<p>By default, WordPress hides database errors, but there are times when a plugin might enable them thus it is very important to have this type of errors turned off
                        so if there is an error during a connection to the database the user will not get access to the error message generated during that request.</p>
                        <p>As regarding the PHP errors, with the <strong>display_error</strong> PHP configuration directive enabled, untrusted sources can see detailed web application environment
                        error messages which include sensitive information that can be used to craft further attacks.</p>
                        <p>Attackers will do anything to collect information in order to design their attack in a more sophisticated way to eventually hack your website or web application, and causing
                        errors to display is a common starting point. Website errors can always occur, but they should be suppressed from being displayed back to the public.</p>
                        <p>Therefore we highly recommend you to have the <strong>"Disable error reporting (php + db) for all but administrators"</strong> option checked on the plugin's settings page to ensure PHP and
                        database errors will be hidden from all users. For more information, please check the following <a href="http://www.acunetix.com/blog/web-security-zone/articles/php-security-directive-your-website-is-showing-php-errors/" target="_blank">article</a>.</p>