On Thu, Mar 10, 2005 at 09:33:19AM +0100, Alban browaeys wrote:
> >For the record:
> >
> > ; Print out errors (as a part of the output).  For production web sites,
> > ; you're strongly encouraged to turn this feature off, and use error logging
> > ; instead (see below).  Keeping display_errors enabled on a production web 
> > site
> > ; may reveal security information to end users, such as file paths on your 
> > Web
> > ; server, your database schema or other information.
> > display_errors = On
> 
> So it does, what is your personal view about this ? 
I accept that someone else has made the decision to set

  display_errors = On

by default.  I imagine that this has been discussed, but I'm not sure
where (there's no php list that I can see).  

> As a php developper i would say that default should not be the debug
> mode, would you reassign it to php ?
Presumably, over the course of developing a PHP application on Debian,
a developer would get at least one error, which would alert them to
the fact that this is set as such.

I think it is fair to assume that php developers and webserver admins
should both be aware of the existence of this option.

However, one could argue that J. User is neither of the above, and may
well install one of Debian's php applications (say, phpbb2) without
being aware of it.

Justin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to