SitePoint Sponsor

User Tag List

Results 1 to 3 of 3
  1. #1
    SitePoint Zealot Cheeser's Avatar
    Join Date
    Nov 2003
    Location
    Washington, DC
    Posts
    126
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    The perils of /error_log

    I was recently FTP'ing newly changed files onto my web server when I noticed something which I previously overlooked. I see that there are little files entitled "error_log" without any sort of file extension. Of course I know what it is, an error log of all encountered server-side errors. I look at it and it has all the whacky parse errors we all know and love (sarcasm there ), but wait... There are listings of file names there, file names I don't want casual internet-goers to see. I'm curious and type in http://mydomain.com/error_log and sure enough the errors and their pages are all there...

    So what to do? Simple. Edit your .htaccess file (or get your control panel to do it for you) to redirect your /error_logs to a different page. I don't know of any repercussions to this method so please do alert me if there are any.

    Cheers!

  2. #2
    AdSpeed.com Son Nguyen's Avatar
    Join Date
    Aug 2000
    Location
    Silicon Valley
    Posts
    2,241
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    error_log file is created by php when something is wrong and php.ini set to log the error.
    See php documentation:
    http://www.php.net/manual/en/ref.errorfunc.php
    - Son Nguyen
    AdSpeed.com - Ad Serving and Ad Management Made Easy

  3. #3
    SitePoint Zealot Cheeser's Avatar
    Join Date
    Nov 2003
    Location
    Washington, DC
    Posts
    126
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Quote Originally Posted by Son Nguyen
    error_log file is created by php when something is wrong and php.ini set to log the error.
    See php documentation:
    http://www.php.net/manual/en/ref.errorfunc.php
    I realize, this thread was intended to inform people that their error log is publicly accessible and anyone has the ability to view it. I don't want people to see any errors occuring within my site and I'm sure that other developers don't either.


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •