Every check ยท Exposed files
Laravel logs
What it checks
/storage/logs/laravel.log
Why it matters
It shows the site's errors with their stack traces, and often the data and queries behind them.
How to fix it
- Point the web server at Laravel's public folder, not the project's own, so nothing else is served.
- Change any password or key the log shows.
Check a site for this and everything else: snag.page. More on exposed files: Exposed files Keys in scripts Git repository Environment files wp-config.php copies Database dumps AWS and npm credentials Private SSH keys Editor upload settings Spring Boot actuator Terraform state Git credentials Kubernetes config phpinfo() pages Debug panels Subversion and Mercurial Backup archives Password files PHP error logs ELMAH error logs Database admin pages Apache server-status Go's pprof docker-compose.yml Directory listings .DS_Store files WordPress users