Shopping Cart
You know what's wrong. Now you can fix it.
The free WSC Security Check shows where your shop is vulnerable: a leaking log folder, a backup left in the web root, a debug mode left switched on. Fixing them, however, was up to you: FTP, editing .htaccess, file permissions, and the worry of breaking something along the way.
WSC Security Check Pro takes this over. Click "Fix it" next to a finding, and the module makes a backup, applies the fix and checks from the outside that the problem is really gone. If you don't like the result, undo it with one click.
Why it's worth it
🛠️ One click instead of an afternoon of manual work
Start the fix right next to the finding. No hunting for files over FTP, no need to know what each .htaccess rule does: the module does it for you and tells you what it changed.
↩️ Backup and undo for every fix
A backup is made before every fix, and every step is logged. Undo it with one click – undoing never overwrites anything that has changed since the fix. If the server returns an error after a rule, the module reverts the fix immediately on its own.
✅ It doesn't just fix, it verifies
After the fix, the module checks from the outside, as a visitor would, that the file really can't be downloaded, the folder isn't listed and the header is present. If the hosting ignores the setting, the fix is marked "not confirmed" and the module tells you what to ask your hosting provider.
🧩 PrestaShop doesn't overwrite it
Rules written to .htaccess are placed before PrestaShop's own block, so they survive when PrestaShop regenerates the file.
What it fixes
- 🔒 Leaking files: locks module log and export folders, quarantines backups, archives and error logs left in the web root, hides .env and .git files, disables directory listing and PHP execution in image folders.
- 🛡️ Server: adds missing security headers and hides the PHP version.
- ⚙️ Shop settings: turns off debug mode, long-unused employee accounts and unnecessary webservice keys, and quarantines a leftover install folder.
- 🧹 Old PrestaShop files: quarantines unchanged core PHP files left over from earlier versions, skipping those an override or a module relies on.
- 📂 File permissions: sets world-writable files and folders to safe permissions.
The module never disables your own account or the last active SuperAdmin account.
Continuous monitoring, even when you're not looking
- 🌙 Every night the full scan runs.
- 📧 You get an e-mail if the security score drops by at least 5 points, a new high or critical sign of compromise appears, or a new vulnerability affects your shop.
- 🔄 The vulnerability list is updated daily, so you hear about new issues in time.
Good to know
- The module doesn't update or delete modules: it tells you which version fixes the issue, and you decide on the update.
- The check looks for known problems. It doesn't guarantee that the shop is completely secure, but it removes the fixable findings with one click.
- It requires the free WSC Security Check module, which Pro builds on.
Technical details
- PrestaShop 1.7.8 – 9.1
- PHP 7.2 or newer
- Requires: WSC Security Check 1.1.0 or newer (free)
- No overrides
- Hungarian and English back office
- The nightly scan needs a scheduled task (cron)
- Updates via the Webstart Updater module; licence for one shop, with 1 year of updates and support
Knowing about security issues isn't enough. Pro removes the fixable ones with one click and monitors your shop every night.