clear-Site-Data Header Check

PHP Error Display on Drupal Check

CAPTCHA Presence on Client Login Page Check

HttpOnly Flag on Joomla Session Cookies Check

Shopify Admin Access Restriction Check

Shopify Cookie Consent Banner Presence Check

Database Backup File Exposure Check

Cookie Consent Banner Presence Check

Shopify Storefront API Exposure Check

Drupal Log File Exposure Check

PHP Error Display on WordPress Check

CAPTCHA Presence on Admin Page Check

Server Status Pages Access Check

CORS Configuration Check (Access-Control-Allow-Origin)

CAPTCHA Presence on Contact Form Check

PrestaShop Admin Login Page Protection Check

Drupal Admin Access Restriction Check

Shopify Contact Form CAPTCHA Protection Check

Shopify Content-Security-Policy Header Check

Joomla Version Check

Index File Presence in Upload Folders Check

Joomla Admin Access Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Magento Admin Login Page Protection Check

Configuration File Exposure Check

SSL Certificate Check

Shopify API Key Exposure Check

Access to wp-cron.php Check

PHP Error Display on Magento Check

xmlrpc.php Access Check

robots.txt File Check

PrestaShop Admin Access Check

WordPress Debug Log Exposure Check

HSTS Header Check (HTTP Strict Transport Security)

Joomla Backup File Exposure Check

Cross-Origin-Embedder-Policy Header Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Drupal Temporary Folder (tmp/) Access Check

Upload Folder Protection Check (.htaccess, index.html files)

Magento Log File Exposure Check

Information Leak via HTTP Headers Check

CAPTCHA Presence on Password Reset Form Check

WordPress REST API Access Check

Installation Log File Exposure Check

Malicious File Presence Check in Upload Folders

Shopify HTTPS Redirect Check

Magento Admin Access Restriction Check

PrestaShop Session Cookie Security Check

Magento Version Check

Privacy Policy Page Presence Check

WordPress Version Check

Shopify Password Protection Check

Magento Cache Folder Access Check

Cross-Origin-Opener-Policy Header Check

WordPress Backup File Exposure Check

Joomla Cron Access Check

WordPress Login Page Access Check (wp-login.php)

Joomla REST API Access Check

PrestaShop Log File Exposure Check

Email Address Exposure Check

Shopify Client Login CAPTCHA Protection Check

Shopify Error Display Check

Magento Git File Exposure Check

Shopify Log File Exposure Check

Shopify Admin CAPTCHA Protection Check