#28349 [Opn->Bgs]: display_errors = off is ignored
ID: 28349 Updated by: [EMAIL PROTECTED] Reported By: jonathan at nationaldirect dot net -Status: Open +Status: Bogus Bug Type: Output Control Operating System: Win2k PHP Version: 4.3.6 New Comment: You just need to setup your server correctly, this has nothing to do with a "security" problem. Not a bug in PHP -> bogus. Previous Comments: [2004-06-07 17:17:48] jonathan at nationaldirect dot net I still think we need to put a warning somewhere because this is a potential security risk. Maybe we could let the user choose what to do by putting a setting in the php.ini file. [2004-06-07 17:07:11] jonathan at nationaldirect dot net On a production machine we cannot display errors to the end user because of the privacy and security risks. I think if we put a comment in the php.ini file to warn windows users of this issue and also quietly discard the errors if the file cannot be written to then it would be more acceptable. [2004-06-07 17:03:55] [EMAIL PROTECTED] Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php When you specified a log file that can not be written to, it is better to display the error rather then hide it and lose the record that is had every occurred. [2004-06-07 17:01:59] jonathan at nationaldirect dot net I have figured it out. This is not a php bug but rather a Windows folder security settings issue. Something in IIS is setting default to deny write access to some users like "Web Anonymous Users" and "IUSR_computername" accounts. If the user "Web Anonymous Users" is denied write access to the folder then the output will be directed to the webpage. When I manually remove DENY WRITE ACCESS from the folder where the phperrors.log file is to be then all is ok. I still think this is a bug because it still allows erros to display even when display_errors = off. [2004-06-07 16:13:33] jonathan at nationaldirect dot net I just upgraded to php 4.3.7 on the off chance the bug was fixed but no luck. It exists there too. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/28349 -- Edit this bug report at http://bugs.php.net/?id=28349&edit=1
#28349 [Opn->Bgs]: display_errors = off is ignored
ID: 28349 Updated by: [EMAIL PROTECTED] Reported By: jonathan at nationaldirect dot net -Status: Open +Status: Bogus Bug Type: Output Control Operating System: Win2k PHP Version: 4.3.6 New Comment: Thank you for taking the time to write to us, but this is not a bug. Please double-check the documentation available at http://www.php.net/manual/ and the instructions on how to report a bug at http://bugs.php.net/how-to-report.php When you specified a log file that can not be written to, it is better to display the error rather then hide it and lose the record that is had every occurred. Previous Comments: [2004-06-07 17:01:59] jonathan at nationaldirect dot net I have figured it out. This is not a php bug but rather a Windows folder security settings issue. Something in IIS is setting default to deny write access to some users like "Web Anonymous Users" and "IUSR_computername" accounts. If the user "Web Anonymous Users" is denied write access to the folder then the output will be directed to the webpage. When I manually remove DENY WRITE ACCESS from the folder where the phperrors.log file is to be then all is ok. I still think this is a bug because it still allows erros to display even when display_errors = off. [2004-06-07 16:13:33] jonathan at nationaldirect dot net I just upgraded to php 4.3.7 on the off chance the bug was fixed but no luck. It exists there too. [2004-06-07 15:57:35] jonathan at nationaldirect dot net I also have error_log = php_errors.log to log errors and stuff to a file in the same folder as the script. [2004-06-07 15:55:27] jonathan at nationaldirect dot net I have done some more investigation and this is what I found. If I set error_reporting = E_ALL & ~E_NOTICE instead of error_reporting = E_ALL the bug goes away. It seems that only the Notices are slipping through to the webpages. [2004-06-05 01:00:03] php-bugs at lists dot php dot net No feedback was provided for this bug for over a week, so it is being suspended automatically. If you are able to provide the information that was originally requested, please do so and change the status of the bug back to "Open". The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/28349 -- Edit this bug report at http://bugs.php.net/?id=28349&edit=1
