Re: [PHP-DEV] [PATCH] Add configuration value to enable/disable stack trace logging

2019-06-17 Thread Thomas Lamy
Am 17.06.19 um 21:27 schrieb Björn Larsson: Den 2019-06-17 kl. 19:10, skrev Erik Lundin: Background: The latest version of PHP seems to handle fatal errors as exceptions which results in stack traces being logged. Stack traces can potentially contain sensitive information and should not be log

Re: [PHP-DEV] [PATCH] Add configuration value to enable/disable stack trace logging

2019-06-17 Thread Erik Lundin
Joe’s solution seems to fix the problem. I havent tested it yet though. I would have been forced to patch this reguardless before bringing php 7+ into production. His fix would be enough to protect the data provided proper config files are enforced. Thanks Joe! Hopefully this will be merged wh

Re: [PHP-DEV] [PATCH] Add configuration value to enable/disable stack trace logging

2019-06-17 Thread Björn Larsson
Den 2019-06-17 kl. 19:10, skrev Erik Lundin: Background: The latest version of PHP seems to handle fatal errors as exceptions which results in stack traces being logged. Stack traces can potentially contain sensitive information and should not be logged in a production environment. Test code

[PHP-DEV] [PATCH] Add configuration value to enable/disable stack trace logging

2019-06-17 Thread Erik Lundin
Background: The latest version of PHP seems to handle fatal errors as exceptions which results in stack traces being logged. Stack traces can potentially contain sensitive information and should not be logged in a production environment. Test code: Jun 17 15:58:01 server php[29650]: PHP Fatal