71 lines
1.2 KiB
Plaintext
71 lines
1.2 KiB
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
CakePHP 1.x, 2.x:
|
|
|
|
----
|
|
Configure::write('debug', 1); // Sensitive: development mode
|
|
or
|
|
Configure::write('debug', 2); // Sensitive: development mode
|
|
or
|
|
Configure::write('debug', 3); // Sensitive: development mode
|
|
----
|
|
|
|
CakePHP 3.0:
|
|
|
|
----
|
|
use Cake\Core\Configure;
|
|
|
|
Configure::config('debug', true); // Sensitive: development mode
|
|
----
|
|
|
|
WordPress:
|
|
|
|
----
|
|
define( 'WP_DEBUG', true ); // Sensitive: development mode
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
CakePHP 1.2:
|
|
|
|
----
|
|
Configure::write('debug', 0); // Compliant; this is the production mode
|
|
----
|
|
|
|
CakePHP 3.0:
|
|
|
|
----
|
|
use Cake\Core\Configure;
|
|
|
|
Configure::config('debug', false); // Compliant: "0" or "false" for CakePHP 3.x is suitable (production mode) to not leak sensitive data on the logs.
|
|
----
|
|
|
|
WordPress:
|
|
|
|
----
|
|
define( 'WP_DEBUG', false ); // Compliant
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::../message.adoc[]
|
|
|
|
'''
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::../comments-and-links.adoc[]
|
|
endif::env-github,rspecator-view[]
|