error_reporting(0);
Quote
cap97 wrote:
Actually, I like the errors, as it's better to let me know what's happening rather than have the page just not work. But on other sites where I've forced globals off, I do not get these error messages from PHP, so I was curious if it was something PHPFusion created. But it's not, it's error_reporting(E_ALL) called in maincore.php. Thanks all!
Quote
Wooya wrote:
[error_reporting(E_ALL) in maincore is for RC purposing. In final release this code will deissapear. Generally: production scripts shouldn't report any errors even if their occurs. This is potentialy dangerous for hackers. Read my article about PF security (it not covers all security issues but most important). PHP is great scripting language but also is more open for security issues than others, where rules about vars declaring are must ...
Quote
muscapaul wrote:Quote
Wooya wrote:
[error_reporting(E_ALL) in maincore is for RC purposing. In final release this code will deissapear. Generally: production scripts shouldn't report any errors even if their occurs. This is potentialy dangerous for hackers. Read my article about PF security (it not covers all security issues but most important). PHP is great scripting language but also is more open for security issues than others, where rules about vars declaring are must ...
I think I will leave it in my maincore. It forces me to do it properly.
Quote
muscapaul wrote:Quote
Wooya wrote:
[error_reporting(E_ALL) in maincore is for RC purposing. In final release this code will deissapear. Generally: production scripts shouldn't report any errors even if their occurs. This is potentialy dangerous for hackers. Read my article about PF security (it not covers all security issues but most important). PHP is great scripting language but also is more open for security issues than others, where rules about vars declaring are must ...
I think I will leave it in my maincore. It forces me to do it properly.
if (iSUPERADMIN) {
error_reporting(E_ALL);
} else {
error_reporting(0);
}
Quote
muscapaul wrote:
LoL, it is for my localhost development sites only. ;)
Category Forum
Locales Forum - 8Labels
None yet
Statistics
5 participants
Notifications
You are not receiving notifications from this thread.
Related Questions