Is 123-reg shared hosting insecure for Joomla/PHP websites? <p>My client has a site on 123-reg shared hosting. 123-reg has a non standard implementation setting of display-errors = on in their default php.ini. The default and on other hosts I've used is Off. 123-reg do not let you override this on shared hosting.</p> <p>The PHP manual states with regard to display-errors "This is a feature to support your development and should never be used on production systems (e.g. systems connected to the internet)." see <a href="http://www.php.net/manual/en/errorfunc.configuration.php#ini.display-errors" rel="nofollow">http://www.php.net/manual/en/errorfunc.configuration.php#ini.display-errors</a> I believe this is because file paths etc could get displayed which create an insecure vulnerability.</p> <p>I have asked 123-reg to either change their default or allow an override. Their response is always the same, upgrade to VPS where it can be overridden. They don't seem to recognise it as a risk for me and other PHP users of their shared hosting. (they even said changing it would stop other shared sites from working!!!)</p> <p>How much of a risk is this? Should I move the site to a more secure host?</p>