Next badge 0/1
~577 people reached
- 0 posts edited
- 0 helpful flags
- 1 vote cast
Is it a security flaw to log the class and method name when an exception occurs?
Yes, and it is important to insure that the logs themselves are secure - can't be accessed by external users and absolutely cannot be modified.
Is it bad practice for a module to contain more information than it needs?
@LarryOBrien: While I would agree that Glen's solution is generally more proper, it is sadly true that the "proper" solution is not universally either easy (or even possible) to implement. I was attempting to provide solutions that would cover most situations.