[support] How can I turn detailed error messages off?
William Smith
william.darren at gmail.com
Sun May 22 12:12:43 UTC 2011
Hmm, well I'm not familiar with nikto, but it has to be more than an issue
with signature detection.
There is no such Drupal file as userinfo.php, but it is a Xoops file, so
something is up.
On Sun, May 22, 2011 at 7:57 AM, Jarry <mr.jarry at gmail.com> wrote:
> I believe I have posted to the right list, as all I have
> on my web is Drupal. I suppose, nikto was just wrong
> in CMS signature detection...
>
> Jarry
>
> On 22. 5. 2011 12:35, William Smith wrote:
> > You may get lucky and someone might happen to know the answer to this,
> > but I believe that you've posted to the wrong list.
> > This is a Drupal support list, not Xoops.
> >
> > <mailto:mr.jarry at gmail.com>> wrote:
> >
> > Hi,
> > I just scanned my web with nikto and received this message:
> >
> > + /userinfo.php?uid=1;: Xoops portal gives detailed error
> > messages including SQL syntax and may allow an exploit
> >
> > So my question is: how can I turn these detailed messages off?
>
>
> --
> _______________________________________________________________
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20110522/01e2f46d/attachment.html
More information about the support
mailing list