Blog Documentation Book a Demo
Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

forum revealing webhosting root folder URL

amiami
edited October 2008 in Vanilla 1.0 Help
I am new to vanilla. I installed it here at www.allowmeinside.com with a few extensions. There is only 2 members in the forum. I saw an error when I visit this page http://www.allowmeinside.com/account/3/ The page shows my webhosting root folder URL which is unsafe. Kindly tell me how to hide this

Comments

  • MinisweeperMinisweeper New
    I think if you open appg/headers.php and change: error_reporting(E_ALL); to error_reporting(E_NONE); that should do the job. But it doesnt strike me as being particularly 'unsafe'.
  • DinoboffDinoboff
    it is really your job (or your provider's) to make sure that display of error is disable on your production server. However, we will try to make it easy to set the php's error level and display error settings. A discussion is already open on the bug tracker: http://lussumo.com/bugs/discussion/107/remove-display-of-php-error-messages-and-vanilla-fatal-error/
  • amiami
    Thanks Minisweeper, now it shows a decent message "the user cannot be found" in header. Thanks Dinoboff for adding it in bug tracker.
This discussion has been closed.