Maybe I'm missing something very simple here, but I'm not sure if there is an easy way of disabling DBG on a VirtualHost or Directory basis.

I'd rather keep DBG listening only on my development sites (same httpd, different VirtualHost) and not on the main site, for possible security reasons. We deal with credit card numbers and don't want to introduce any unnecessary risks.

Plus, I accidentally added DBGSESSION to my URL when I was on the live site and now it tries to debug that, too. Time to restart my browser

debugger.enabled setting is what you may want to change in your per-virtual host php_admin_value, see http://www.php.net/configuration.changes for further details.



DBG does not listen on the server at all. It connects to your client machine where dbglistener is supposed to listen.



You may want to use either ssh tunnel (with appropriately strong cypher) and/or dbg modules with ssl channel encryption turned on.
IP-security should be used too, and hosts.allow=localhost, 127.0.0.1 is an appropriate setting if you use SSH-tunnel.



either turn off Debug Session in the browser's debugger toolbar or re-run with DBGSESSION=-1 in the URL and debugger will drop its cookie and won't try to debug with this instance of the browser.