Server Configuration
Index File Presence in Upload Folders Check
Upload folders must contain an index.html or index.php file to prevent content listing. Check their presence and learn how to add them easily.
What this test checks
This test checks whether upload folders (like /uploads/, /media/, /files/, /images/) contain an index.html or index.php file. These files block content listing when directory indexing is disabled. Their absence can expose all hosted files, even if indexing is disabled (since some servers may display a 403 or 404 error page that may reveal information).
Our recommendation
Add an empty index.html (or index.php) file in each upload folder. If you use a CMS, verify that it automatically creates these files. In a Laravel environment, you can also protect upload folders via .htaccess rules or specific permissions. Test folder access to ensure the index file blocks content display.
Security tests
Read more
Legal Compliance