Backup or dump file reachable

Why it matters

Database dumps and backups often contain every user record.

How to fix it

Delete the file from public hosting and keep backups in private storage.

How we test it

Passive — runs in the free check, looks only at what a browser can see.