Why does display_errors change the HTTP status code?

Question

As pointed out in many other questions, turning display_errors to Off in php.ini makes the web server answer with status code 500 Internal server error instead of 200 OK when encountering a fatal error. I set up a simple test with an undefined function to explain the behaviour:

php.ini

display_errors = On

index.php

<?php test();

Gives:

Fatal error: Call to undefined function test()
in D:\xampp\htdocs\index.php on line 1

or just a blank page if i silence the function call like this:

<?php @test();

In both cases answer headers are as following:

HTTP/1.1 200 OK
Date: Tue, 10 Jul 2012 20:08:22 GMT
Server: Apache/2.2.21 (Win32) mod_ssl/2.2.21 OpenSSL/1.0.0e PHP/5.3.8 mod_perl/2.0.4 Perl/v5.10.1
X-Powered-By: PHP/5.3.8
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

While changing php.ini to:

display_errors = Off

Causes:

HTTP/1.0 500 Internal Server Error
Date: Tue, 10 Jul 2012 20:10:35 GMT
Server: Apache/2.2.21 (Win32) mod_ssl/2.2.21 OpenSSL/1.0.0e PHP/5.3.8 mod_perl/2.0.4 Perl/v5.10.1
X-Powered-By: PHP/5.3.8
Content-Length: 0
Connection: close
Content-Type: text/html

Can anybody explain me the underlaying mechanism that makes the web server answer with 500 when display_errors is Off?

Interresting, i'd recon that it should always return a 500 as soon as there are fatal errors. I too would like to know why... — Mathieu Dumoulin
– Mathieu Dumoulin, Commented Jul 10, 2012 at 20:18

Arount · Accepted Answer · 2017-12-18 10:45:24Z

9

The reason is that with display_errors = On, you are essentially asking PHP to give you a decent HTTP response even when there are errors in your script. Think of it like an additional layer between your script and the response. It's no longer your script controlling the output, it's PHP.

When you turn this option on, you are in effect saying, "If there is an error, please still give me a valid HTTP response page (it may even include decent markup), since I will be looking at that instead of my logs."

With it set to Off, the HTTP response should be meaningless, and therefore a 500. With it On, a PHP error is anticipated, so the request on the whole is not 500, even though your script failed.

edited Dec 18, 2017 at 10:45

Arount

10.5k1 gold badge35 silver badges45 bronze badges

answered Jul 10, 2012 at 20:22

Chris Trahey

18.3k1 gold badge44 silver badges55 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Time Killer · Accepted Answer · 2023-09-23 10:59:16Z

-2

I think this is a legacy issue from history. On older IE browsers, the HTML body is ignored when the status code is 500. Debugging is difficult due to the inability to view the errors shown in the body. Changing the status code to 200 is a compatibility for these old browsers.

This should help. bugs

if(1 == ini_get('display_errors')) {
  register_shutdown_function(function() {
    if ((error_get_last()['type']??0) == E_ERROR) {
        headers_sent() || http_response_code(500);
    }
  });
}

edited Sep 23, 2023 at 10:59

answered Sep 17, 2023 at 15:24

Time Killer

85410 silver badges26 bronze badges

Collectives™ on Stack Overflow

Why does display_errors change the HTTP status code?

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related