security and saving errors to a log file

[jackvull]

Error reporting is turned off on my website and, instead, all errors are logged to a text file. There is a slight issue with security in this in that any user could type in my web address followed by /errortextfile.txt and get all the errors displayed, which is not ideal.

Does anyone have suggested solutions to this?

[Romeo]

You may protect that file with .htpasswd/.htaccess (if you are allowd to control your .htaccess in your shared hosting environment).

Regards,
R.