Debug mode is active on a live site, exposing sensitive errors.
Debug Mode Left Enabled
Key Points: PHP notices, warnings, and paths are visible on the front-end. Looks bad and leaks info.
Your client visits their homepage — and instead of content, they see PHP warnings and function dumps. You forgot to turn off debug mode. Whoops.
😬 Why It’s Risky
- Reveals file paths, structure, even login locations
- Breaks layout with raw error text
- Exposes vulnerabilities to bots and bad actors
🛠️ Disable It Safely
- In
wp-config.php, make sure this is set:define('WP_DEBUG', false); - Remove or comment out:
define('WP_DEBUG_DISPLAY', true); define('WP_DEBUG_LOG', true);
🧠 Dev Tip
Use a local or staging environment for debugging. On production — silence is golden.