Data Exposure

SQL Query Exposure Check

Learn how SQL queries or database credentials can be exposed in HTML code and measures to protect your critical data.

What this test checks

This test checks whether SQL queries or database connection information are exposed in your site's HTML code. Accidental exposure can reveal your database structure, credentials, or allow an attacker to prepare an SQL injection. This risk is critical as it exposes the integrity of your data.

Our recommendation

Ensure SQL queries and connection information are never present in HTML code. Use prepared statements (PDO) and environment variables for credentials. Enable error display only in development (not production) and use logs for debugging.

Security tests

View all tests

Form Security

SQL Query Exposure Check

What this test checks

Our recommendation

Read more

Malicious File Presence Check in Upload Folders

Shopify Registration CAPTCHA Protection Check

Joomla configuration.php Exposure Check

Permissions-Policy Header Check

Drupal Backup File Exposure Check

Configuration File Exposure Check

CAPTCHA Presence on Client Login Page Check

Magento Admin Access Restriction Check

Shopify Content-Security-Policy Header Check

Magento Configuration File Exposure Check

Installation Log File Exposure Check

CNIL Mention in Privacy Policy Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Shopify Storefront API Exposure Check

PHP Error Display on Magento Check

PHP Error Display on Joomla Check

Shopify SQL Injection Protection Check

PrestaShop Backup File Exposure Check

Joomla Admin Access Check

Shopify X-Content-Type-Options Header Check

Directory Indexing Check

PrestaShop Log File Exposure Check

PrestaShop Admin Login Page Protection Check

CMS Vulnerability Check

PrestaShop Admin Access Restriction Check

Upload Folder Indexing Check

Joomla configuration.php File Access Check

PHP Error Display on WordPress Check

Shopify Error Display Check

PrestaShop parameters.php File Access Check

Two-Factor Authentication (2FA) Check

Joomla Administrator Interface Access Check

Shopify Sensitive File Exposure Check

Joomla Admin Login Page Protection Check

robots.txt File Check

xmlrpc.php Access Check

Shopify File Upload Security Check

WordPress REST API Access Check

CAPTCHA Presence on Password Reset Form Check

Shopify HSTS Header Check

CORS Configuration Check (Access-Control-Allow-Origin)

PHP Error Display in Production Check

Access to wp-cron.php Check

WordPress Debug Log Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

WordPress Version Check

API Key Exposure Check

Cross-Origin-Resource-Policy Header Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Drupal Admin Login Page Protection Check

Shopify X-Frame-Options Header Check

Shopify phpinfo Exposure Check

Shopify Password Protection Check

.htaccess File Presence and Security Check

X-Content-Type-Options: nosniff Header Check

SSL Certificate Check

Magento env.php File Access Check

X-Frame-Options Header Check

Drupal Log File Exposure Check

Drupal Version Check

Index File Presence in Upload Folders Check

Magento Version Check

Privacy Policy Page Presence Check

Shopify Version Check

Server Status Pages Access Check

Magento Admin Access Check

Joomla Cron Access Check

Shopify Admin CAPTCHA Protection Check

HSTS Header Check (HTTP Strict Transport Security)

PrestaShop Version Check

Joomla Temporary Folder (/tmp/) Access Check

Drupal Admin Access Check

Shopify Admin Access Restriction Check

Shopify Password Reset CAPTCHA Protection Check

Known CVE Vulnerability Check on Used Technologies

Drupal Admin Access Restriction Check