Re: html_errors default settings

Am 23.06.2011 21:47, schrieb Derick Rethans: > Hi! > > In PHP 5.2 and earlier, the html_errors setting has always been on by > default (in the code, in php.ini-dist and in php.ini-recommended). Since > PHP 5.3, it's still on by default in the code and in > php.ini-development, but php.ini-production has it off with the > following comment: > > ; When PHP displays or logs an error, it has the capability of inserting html > ; links to documentation related to that error. This directive controls whether > ; those HTML links appear in error messages or not. For performance and security > ; reasons, it's recommended you disable this on production servers. > > Right now, the docref is shown whenever html_errors=1, even if > docref_root is not set (empty string). > > Sadly, this means that most distributions have it off in their php.ini. > > Although the setting does influence the HTML links as well, it's by no > means a security (or performance) issue and it makes using PHP in > development a lot more annoying (because distributions have the > "production" version of php.ini, and not the "development" one. > It causes many many questions being asked why Xdebug doesn't show the > pretty errors and having it odd serves nothing. (In production, you > should set display_errors off) i would say it is the absolutely minmium requirement for anyone configuring a server oder dvelop server-side scripts to know basic configurations so if this is a problem for somebody he should consider not develop software

Attachment: [application/pgp-signature] OpenPGP digital signature signature.asc