CakeFest 2025 Madrid: The Official CakePHP Conference

Voting

: max(seven, nine)?
(Example: nine)

The Note You're Voting On

stepheneliotdewey at GmailDotCom
17 years ago
Note that since typical email is unencrypted, sending data about your errors over email using this function could be considered a security risk. How much of a risk it is depends on how much and what type of information you are sending, but the mere act of sending an email when something happens (even if it cannot be read) could itself imply to a sophisticated hacker observing your site over time that they have managed to cause an error.

Of course, security through obscurity is the weakest kind of security, as most open source supporters will agree. This is just something that you should keep in mind.

And of course, whatever you do, make sure that such emails don't contain sensitive user data.

<< Back to user notes page

To Top