[Phpmyadmin-devel] GSoC 2014 Error reporting for php errors

[Michal Čihař]

Hi

Dne Tue, 11 Mar 2014 09:06:15 +0200
Mohamed Ashraf <mohamed.ashraf.213 at gmail.com> napsal(a):

> My name is Mohamed Ashraf. I was a GSoC student last year and I worked on
> the original version of the error reporting server. I would like to apply
> to be the student doing this idea. I just wanted to ask a few questions. Do
> you want to submit only fatal errors or any kind of error or warning to be
> submittable.

phpMyAdmin does already collect PHP errors, so all which are being
collected right now.

> Also can I see an example of a PHP error you expect might
> occur that you want the user to be able to submit.

For example undefined variable.

> Finally how much
> information do you want the user of phpMyAdmin who submits the PHP error to
> know. PHP errors may be sensitive and may give extra information to
> attackers so I do not think that it is wise to give them to the user but
> that information may help the developers find the problem faster so I think
> the developers should have access to some potentially sensitive information.

I don't think we should include anything potentially sensitive in the
error report, this would cause us only bad reputation.

-- 
	Michal Čihař | http://cihar.com | http://blog.cihar.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.phpmyadmin.net/pipermail/developers/attachments/20140314/921c01cf/attachment.sig>