12-02-2016, 08:56 PM
(This post was last modified: 12-02-2016, 08:57 PM by alphabeta35.)
hi Ben/Shannon
i just received a MySql error as i tried to open this page and the error information also included the plain sql query that is being run. this is very dangerous and is giving valuable information to a hacker who wants to attack the forum software and can lead to personal info being leaked to the attacker, besides many other things.
i am sure there is a way to disable detailed error messages and just give basic error response in forum settings or web server settings. i think that setting should be enabled to maximize security.
i just received a MySql error as i tried to open this page and the error information also included the plain sql query that is being run. this is very dangerous and is giving valuable information to a hacker who wants to attack the forum software and can lead to personal info being leaked to the attacker, besides many other things.
i am sure there is a way to disable detailed error messages and just give basic error response in forum settings or web server settings. i think that setting should be enabled to maximize security.
