Closed coldwaterq closed 9 years ago
changing "debug": true, to "debug: false, in /config/cnf/default.json on the production server should resolve the issue I believe.
hmm yea, I probably enabled when trying to debug something and forgot to turn it off, thanks!
For security reasons it is best to disable full stack traces in the production version of the site.
For example requesting http://www.gw2spidy.com/item/69774 returns
This tells an attacker that you are running php, that the website is served from /var/sandbox/gw2spidy/. A great deal of folder structure is displayed, and a bit of how the code operates is disclosed from this one request. Using this with other errors could divulge security vulnerabilities that would otherwise not be known.