How to redirect all exceptions/error to a 404 page or back to home page

Question

I'm currently using Joomla and we have a small security vulnerability in our URI. Currently, it displays the Exception/Error directly to the user like so:

You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '' at line

Which is providing useful information to users who may attempt a SQL injection attack.

How would I force all exceptions/errors to redirect to the home page? This error can only happen if someone directly manipulates the URI and not through clicking the page.

If it helps, I believe this problem is caused by a component we're using that's directly querying with the URI instead of using prepared statements, but I can't seem to pinpoint where it is.

Answer 1

I am assuming that when you get the error and the processing stops and as such I don't believe it is possible to be redirected anywhere. Better error handling code around the data base query might overcome this by allowing processing to continue.

If you have Error Reporting set to None in your Global Configuration, it should be suppressing those messages to the end user and processing should still continue, maybe enough to display a page that you can trap and redirect via Joomla or .htaccess if you are on Apache.

If you want to get more information about what is creating the error then set Error Reporting to something like Maximum or Development for a short time while you try to diagnose where the issue is coming from.