Coder Social home page Coder Social logo

Please improve your exception handling about rbac HOT 7 OPEN

owasp avatar owasp commented on August 24, 2024
Please improve your exception handling

from rbac.

Comments (7)

abiusx avatar abiusx commented on August 24, 2024

You apparently don’t have PHP error reporting enabled. PHP RBAC is a library, not an application. A library is not allowed to generate output on its own.


Notice: This message is digitally signed, its source and integrity are verifiable.
If you mail client does not support S/MIME verification, it will display a file (smime.p7s), which includes the X.509 certificate and the signature body. Read more at Certified E-Mail with Comodo and Thunderbird in AbiusX.com

On Mar 15, 2014, at 6:04 AM, udf2457 [email protected] wrote:

At the moment, your code appears to make no attempt whatsoever to catch errors... after entering database details on the first install.php screen and clicking submit, I was greeted by a white screen.

No on-screen error messages, only found out more once I'd dug through the PHP logs.

PHP message: PHP Warning: chmod(): Operation not permitted in /usr/XXXX/www/lib/PhpRbac/install
.php on line 286
PHP message: PHP Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[HY000] [14] unable to
open database file' in /usr/XXXX/www/lib/PhpRbac/src/PhpRbac/core/setup.php:51

β€”
Reply to this email directly or view it on GitHub.

from rbac.

udf2457 avatar udf2457 commented on August 24, 2024

Actually I disagree. If you are specifically creating an install.php file which is user-interactive, you should cope with errors properly as part of that interaction !

from rbac.

abiusx avatar abiusx commented on August 24, 2024

ok then we shall do in the next release :D


Notice: This message is digitally signed, its source and integrity are verifiable.
If you mail client does not support S/MIME verification, it will display a file (smime.p7s), which includes the X.509 certificate and the signature body. Read more at Certified E-Mail with Comodo and Thunderbird in AbiusX.com

On Mar 15, 2014, at 2:00 PM, udf2457 [email protected] wrote:

Actually I disagree. If you are specifically creating an install.php file which is user-interactive, you should cope with errors properly as part of that interaction !

β€”
Reply to this email directly or view it on GitHub.

from rbac.

jburns131 avatar jburns131 commented on August 24, 2024

I'll be sure to work on that, thanks for the feedback :-)

from rbac.

udf2457 avatar udf2457 commented on August 24, 2024

Well, you know, someone has to keep an eye on you crazy coders. ;-)

from rbac.

jburns131 avatar jburns131 commented on August 24, 2024

;-)

from rbac.

jburns131 avatar jburns131 commented on August 24, 2024

@udf2457: Can you please put this line of code on the top of the 'install.php' file:

<?php error_reporting(-1); ?>

This will turn error reporting up to it's highest level. Please report the errors you are receiving.

Thank you.

from rbac.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.