Stack Trace Disclosure (PHP)

Invicti identified a stack trace disclosure (PHP) in the target web server's HTTP response.

An attacker can obtain information such as:

• PHP version.
• Physical file path of PHP files.
• Information about the generated exception and possibly source code, SQL queries, etc.

Apply following changes on your php.ini file to prevent information leakage by applying custom error pages.

display_errors = Off

ini_set('display_errors', 'Off');