Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:53551
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain thelounge.net designates 91.118.73.15 as permitted sender)
Message-ID: <4E03A9EE.8080902@thelounge.net>
Date: Thu, 23 Jun 2011 23:02:38 +0200
Organization: the lounge interactive design
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.18) Gecko/20110621 Fedora/3.1.11-1.fc15 Lightning/1.0b3pre Thunderbird/3.1.11
MIME-Version: 1.0
To: internals@lists.php.net
References: <alpine.DEB.2.02.1106231940340.3774@whisky>
In-Reply-To: <alpine.DEB.2.02.1106231940340.3774@whisky>
OpenPGP: id=7F780279;
	url=http://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enig438EF4AF35FE71C91AA8C902"
Subject: Re: [PHP-DEV] html_errors default settings
From: h.reindl@thelounge.net (Reindl Harald)

--------------enig438EF4AF35FE71C91AA8C902
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable



Am 23.06.2011 21:47, schrieb Derick Rethans:
> Hi!
>=20
> In PHP 5.2 and earlier, the html_errors setting has always been on by=20
> default (in the code, in php.ini-dist and in php.ini-recommended). Sinc=
e=20
> PHP 5.3, it's still on by default in the code and in=20
> php.ini-development, but php.ini-production has it off with the=20
> following comment:
>=20
> ; When PHP displays or logs an error, it has the capability of insertin=
g html
> ; links to documentation related to that error. This directive controls=
 whether
> ; those HTML links appear in error messages or not. For performance and=
 security
> ; reasons, it's recommended you disable this on production servers.
>=20
> Right now, the docref is shown whenever html_errors=3D1, even if=20
> docref_root is not set (empty string).
>=20
> Sadly, this means that most distributions have it off in their php.ini.=
=20
>=20
> Although the setting does influence the HTML links as well, it's by no =

> means a security (or performance) issue and it makes using PHP in=20
> development a lot more annoying (because distributions have the=20
> "production" version of php.ini, and not the "development" one.
> It causes many many questions being asked why Xdebug doesn't show the=20
> pretty errors and having it odd serves nothing. (In production, you=20
> should set display_errors off)

i would say it is the absolutely minmium requirement for anyone configuri=
ng
a server oder dvelop server-side scripts to know basic configurations

so if this is a problem for somebody he should consider not develop softw=
are


--------------enig438EF4AF35FE71C91AA8C902
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk4Dqe4ACgkQhmBjz394AnnuGgCfVv9x/VYD+p/emTTNCibxgS/n
nQgAnRk2Nnpa6VytgRcJTkQQe1EWnysO
=909W
-----END PGP SIGNATURE-----

--------------enig438EF4AF35FE71C91AA8C902--