Hi Ben,

> John, presumably I can leave the error reporting on - 
> but pipe it into a file if i wanted, rather than 
> displaying on screen, and then redirect the user to 
> another page?

Of course you can - I generally have my pages send me email when they throw
an error, but that's because I'm really lazy and I can't be bothered to go
and check log files all the time <g>

It's just not a stunning idea to display an error messages that give away
out any information you could hold back - one of the starting points for an
attacker is to try and mess up your query strings, and if you're merrily
telling them exactly what the problem is, you're helping them out :-)


PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to