mld11 Posted October 27, 2009 Posted October 27, 2009 Could there be an feature in the Security Center of IP.Board that allows an administrator to hide the ACP Link from PHP Errors? It's kind of redundant when you get one and almost all the time it shows the acp directory. What's the point in renaming it if all someone has to do is stick around and wait for an error.
bfarber Posted October 27, 2009 Posted October 27, 2009 IPB doesn't have much control over php errors. Generally, the best security practices recommend that you disable display_errors in php.ini, and instead have errors log to an error log file. That way the paths aren't exposed if someone gets a PHP error.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.