A quick note about PHP error logs
For some time I’ve been noticing a strange issue on my website: every once in a while, a file named error_log
would appear in a subdirectory of my document root, visible to anyone who knew to look for it. It seems that whenever there was a PHP error (for example, when a vulnerability probe tried to access a theme file), PHP would dump the error message to a file in that same directory.