TECNOAMBASSADOR · PRESTASHOP MODULE
Tecno Scanner
Scans your modules and your configuration for vulnerabilities, risky code and exploitable errors.
|
| An outdated module, a forgotten file on your server or a weak configuration can be an attacker's way in. Tecno Escáner reviews your installed modules for known vulnerabilities and suspicious code, checks your site's configuration and sums it all up in a security score from 0 to 100. It only reads your files: it doesn't modify anything. |
| 🛡️ Score 0 to 100 ⏰ Automatic scan 🌎 English and Spanish |
What can you do?
|
| |
🛡️ Security score
- A score from 0 to 100 that sums up your store's state at a glance.
- It is calculated from confirmed signals: medium and low findings are for review and barely subtract.
- Risk summary: how many high, medium and low findings there are.
- “Scan now” button to check whenever you want.
|
|
| |
| |
🔍 Analysis of your modules' code
- Reviews each module's files looking for dangerous patterns, such as backdoors (webshells), command execution, code execution, insecure deserialization, file inclusion, file writing and file uploads.
- It also detects unsanitized SQL queries, visitor data displayed without escaping (XSS), disabled SSL verification, a forgotten phpinfo, passwords with weak hashes and obfuscated code.
- Each finding has its level: high (strong signal, possible malware or serious flaw), medium (suspicious pattern to review by hand) or low (informational).
- In official PrestaShop modules, medium-level findings are shown as low, to avoid false alarms.
- Flags files modified in the last days you choose (from 1 to 90), useful to spot suspicious changes.
|
|
| |
| |
🆔 Known vulnerabilities
- Compares the version of each installed module against a list of known vulnerabilities.
- Each entry states the CVE code, the level, the fixed version and a link to read more.
- Its own list is included in the module and, optionally, a remote list that you specify (https address), to keep it always up to date.
- The remote list is temporarily stored in your store's cache, and if it doesn't respond the last copy is used.
|
|
| |
| |
⚙️ Site configuration check
- Versions of PrestaShop and PHP: warns if they are outdated.
- Development mode turned on, errors visible on screen and allow_url_include enabled.
- SSL: whether it is turned on and whether it is used across the whole store.
- install folder still present on the server.
- Administration folder with a default name (admin, administrator...).
- Files that shouldn't be visible: .git, .svn, .env, .htpasswd, diagnostic files (phpinfo.php, info.php, test.php...) and forgotten backups in the root (.sql, .zip, .bak...).
- PHP files inside upload folders (img, upload, download), a typical sign of a compromised site.
- Write permissions open to anyone on the configuration, the modules and the overrides.
|
|
| |
| |
📈 Clear results with history
- Modules with the most risk: shows you first where it is worth looking.
- Score evolution: chart with the latest scans, to see whether your store is getting better or worse.
- List of analyzed modules, with filters by level: all, high, medium, low and no findings.
- Each finding states which module it is in and what type it is.
|
|
| |
| |
⏰ Automatic scan and email alerts
- An address protected by a secret key, which you schedule in your hosting's cron (for example, once a day).
- If the scan finds high risks or known vulnerabilities, you get an alert email with the score and the modules with the most findings.
- Alert email address of your choice (by default, your store's). Email in English and Spanish.
- Every scan is saved in the history, whether manual or automatic.
|
|
| |
| |
⚙️ A control panel made to fit you
- Switch to turn the module on or off.
- Header showing the status (active or inactive) and the module version.
- Everything on a single screen: score, summary, modules with the most risk, evolution, site configuration, settings and module list.
- Panel available in English and Spanish, with an Auto / ES / EN selector.
|
|
| |
✅ Benefits
- You find out about a security problem before someone else exploits it.
- A single score to understand your store's state.
- It only reads your files: nothing is modified or deleted.
- Scheduled scans with an email notice, without having to remember.
|
| |
Requirements
- PrestaShop 1.7 or higher.
- For the automatic scan: cron tasks on your hosting and email sending enabled in PrestaShop.
- Optional: internet access from the server, to use a remote vulnerability list.
- Important: the result is a guide. An automatic analysis can give false positives and doesn't detect every flaw, and it doesn't replace a professional audit.
- Uninstalling the module deletes the scan history.
|
