[support] How can I turn detailed error messages off?

William Smith william.darren at gmail.com
Sun May 22 12:12:43 UTC 2011


Hmm, well I'm not familiar with nikto, but it has to be more than an issue
with signature detection.
There is no such Drupal file as userinfo.php, but it is a Xoops file, so
something is up.

On Sun, May 22, 2011 at 7:57 AM, Jarry <mr.jarry at gmail.com> wrote:

> I believe I have posted to the right list, as all I have
> on my web is Drupal. I suppose, nikto was just wrong
> in CMS signature detection...
>
> Jarry
>
> On 22. 5. 2011 12:35, William Smith wrote:
> > You may get lucky and someone might happen to know the answer to this,
> > but I believe that you've posted to the wrong list.
> > This is a Drupal support list, not Xoops.
> >
> > <mailto:mr.jarry at gmail.com>> wrote:
> >
> >     Hi,
> >     I just scanned my web with nikto and received this message:
> >
> >     + /userinfo.php?uid=1;: Xoops portal gives detailed error
> >     messages including SQL syntax and may allow an exploit
> >
> >     So my question is: how can I turn these detailed messages off?
>
>
> --
> _______________________________________________________________
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.drupal.org/pipermail/support/attachments/20110522/01e2f46d/attachment.html 


More information about the support mailing list