Re: note 8878 added to Filesystem Security

dave@technopagan.org wrote: > > This may not be the best place to inquire about such things... Is there an option to disable > the full-path notation of PHP's error messages (Y'know, the "Parse error in > /home/httpd/htdocs/foo/bar.php on line 42" type messages.) Reporting only "Parse error > in bar.php on line 42" would usually yield the same amount of useful information to the > developer, and would expose a little bit less information to a potential site cracker. > > http://www.php.net/manual/security.filesystem.php It's the right place for such things, other than queries being *forbidden* from the errata (no questions, only answers... point being that we try to keep support issues out of the errata, to keep it from being a massive buletin board). To answer your question, somewhat, you can override it by either disabling error_reporting on the live site (as in, code and debug on one server, publish on another) or ny writing your own error reporting. I'll add this info to the security section, considering that it's one of the issues that inspired me to add to it. :-) -ronabop@php.net -- Brought to you from iBop the iMac, a MacOS, Win95, Win98, LinuxPPC machine, which is currently in MacOS land. Your bopping may vary.