display_errors

I am back to zenphoto and make a new installation of 1.4.4 beta.

I found that both the setup and admin overview warn me the display_errors is turn ON, but actually it is set by ini_set on purpose (beta?), maybe it should control in zenphoto.cfg

BTW, about the zenphoto.cfg, since I am using nginx, the htaccess is no effect. Though the setup have warned this, it is better to emphasize the zenphoto.cfg could be read on browser without proper setting.

Comments

  • acrylian Administrator, Developer
    You were absent? Glad you are back then!

    The 1.4.4 beta is still a dev build so the errors are always on. The final releases will not have that.

    I am not sure I understand you comment about zenphoto.cfg and htaccess. You don't need htaccess for Zenphoto at all. The config file is on purpose with that special suffix of course.
  • The htaccess in zp-data is to deny access from web. On nginx, I have to setup my deny public access rule, if I forget to do this, the public can read my zenphoto.cfg if they know where it is (/zp-data/zenphoto.cfg)

    So, a reminder in setup is better.
  • acrylian Administrator, Developer
    Please open a ticket on the GitHub issue tracker (NOT on the bugtracker!). Otherwise we will forget this as we don't test nginx or other servers at all. On Apache htaccess is standard and no server should not have this. Genereally selfhosters should know about these things...:-)
Sign In or Register to comment.