Logging and Error Handling

It’s possible, maybe even likely, that you will want to skip this chapter. After all, logging by itself doesn’t protect data, prevent intrusion, or anything else when most developers think of when they think of “security.” But think of it another way – realistically, how many of you would even know if a hacker stole credentials via a SQL injection vulnerability in your login page, as described earlier in the book?