Turn on error logging, and forbid errors.log from public viewing.