Website Checker / Forgotten files
Forgotten files on a website: database copies, passwords, source code
Whether service files that are often forgotten after updates and moves are open to anyone: the settings file with passwords (.env), the source code repository (.git), database dumps and site archives, copies of WordPress settings, phpinfo and server status pages, open file listings. We check up to 10 well-known addresses.
What the colours mean
- OK. None of the addresses we checked is open.
- Needs attention. Service pages or file listings are open — they tell attackers how the site is built.
- Problem. A file with passwords, a database copy, a site archive or the source code is open. Close it today.
Why it matters for your business
- A password file or database copy is a ready key to the site, email, customer database and payment settings.
- A leak of customer personal data is the site owner’s responsibility under GDPR.
- Attackers’ programs search for these files automatically, every day, on every site.
What you can do yourself
- Ask your developer or hosting provider to delete the files or block access to them.
- Then change every password and key the file may have contained: database, email, payment systems.
- Never keep site backups inside the site folder — only in separate protected storage.
What OLBO can do
Fixing the issues we found — from €390: we close access, remove the files and check again. Changing passwords is done by you or your developer.
Common doubts
Who would look for such files on our site?
Not people but programs: they automatically try these addresses on millions of sites every day. An open file is found within hours.
Are you hacking our site?
No. We open a few well-known addresses exactly as any visitor could, read only the first bytes to recognise the file type, and never show or store the content.
What this usually costs
Approximate prices from open sources — for orientation only.
| USA | $100–600 |
|---|---|
| Europe | $100–400 (UK) |
| OLBO | fixing the issues we found, from €390 |
Estimate: about 1–4 hours × average agency hourly rates (Clutch). Sources: Clutch «Web design pricing» (updated 21 September 2026). Prices vary with scope; OLBO prices are fixed after a free brief.