in reply to Forgetting your good education
in thread Writing a perl quiz. Need advice.

I disagree with your disagreement :-)

Fatals to browser can reveal information that you do not want the users to see. The error message can potentially reveal information about your code that would allow a malicious user to exploit the bug that caused the error in nasty ways.

In production code you log the errors, but don't show them to use user.

Replies are listed 'Best First'.
Re: Forgetting your good education
by crenz (Priest) on Mar 08, 2003 at 14:06 UTC

    Okay, I agree that replacing fatalsToBrowser with something like fatalsToMyLogFile might be even better. But my point still is true :).

[reply]
      Uhm, isn't "fatalsToMyLogFile" default behaviour under just about every webserver there is? I only have (some) experience with apache and afaik fatals do end up in the error log on apache.
[reply]

        Yes, but not everyone has access to their webserver's error log file... (think accounts on most hosting providers)

[reply]

In Section Seekers of Perl Wisdom