A PHP application might produce many different levels of warnings and errors during its execution. Seeing these errors is crucial for developers when troubleshooting a misbehaving application. However, many developers often encounter difficulties displaying errors in their PHP applications, leading to silent app failures.
Understanding the importance of displaying errors in PHP can’t be overstated. Error messages provide vital information about issues that occur while running a PHP script. They inform developers about syntax errors, which are mistakes made while writing code. They also notify developers about missing semicolons, which are important punctuation marks in certain programming languages. Furthermore, they bring attention to more complex issues that need to be debugged. Identifying and fixing these problems becomes a complicated guessing game without visible errors.
With the complexity of PHP web applications, there are multiple methods to display errors, each with advantages depending on your specific use case.
Before diving into the details of managing and logging errors in PHP, let’s outline the four main ways to display errors in PHP:
All methods are compatible with PHP 8.x. The following additions were made to support modern PHP versions
If you are having problems with your PHP web application and need to display all the errors and warnings, you are in the right place. In this tutorial, we will explain all the different ways to enable PHP errors and warnings. We will also discuss how to write the errors to a log file and even collect them via the Retrace’s error tracking feature.
The quickest way to display all php errors and warnings is to add these lines to your PHP code file:
ini_set('display_errors', 1); ini_set('display_startup_errors', 1); error_reporting(E_ALL);
The ini_set function will try to override the configuration found in your PHP ini file.
The display_errors and display_startup_errors are just two of the available directives. The display_errors directive will determine if the errors will be displayed or hidden from the user. Usually, the dispay_errors directive should be turned off after development.
The display_startup_errors, however, is a separate directive because the display_errors don’t handle the errors that will be encountered during PHP’s startup sequence. The list of directives that can be overridden by the ini_set function is found in the official documentation.
Unfortunately, these two directives won’t be able to display parse errors such as missing semicolons or missing curly braces. In this case, the PHP ini configuration must be modified.
If adding some of the PHP code errors doesn’t show in the browser during testing, then the PHP ini configuration has some additional directives to handle this.
display_errors = on
The display_errors directive must be set to “on” in the PHP ini file. This will display all the errors including syntax or parse errors that cannot be displayed by just calling the ini_set function in the PHP code. The PHP ini file can be found in the displayed output of phpinfo() function and is labeled loaded configuration file. This directive in the ini configuration must be set to off, if the web application is in production.
Developers usually have access to the directory files. The directive for showing PHP errors can also be enabled or disabled using the .htaccess file located in the root or public directory of the project.
php_flag display_startup_errors on php_flag display_errors on
Similar to what will be added to the PHP code to show PHP errors, .htaccess also has directives for display_startup_errors and display_errors. The advantage of showing or disabling error messages in this manner is that development and production can have different .htaccess files, where the production suppresses the displaying of errors.
Depending on which files you have access to and how you do deployments and server configurations, you may want to configure display_errors in .htaccess or your PHP.ini file. Many hosting providers will not allow you to modify your PHP.ini file to enable display_errors.
In the .htaccess file, a custom error log can also be enabled as long as the log folder or the log file is writable by the web server. The log file can be a relative path to where the .htaccess is located, or it can be an absolute path such as /var/www/html/website/public/logs.
php_value error_log logs/all_errors.log
Sometimes, the warnings that seem not to affect the application at the start will cause some fatal errors in certain conditions. These warnings must be fixed because this means that the application won’t run normally under certain scenarios. In case these warnings cause a lot of errors, then it would be more practical to hide the errors and just show what the warning messages are.
error_reporting(E_WARNING);
For a developer, showing warnings and hiding errors is just as simple as adding a single line of code. To show warnings and notices, the parameter for the error reporting function will be “E_WARNING | E_NOTICE”. The error_reporting function can accept E_ERROR, E_WARNING, E_PARSE, and E_NOTICE parameters as bitwise operators. To report all errors except for notices, then the parameter is “E_ALL & ~E_NOTICE” where E_ALL stands for all the possible parameters of the error_reporting function.
The error reporting function is a built-in PHP function that allows developers to control which and how many errors will be shown in the application. Remember, the PHP ini configuration has an error_reporting directive that will be set by this function during runtime.
error_reporting(0);
To remove all errors, warnings, parse messages, and notices, the parameter that should be passed to the error_reporting function is zero. It would be not practical to have this line of code in each of the PHP files. It would be better to turn off report messages in the PHP ini file or in the .htaccess.
error_reporting(E_NOTICE);
PHP allows variables to be used even when not declared. This is not a standard practice because undeclared variables will cause issues for the application once it is used in loops and conditions. Sometimes, this also happens because the declared variable has a different spelling than the variable being used for conditions or loops. When E_NOTICE is passed in the error_reporting function, then these undeclared variables will be displayed in the web application.
error_reporting(E_ALL & ~E_NOTICE);
The error reporting function allows you to filter which errors can be shown. The “~” character means “not” or “no” so the parameter ~E_NOTICE means not to show notices. Notice the “&” and “|” characters in between the possible parameters. The “&” character is for “true for all”, while the “|” character represents either one as long as it is true. These two characters have the same meaning in PHP conditions OR and AND.
error_reporting(E_ALL); error_reporting(-1); ini_set('error_reporting', E_ALL);
These three lines of codes do exactly the same thing, it will show all PHP errors. The error_reporting(E_ALL) is the most widely used among developers to show error messages because it is more readable and understandable.
Consider using E_ALL | E_DEPRECATED for compatibility with PHP 8.x.
During production, error messages must not be shown to the end users, but this information must still be recorded for tracing purposes. The best way to record these error messages on a production web application is to store it in log files.
One easy way to use log files is to use the error_log function, which accepts four parameters. The only required parameter is the first parameter, which contains the details about the error or what’s to be logged. The type, destination, and header are all optional parameters for this function.
error_log("There is something wrong!", 0);
The type parameter, if not defined, will be 0 by default, which means this log information will be appended to whatever log file is defined in the web server.
error_log("Email this error to someone!", 1, "[email protected]");
Here, the type 1 parameter will email an error log specified in the third parameter. To make this feature work, the PHP ini must have a proper SMTP configuration to be able to send out emails. These SMTP ini directives include host, encryption type, username, password, and port. This kind of error reporting is advisable to logging or notifying errors that need to be fixed as soon as found.
error_log("Write this error down to a file!", 3, "logs/my-errors.log");
To log messages in a separate file defined by the configuration of the web server, then type 3 must be used. The third parameter will serve as the location of the log file and must be writable by the web server. The location of the log file can be a relative path to where this code is called or an absolute path.
When working with PHP and AJAX calls, errors can sometimes be difficult to track as they don’t display in the browser directly. Instead, they are returned to the AJAX request. To capture and see these errors, there are a few approaches:
In your JavaScript code, you can add an error handler to your AJAX call. Here’s an example of how you can use console.log() to display any errors that occur during an AJAX request:
$.ajax({
url: 'your-php-script.php',
method: 'POST',
data: { key: 'value' },
success: function(response) {
console.log('Success:', response);
},
error: function(xhr, status, error) {
console.log('AJAX Error:', xhr.responseText);
}
});
In this example, any PHP errors that occur will be displayed in the browser’s developer console via xhr.responseText. This will help you see and troubleshoot errors while working with AJAX calls.
Another way to handle errors in AJAX is to explicitly return error messages from PHP. You can do this by catching exceptions or errors and returning them in a format that your JavaScript can handle, such as JSON:
try {
// Your PHP code
} catch (Exception $e) {
echo json_encode(['error' => $e->getMessage()]);
http_response_code(500);
}
On the JavaScript side, you can check for these errors and handle them appropriately.
To avoid changing parameters in the .htaccess or adding some lines in the PHP code to show errors, then the best way to log errors is defining it in the web server configuration file.
ErrorLog "/var/log/apache2/my-website-error.log"
For Apache, these files must be added to the virtual host of the specific website or application. This is usually located inside the sites-available folder for Ubuntu or httpd-vhosts file in Windows.
error_log /var/log/nginx/my-website-error.log;
For nginx, similar to Apache, the directive is just called error_log. For both Apache and nginx web servers, the log files must be writable by the web server. Luckily, upon installation, the folders for the log files of these two web servers are already writable.
As PHP continues to evolve, newer methods and directives have been introduced to handle error reporting more efficiently in various environments, especially for development versus production settings. Below are some modern approaches and tools you might consider using:
While ini_set() has been around for a while, modern PHP practices encourage its use for more granular control over error reporting. For instance, you can disable error display for production while logging all errors to a secure file location:
ini_set('display_errors', 'Off');
ini_set('log_errors', 'On');
ini_set('error_log', '/path/to/secure/error.log');
error_reporting(E_ALL | E_STRICT);
In modern PHP, handling errors using exceptions is considered a best practice, especially for larger applications. PHP 8.x allows developers to handle most types of errors as exceptions, offering more control over how errors are managed:
try {
// Code that may throw an error
} catch (Error $e) {
error_log($e->getMessage());
// Handle the error, e.g., by showing a user-friendly message
}
PHP 8.x supports logging errors to remote servers, which is useful for centralized logging in distributed applications. This can be done via syslog or external logging services:
error_log("Application error", 0, "syslog"); // Logs to syslog
error_log("Application error", 0, "udp://logs.example.com:514"); // Logs to a remote syslog server
Retrace is an APM (Application Performance Management) tool offered by Stackify. But the tool goes beyond monitoring the performance of your application. It allows you to do centralize logging, perform code profiling, and stay on top of server and application metrics.
One of the great features of Retrace is its ability to automatically collect all unhandled errors in your PHP application. Our PHP extension will catch the exception and forward them automatically to Retrace.
With Retrace, all the errors are automatically logged and formatted so that it can be viewed easily. Retrace will not only show what errors have occurred but also analyzes where and what caused it. The time and number of occurrences are also shown in the logs so that it would be a lot easier to focus on which issue to prioritize.
To learn more about Retrace, please check out the Retrace feature page on error tracking.
To further improve your PHP debugging process, it’s recommended to familiarize yourself with other built-in PHP functions. One such functions are debug_backtrace() and debug_print_backtrace(). These functions provide detailed information about the list of preceding function calls, which is invaluable when tracking a tricky bug.
Lastly, always remember to turn off error displays in a production environment. While displaying and logging errors during the development and testing phases is essential, it can also be a security risk. This is to prevent exposing potentially sensitive information to end-users.
In conclusion, error management in PHP is a crucial aspect of development. By understanding how to use error_reporting, display_errors, log_errors, and error_log string, you can streamline your debugging process. This will improve the overall quality of your PHP applications.
For a more comprehensive approach to error tracking and application performance management, consider using tools like Retrace. Retrace can automatically collect all unhandled errors in your PHP application. This will help you focus on what matters – creating fantastic user applications.
If you would like to be a guest contributor to the Stackify blog please reach out to [email protected]