Security

Files and code on your site that anyone can read or abuse. 3 answers.

.env file exposed If yoursite.com/.env opens in a browser, your passwords and API keys are public. Block it, then change every secret in it. .git folder exposed If yoursite.com/.git/HEAD opens, your site's git repository is public. Block dot folders and check what the history contains. Outdated JavaScript library with known vulnerabilities Old versions of libraries like jQuery have published security holes. Find the version your pages load and update it.

More fix guides

Search everything →
Site down Error codes Cloudflare errors SSL and HTTPS Database Server WordPress Shopify WooCommerce Hosting Slow website Domain and DNS Email API JavaScript Broken features Getting help Website builders Headless CMS Frameworks Apps and backends

Not sure what's wrong with yours?

One click checks your site, and your Cloudflare if you connect it, and gives you a report of what's wrong and what to do. Your first report is free.

Run your free report