# Disable Debug Mode

## What This Does

This protection ensures that WordPress debug mode is disabled in production environments.

It prevents error messages and diagnostic information from being displayed publicly.

---

## Why It Matters

When debug mode is enabled, WordPress may display:

- PHP errors and warnings  
- file paths and system structure  
- plugin and theme information  
- database query details  

This information can expose sensitive details about your site and make it easier for attackers to identify vulnerabilities.

---

## When to Apply It

This protection is recommended for all production websites.

Apply it when:

- your site is publicly accessible  
- development is complete  
- you want to prevent information leakage  

---

## When Not to Apply It

You may choose not to apply this protection if:

- you are actively developing or debugging your site  
- you require visible error output for troubleshooting  

In these cases, debug mode should only be enabled temporarily and never on a live site.

---

## How Steel Security Applies This

Steel Security ensures debug settings are configured securely.

This typically involves:

- disabling `WP_DEBUG`  
- preventing error display in the browser  
- ensuring errors are not publicly exposed  

Changes are applied directly to your WordPress configuration.

---

## What to Expect After Applying

After applying this protection:

- errors will no longer be displayed publicly  
- your site will appear cleaner and more stable to users  
- sensitive debugging information will be hidden  

This does not prevent errors from occurring — it only prevents exposure.

---

## How to Verify

To verify the protection:

1. Trigger or observe an error on your site (if applicable)  
2. Confirm that error details are not displayed publicly  

You should not see:

- PHP warnings  
- file paths  
- stack traces  

---

## How to Revert (Rollback)

To revert this protection:

1. Navigate to the hardening section in Steel Security  
2. Disable the control  
3. Confirm the change  
4. Verify that debug output is restored (if needed)  

Only enable debug mode temporarily and with caution.

---

## Common Issues

### Errors Are No Longer Visible

This is expected.

Debug output is being hidden for security.

If needed:

- enable logging instead of display  
- review server logs for diagnostics  

---

### Changes Do Not Take Effect

- confirm configuration was updated correctly  
- check for conflicting settings in `wp-config.php`  
- ensure hosting environment is not overriding values  

---

## Related

- [Uploads PHP Execution Protection](https://docs.steelwp.com/books/hardening-reference/page/uploads-php-execution-protection)
- [Disable Directory Listing](https://docs.steelwp.com/books/hardening-reference/page/disable-directory-listing)
- [Safe Rollback Practices](https://docs.steelsecurity.com/books/plugin-guide/page/safe-rollback-practices)