Is there any way to stop MediaWiki from displaying information about the database when there is a database error?
Currently, if a database error occurs, the name of the database as well as the database user name are displayed in the error message. This seems like a potential security risk. I don't know if i need to change something in mediawiki or with my host to hide this information in error messages.
thanks
a@kid wrote:
Is there any way to stop MediaWiki from displaying information about the database when there is a database error?
Currently, if a database error occurs, the name of the database as well as the database user name are displayed in the error message. This seems like a potential security risk. I don't know if i need to change something in mediawiki or with my host to hide this information in error messages.
Hello,
SQL errors should be hidden by default with the parameter:
$wgShowSQLErrors = false;
Unless you have explicitly set it to true in your LocalSettings.php, no error message should be shown. If there is any, it most probably a bug in the software.
cheers,
mediawiki-l@lists.wikimedia.org