what are the best practises for hiding all php errors? As I don't want ERRORS to show to the user.
I've tried using the .htacess by putting the code php_flag display_errors off in there, but it returns me a 500 error.
Are there any other methods that will hide all errors?
PHP has a configuration directive intended exactly for that, called display_errors. Like any other configuration setting, it's best to be set in php.ini. But in case you don't have access to this file, you can set it right in PHP code
to Hide All Errors:
ini_set('display_errors', 0);
to Show All Errors:
ini_set('display_errors', 1);
While ERROR_REPORTING value, which is often mistakenly taken responsible for hiding errors, should be kept at E_ALL all the time, so errors could be logged on the server.
Per the PHP documentation, put this at the top of your php scripts:
<?php ini_set('display_errors', 0); ?>
If you do hide your errors, which you should in a live environment, make sure that you are logging any errors somewhere. How do I log errors and warnings into a file? Otherwise, things will go wrong and you will have no idea why.
In your php file just enter this code:
ini_set('display_errors', 0);
This will report no errors to the user. If you somehow want, then just comment this.
error_reporting = 0 in php.ini. But frankly, if you have a syntax error, that code shouldn't be in a live site anyway -- it'll never be able to work -- so it shouldn't matter.
error_reporting off and includes your actual script. as long as the parser does not complain about the file, that turns error_reporting off, you will be ok, even if the parsing of the included files fails.
To hide errors only from users but displaying logs errors in apache log
error_reporting(E_ALL);
ini_set('display_errors', 0);
1 - Displaying error only in log
2 - hide from users
Use PHP error handling functions to handle errors. How you do it depends on your needs. This system will intercept all errors and forward it however you want it Or supress it if you ask it to do so
The best way is to build your script in a way it cannot create any errors! When there is something that can create a Notice or an Error there is something wrong with your script and the checking of variables and environment!
If you want to hide them anyway: ini_set('display_errors', 0);
$_POST['stuff'] isn't defined. Even if you expect it not to be most of the time, and are just seeing whether it's there and truthy. And isset($_POST['stuff']) && $_POST['stuff'] is too wordy for most cases. @$_POST['stuff'] works, but everybody seems to think it's evil.
isset-check you can define a function or a method ;)You'd need to edit the php.ini file.
There is a section on Error handling and logging. You should carefully read it and then set your values.
If you want to indiscriminately hide all values, you can set error reporting to none:
error_reporting = ~E_ALL
php_flagonly works if PHP is running as an Apache module. If you're running it via CGI or something, Apache doesn't know anything about that directive, so it throws an error.