| PHP error handling security |
I've noticed that the full path to a php file is shown when an error is displayed. This is not supposed to happen.
When I check the Exceptions class, the following is mentioned: "For safety reasons we don't show the full file path in non-CLI requests". But that only works for the variables available in the error templates. Is it possible to show only the rendered error messages, and not the php rendered error message added at the top. Disabling the error reporting is not the solution. |
| Messages In This Thread |
|
PHP error handling security - by Diederik Van Hoorebeke - 11-13-2015, 07:31 AM
RE: PHP error handling security - by Narf - 11-13-2015, 11:35 AM
RE: PHP error handling security - by kenjis - 11-13-2015, 03:32 PM
RE: PHP error handling security - by acemary - 12-20-2015, 02:41 AM
RE: PHP error handling security - by dibyendudas - 12-20-2015, 08:59 AM
RE: PHP error handling security - by InsiteFX - 12-21-2015, 01:43 PM
RE: PHP error handling security - by amargow - 09-12-2018, 12:09 AM
|
