hi,
On Wed, Feb 5, 2014 at 12:01 PM, Yasuo Ohgaki <[email protected]> wrote:
> Hi Lester,
>
> On Wed, Feb 5, 2014 at 7:45 PM, Lester Caine <[email protected]> wrote:
>
>> If you look at the bulk of PHP users, they are using PHP via a hosting
>> service, who set up the 'production server' for them. When they install an
>> 'application', it's install section takes care of configuration. Then the
>> ISP changes PHP version and they get a white screen ... help ...
>>
>> At this point what PHP needs to supply as a minimum is just a 'php has
>> crashed please check log', but ideally we should be able to direct these
>> 'simple' users back to their installation section if that can handle the
>> problem. 95% of users would probably not understand what the difference
>> between a production and develop server is? Telling them they have no place
>> using PHP is not acceptable?
>>
>
> I think your comment is valuable.
> Under production environment, web apps should not display any internal data
> including PHP errors.
> However, it may be a good idea to have option for administrators to display
> some messages.
> Perhaps, INI like
>
> fatal_error_message = "Program had fatal error. Please consult XXXXXX"
>
> might be useful for ISPs admins and users.
ISPs admins (or any admins) can read logs, and will read logs. They do
check customers error logs to prevent flaws, issues, excessive
resource usages, etc. Panels and other user friendly systems provide
log viewers with alerts.
But the key point remains the same, no error should be displayed in
production (whatever hosting is used), this is well documented since
years. I have some hard time to understand why we keep having to
explain why. If the documentation needs improvements, then let try to
fix it. But adding yet another option to finally do something that we
try to prevent since years does not sound very appealing to me.
Cheers,
--
Pierre
@pierrejoye | http://www.libgd.org