Lazycoder

DevDays2004 – bad error messages and security

So I’m browsing the forums at a web site and I get a database error. What I saw, no user should ever, ever see at your site. Something went wrong with the database, there were too many connections for the database to handle. So the error page tells me this and then spits out THE ENTIRE SQL STRING that the page was trying to execute. You should never allow the structure of your database to be shown on the web. Click on the image for a larger version.