http://www.perlmonks.org?node_id=420943


in reply to Re: A New Lesson For My CGI Course
in thread A New Lesson For My CGI Course

"Why should you remove fatalsToBrowser in production? I didn't immediately make the connection when I first heard it and I'd been programming webapps for over a year by then ..." What I've always heard is "because an error message may give an 'evil hacker type' too much information". Someone else can probably elaborate as to how valid that is, I don't do much CGI/web stuff. (A rails app every now and then, that's it).

Replies are listed 'Best First'.
Re^3: A New Lesson For My CGI Course
by dragonchild (Archbishop) on Jan 10, 2005 at 14:32 UTC
    That is the exact reason, but it's a reason that isn't immediately obvious to many people. That's why I'm suggesting Brother Ovid make it explicitly clear as to the benefit.

    Being right, does not endow the right to be rude; politeness costs nothing.
    Being unknowing, is not the same as being stupid.
    Expressing a contrary opinion, whether to the individual or the group, is more often a sign of deeper thought than of cantankerous belligerence.
    Do not mistake your goals as the only goals; your opinion as the only opinion; your confidence as correctness. Saying you know better is not the same as explaining you know better.