automate the removal of these sensitive files during deployment?
The presence of "shop install" in the page content or URL suggests these files may still be live. inurl index php id 1 shop install
An attacker could run the install script again, potentially wiping the existing database or pointing the site to a new database they control. automate the removal of these sensitive files during