Form Security
Malicious File Presence Check in Upload Folders
Upload folders can host malicious files (shell, cmd, backdoor). Learn how to detect these threats and secure your uploads.
What this test checks
This test searches for potentially malicious files (shell.php, cmd.php, webshell.php, backdoor.php, etc.) in upload folders. Such files often allow an attacker to execute commands on your server, modify files, or steal data. Their presence is critical and requires immediate action.
Our recommendation
Analyse and immediately remove any suspicious files detected. Implement strict validation of uploaded files (MIME type, extension, size, antivirus scanning). Disable PHP execution in upload folders (via .htaccess or Nginx configuration). Use a regular malware scanner and monitor access logs for suspicious activity.
Security tests
Read more
Header Security