You should turn off custom errors

If you have found a bug, or have a suggestion/comment then leave it here

Post » Wed Mar 11, 2015 10:51 pm

This morning when the site was down (due to a transaction log being full) it was exposing details about your site in the custom errors. These should generally (always in my opinion) be turned off for publicly facing sites.

Here's how to do this. Your web.config system.web node should contain the following:
<customErrors mode="RemoteOnly">

It removed the URL I included with some additional things to consider, I think this should work:

This page lists some other issues related to the web.config file:I've attached the two different errors I received, which expose:
1. You use IIS
2. The version of the .Net framework (bottom of Error2)
3. You use SQL Server
4. Some details about your SQL Server configuration

I'm not sure if phpBB would reflect this change in terms of what it exposes, that would require further testing.

Just letting you know.

You do not have the required permissions to view the files attached to this post.
Posts: 10
Reputation: 272

Post » Wed Mar 11, 2015 11:07 pm

also, funnily enough, the e mail adress of the webmaster according to the error is a noreply adress, which is something that might need a change..
Game design is all about decomposing the core of your game so it becomes simple instructions.
Posts: 2,123
Reputation: 17,200

Return to Website Issues and Feedback

Who is online

Users browsing this forum: No registered users and 1 guest