Display errors off problem?

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Chuck Anderson
    #1

    Display errors off problem?

    I have a public site that creates biorhtym charts using Php.

    I have put the following in my php.ini file in case of unforeseen
    errors/warnings:
    display_errors = Off
    display_startup _errors = Off
    log_errors = On
    error_log = php_error.log

    Every once in a while I get an entry in my Apache access log file from
    someone clicking on the link in a Php warning message - a warning that
    should not appear because of the above.

    Like, this warning:
    PHP Warning: mysql_connect() [<a
    href='function. mysql-connect'>functi on.mysql-connect</a>]: Access denied
    for user .......

    I get a 404 error when they click on the [bad] link to
    function.mysql-connect.

    Of course, I should find the bug that causes this and get rid of it, but
    how can that link appear on the page if I have display_errors = Off?

    What I think I'm really asking is; can display_errors be hacked somehow?

    And I guess I also have to ask, why is that bad link put into the
    warning message in the first place?

    --
    *************** **************
    Chuck Anderson • Boulder, CO
    http://www.CycleTourist.com

    *************** **************
    Tags: None
    • petersprc
      #2
      Re: Display errors off problem?

      Hi,

      Hrmm, if you haven't already maybe it might be good to verify that
      display_errors is truly off, by looking at the phpinfo() output
      (Configuration -PHP Core) on the same page that displays the error...

      Chuck Anderson wrote:
      I have a public site that creates biorhtym charts using Php.
      >
      I have put the following in my php.ini file in case of unforeseen
      errors/warnings:
      display_errors = Off
      display_startup _errors = Off
      log_errors = On
      error_log = php_error.log
      >
      Every once in a while I get an entry in my Apache access log file from
      someone clicking on the link in a Php warning message - a warning that
      should not appear because of the above.
      >
      Like, this warning:
      PHP Warning: mysql_connect() [<a
      href='function. mysql-connect'>functi on.mysql-connect</a>]: Access denied
      for user .......
      >
      I get a 404 error when they click on the [bad] link to
      function.mysql-connect.
      >
      Of course, I should find the bug that causes this and get rid of it, but
      how can that link appear on the page if I have display_errors = Off?
      >
      What I think I'm really asking is; can display_errors be hacked somehow?
      >
      And I guess I also have to ask, why is that bad link put into the
      warning message in the first place?
      >
      --
      *************** **************
      Chuck Anderson · Boulder, CO
      http://www.CycleTourist.com

      *************** **************

        Comment

        • Chuck Anderson
          #3
          Re: Display errors off problem?

          petersprc wrote:
          Hi,
          >
          Hrmm, if you haven't already maybe it might be good to verify that
          display_errors is truly off, by looking at the phpinfo() output
          (Configuration -PHP Core) on the same page that displays the error...
          >
          I hadn't bothered, but I just did and display_errors is Off.
          Chuck Anderson wrote:
          >
          >I have a public site that creates biorhtym charts using Php.
          >>
          >I have put the following in my php.ini file in case of unforeseen
          >errors/warnings:
          >display_erro rs = Off
          >display_startu p_errors = Off
          >log_errors = On
          >error_log = php_error.log
          >>
          >Every once in a while I get an entry in my Apache access log file from
          >someone clicking on the link in a Php warning message - a warning that
          >should not appear because of the above.
          >>
          >Like, this warning:
          >PHP Warning: mysql_connect() [<a
          >href='function .mysql-connect'>functi on.mysql-connect</a>]: Access denied
          >for user .......
          >>
          >I get a 404 error when they click on the [bad] link to
          >function.mys ql-connect.
          >>
          >Of course, I should find the bug that causes this and get rid of it, but
          >how can that link appear on the page if I have display_errors = Off?
          >>
          >What I think I'm really asking is; can display_errors be hacked somehow?
          >>
          >And I guess I also have to ask, why is that bad link put into the
          >warning message in the first place?
          >>
          >--
          >************** ***************
          > Chuck Anderson · Boulder, CO
          > http://www.CycleTourist.com
          >************** ***************
          >>
          >
          >

          --
          *************** **************
          Chuck Anderson • Boulder, CO
          http://www.CycleTourist.com

          Everyone's journey should be different,
          so that we all are enriched
          in new and endless ways
          *************** **************

            Comment

            Previous template Next
            Working...