Server Configuration

PHP Error Display on WordPress Check

Displaying PHP errors on a WordPress production site exposes sensitive configuration and code information. Learn how to disable them to enhance security.

What this test checks

This test checks whether PHP errors are displayed publicly on your WordPress site. WordPress can display PHP errors if WP_DEBUG_DISPLAY is enabled in wp-config.php. Error display reveals sensitive information like file paths, PHP versions, SQL queries, and sometimes credentials. This data facilitates exploitation of vulnerabilities.

Our recommendation

Disable error display in production by setting WP_DEBUG_DISPLAY to false in your wp-config.php. For debugging, use a log file (WP_DEBUG_LOG) or an error monitoring service (e.g., Sentry, Bugsnag). Also ensure display_errors is Off in your php.ini for enhanced security.

Security tests

View all tests

CMS Security

PHP Error Display on WordPress Check

What this test checks

Our recommendation

Read more

WordPress Admin Access Check

PHP Error Display on Drupal Check

Drupal Admin Access Check

Server Configuration Information Check

Server Status Pages Access Check

Upload Folder Indexing Check

Joomla configuration.php Exposure Check

X-Frame-Options Header Check

Shopify XSS Protection Check

Joomla Admin Access Check

Shopify SSL/TLS Configuration Check

Shopify Permissions-Policy Header Check

Shopify Version Check

Shopify File Upload Security Check

Cookie Security Check

CORS Configuration Check (Access-Control-Allow-Origin)

Database Administration Tools Access Check

Magento Admin Login Page Protection Check

Joomla Administrator Interface Access Check

WordPress Version Check

WordPress Backup File Exposure Check

Drupal Admin Access Restriction Check

Content-Security-Policy Header Check

WordPress Theme Editor Access Check

SQL Query Exposure Check

API Key Exposure Check

Known CVE Vulnerability Check on Used Technologies

CAPTCHA Presence on Contact Form Check

Shopify HTTPS Redirect Check

Index File Presence in Upload Folders Check

Shopify Storefront API Exposure Check

Joomla Log File Exposure Check

Shopify X-Content-Type-Options Header Check

Shopify Upload Folder Security Check

Drupal Version Check

PrestaShop Backup File Exposure Check

Plaintext Password Exposure Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

CMS Vulnerability Check

Magento env.php File Access Check

Cookie Policy Page Presence Check

Shopify HTTP Security Headers Check

PrestaShop Admin Login Page Protection Check

PrestaShop Version Check

SSL Certificate Check

Cross-Origin-Resource-Policy Header Check

PHP Error Display on Joomla Check

Magento Admin Access Restriction Check

Shopify Error Display Check

Cookie Consent Banner Presence Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

CNIL Mention in Privacy Policy Check

Drupal Temporary Folder (tmp/) Access Check

Shopify Client Login CAPTCHA Protection Check

HttpOnly Flag on Joomla Session Cookies Check

Shopify phpinfo Exposure Check

.htaccess File Presence and Security Check

Drupal settings.php File Access Check

Shopify Contact Form CAPTCHA Protection Check

Referrer-Policy Header Check

Joomla Temporary Folder (/tmp/) Access Check

wp-config.php File Access Check

xmlrpc.php Access Check

Joomla Upload Folder Indexing Check (images/)

Access to wp-cron.php Check

Email Address Exposure Check

admin-ajax.php Accessibility Check

Magento Git File Exposure Check

Magento Version Check

Shopify Log File Exposure Check

Joomla configuration.php File Access Check

Shopify Admin CAPTCHA Protection Check

Shopify Cart Endpoint Exposure Check

Drupal Admin Login Page Protection Check

Directory Indexing Check

HSTS Header Check (HTTP Strict Transport Security)