So the plugin turns off error reporting? Seems to be causing one of my themes some trouble, though I'm not sure why it should. But it also seems the plugin rather aggressively modifies ones hosting setup, turning off error reporting. I wish there were more documentation explaining how this works. Anyone know?
http://wordpress.org/extend/plugins/wp-security-scan/
WordPress itself turns off most of the php error reporting. Error reporting interferes with header output in a lot of cases.
But does WP Security Scan turn it off entirely? Or, is it just reporting what WP already does? I'm simply trying to understand how the plugin works.
Well, going through the source code, I don't see anything specifically turning off error reporting.
Since I don't use this plugin, I'm not 100% sure what exactly you're referring to in the interface. Do you mean where it reports that DB errors are disabled? That's the default setup for WP (unless you have it in debug mode), so that would not be unusual. Also, that has nothing to do with "error reporting" which is a PHP specific term.
My guess, then, is that WP Security Scan is simply presenting the server configuration, not changing it.