Server Configuration

Upload Folder Indexing Check

Upload folders (uploads/, media/, files/) are prime targets. Learn how to disable their indexing to prevent public viewing of their contents.

What this test checks

This test checks whether upload folders (like /uploads/, /media/, /files/) are accessible and whether indexing is enabled. When enabled, any visitor can list all files hosted in these folders, including confidential documents, photos, invoices, or malicious files.

Our recommendation

Protect upload folders by disabling indexing (Options -Indexes on Apache, autoindex off on Nginx). Add an empty index.html file in each folder to hide the content. If possible, store files outside the public directory and use a secure download script.

Security tests

View all tests

CMS Security

Upload Folder Indexing Check

What this test checks

Our recommendation

Read more

Drupal Admin Access Check

Joomla Upload Folder Indexing Check (images/)

Cookie Policy Page Presence Check

WordPress Heartbeat API Check

Clear-Site-Data Header Check

Shopify SQL Injection Protection Check

Drupal Version Check

Drupal Admin Access Restriction Check

Shopify Cookie Consent Banner Presence Check

Shopify Cart Endpoint Exposure Check

Drupal Temporary Folder (tmp/) Access Check

Cookie Security Check

Shopify Password Protection Check

Joomla Log File Exposure Check

CNIL Mention in Privacy Policy Check

WordPress Admin Access Check

PrestaShop Admin Access Check

PrestaShop Log File Exposure Check

Joomla Temporary Folder (/tmp/) Access Check

PHP Error Display on WordPress Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Server Configuration Information Check

CAPTCHA Presence on Admin Page Check

CAPTCHA Presence on Client Login Page Check

Shopify X-Content-Type-Options Header Check

Privacy Policy Page Presence Check

WordPress Theme Editor Access Check

X-Frame-Options Header Check

Shopify Storefront API Exposure Check

xmlrpc.php Access Check

PHP Error Display on PrestaShop Check

CAPTCHA Presence on Registration Page Check

Joomla Version Check

Magento Admin Login Page Protection Check

Shopify Content-Security-Policy Header Check

Shopify Registration CAPTCHA Protection Check

Shopify Password Reset CAPTCHA Protection Check

Shopify REST API Exposure Check

Access to wp-cron.php Check

Magento Backup File Exposure Check

Shopify Upload Folder Security Check

Shopify Log File Exposure Check

Magento Version Check

Joomla configuration.php Exposure Check

robots.txt File Check

Shopify Admin CAPTCHA Protection Check

Server Status Pages Access Check

SSL Certificate Check

Joomla configuration.php File Access Check

WordPress REST API Access Check

Shopify XSS Protection Check

CAPTCHA Presence on Public Forms Check

Magento Git File Exposure Check

Magento Configuration File Exposure Check

Shopify CSRF Protection Check

PHP Error Display in Production Check

Shopify Version Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Joomla REST API Access Check

Shopify HTTPS Redirect Check

Cookie Consent Banner Presence Check

Two-Factor Authentication (2FA) Check

WordPress Backup File Exposure Check

PrestaShop parameters.php File Access Check

PHP Error Display on Magento Check

Shopify Error Display Check

Upload Folder Protection Check (.htaccess, index.html files)

Shopify Terms and Conditions (T&C) Presence Check

WordPress Login Page Access Check (wp-login.php)

SQL Query Exposure Check

CORS Configuration Check (Access-Control-Allow-Origin)

Known CVE Vulnerability Check on Used Technologies

.htaccess File Presence and Security Check

PrestaShop Backup File Exposure Check

Development File Exposure Check

Database Backup File Exposure Check