ID: 28349 User updated by: jonathan at nationaldirect dot net Reported By: jonathan at nationaldirect dot net -Status: Bogus +Status: Open Bug Type: Output Control Operating System: Win2k PHP Version: 4.3.6 New Comment:
On a production machine we cannot display errors to the end user because of the privacy and security risks. I think if we put a comment in the php.ini file to warn windows users of this issue and also quietly discard the errors if the file cannot be written to then it would be more acceptable. Previous Comments: ------------------------------------------------------------------------ [2004-06-07 17:03:55] [EMAIL PROTECTED] Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php When you specified a log file that can not be written to, it is better to display the error rather then hide it and lose the record that is had every occurred. ------------------------------------------------------------------------ [2004-06-07 17:01:59] jonathan at nationaldirect dot net I have figured it out. This is not a php bug but rather a Windows folder security settings issue. Something in IIS is setting default to deny write access to some users like "Web Anonymous Users" and "IUSR_computername" accounts. If the user "Web Anonymous Users" is denied write access to the folder then the output will be directed to the webpage. When I manually remove DENY WRITE ACCESS from the folder where the phperrors.log file is to be then all is ok. I still think this is a bug because it still allows erros to display even when display_errors = off. ------------------------------------------------------------------------ [2004-06-07 16:13:33] jonathan at nationaldirect dot net I just upgraded to php 4.3.7 on the off chance the bug was fixed but no luck. It exists there too. ------------------------------------------------------------------------ [2004-06-07 15:57:35] jonathan at nationaldirect dot net I also have error_log = php_errors.log to log errors and stuff to a file in the same folder as the script. ------------------------------------------------------------------------ [2004-06-07 15:55:27] jonathan at nationaldirect dot net I have done some more investigation and this is what I found. If I set error_reporting = E_ALL & ~E_NOTICE instead of error_reporting = E_ALL the bug goes away. It seems that only the Notices are slipping through to the webpages. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/28349 -- Edit this bug report at http://bugs.php.net/?id=28349&edit=1
