Which PHP setting must be disabled in production to avoid leaking stack traces?
- A log_errors
- B display_errors
- C error_reporting
- D memory_limit
Answer
display_errors
display_errors should be off and log_errors on, so failures are recorded for developers without being shown to users or attackers.





