NYCPHP Meetup

[Chris Snyder]

On Mon, Nov 15, 2010 at 8:39 PM, Christopher R. Merlo <cmerlo at ncc.edu> wrote:
> On Mon, Nov 15, 2010 at 6:10 PM, Daniel Convissor
> <danielc at analysisandsolutions.com> wrote:
>>
>> Heya:
>>
>> > (On a side note, why are logs like that always read-protected?)
>>
>> Because your admin doesn't know what they're doing? :)
>
> But that seems to be the default on Linux boxes and/or on Apache.  Is there
> some hideous security flaw that can be exploited by something in the logs?

Yes and no? But exposing them to you is probably safe. :-)

The defaults are conservative, which is good. But developers should
have access if that's where their errors are going.