NuSphere Forums Forum Index
NuSphere Forums
Reply to topic
Can DBG be Disabled using httpd.conf / .htaccess / php ?


Joined: 06 Mar 2009
Posts: 5
Reply with quote
Maybe I'm missing something very simple here, but I'm not sure if there is an easy way of disabling DBG on a VirtualHost or Directory basis.

I'd rather keep DBG listening only on my development sites (same httpd, different VirtualHost) and not on the main site, for possible security reasons. We deal with credit card numbers and don't want to introduce any unnecessary risks.

Plus, I accidentally added DBGSESSION to my URL when I was on the live site and now it tries to debug that, too. Time to restart my browser Smile
View user's profileFind all posts by niaxilinSend private message
Site Admin

Joined: 13 Jul 2003
Posts: 8334
Reply with quote
Quote:
if there is an easy way of disabling DBG on a VirtualHost or Directory basis


debugger.enabled setting is what you may want to change in your per-virtual host php_admin_value, see http://www.php.net/configuration.changes for further details.

Quote:
I'd rather keep DBG listening only on my development sites


DBG does not listen on the server at all. It connects to your client machine where dbglistener is supposed to listen.

Quote:
We deal with credit card numbers and don't want to introduce any unnecessary risks


You may want to use either ssh tunnel (with appropriately strong cypher) and/or dbg modules with ssl channel encryption turned on.
IP-security should be used too, and hosts.allow=localhost, 127.0.0.1 is an appropriate setting if you use SSH-tunnel.

Quote:
Plus, I accidentally added DBGSESSION to my URL when I was on the live site and now it tries to debug that, too


either turn off Debug Session in the browser's debugger toolbar or re-run with DBGSESSION=-1 in the URL and debugger will drop its cookie and won't try to debug with this instance of the browser.

_________________
The PHP IDE team
View user's profileFind all posts by dmitriSend private messageVisit poster's website
Can DBG be Disabled using httpd.conf / .htaccess / php ?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT - 5 Hours  
Page 1 of 1  

  
  
 Reply to topic