Menu

#4 Less details in error (security)

-current
closed
None
5
2005-01-09
2004-01-27
No

When an error occurs a lot of information about the
server and environment are output. I would like to see
an option to not show the server and env sections of
the error report (if output to web - I have no problem
with these being output to a file on the server as long
as the file is not publicly accessible).

There is a lot of information in these sections that would
aid a hacker or spamer.

Discussion

  • Anonymous

    Anonymous - 2005-01-09
    • milestone: --> -current
    • assigned_to: nobody --> ikromin
    • status: open --> closed
     
  • Anonymous

    Anonymous - 2005-01-09

    Logged In: YES
    user_id=848322

    This has been resolved in -current with the
    OU_ERROR_FULL_LOG constant. If set to false, it will not
    show any of the extended variables/information.

     

Log in to post a comment.

MongoDB Logo MongoDB