Merge pull request #7706 from kenjis/docs-dotenv-and-credentials

docs: improve description on dotenv and credentials

Author: kenjis

user_guide_src/source/general/configuration.rst

@@ -122,7 +122,7 @@ The loaded environment variables are accessed using any of the following:
 
 .. literalinclude:: configuration/005.php
 
-.. warning:: Note that your settings from the **.env** file are added to Environment Variables. As a side effect, this means that if your CodeIgniter application is (for example) generating a ``var_dump($_ENV)`` or ``phpinfo()`` (for debugging or other valid reasons) **your secure credentials are publicly exposed**.
+.. warning:: Note that your settings from the **.env** file are added to ``$_SERVER`` and ``$_ENV``. As a side effect, this means that if your CodeIgniter application is (for example) generating a ``var_dump($_ENV)`` or ``phpinfo()`` (for debugging or other valid reasons), or a detailed error report in the ``development`` environment is shown, **your secure credentials are publicly exposed**.
 
 Nesting Variables
 -----------------

user_guide_src/source/general/errors.rst

@@ -3,9 +3,11 @@ Error Handling
 ##############
 
 CodeIgniter builds error reporting into your system through Exceptions, both the `SPL collection <https://www.php.net/manual/en/spl.exceptions.php>`_, as
-well as a few custom exceptions that are provided by the framework. Depending on your environment's setup,
+well as a few exceptions that are provided by the framework.
+
+Depending on your environment's setup,
 the default action when an error or exception is thrown is to display a detailed error report unless the application
-is running under the ``production`` environment. In this case, a more generic message is displayed to
+is running under the ``production`` environment. In the ``production`` environment, a more generic message is displayed to
 keep the best user experience for your users.
 
 .. contents::
@@ -43,12 +45,19 @@ the error handler to function as normal, you can throw a new exception within th
 Configuration
 =============
 
-By default, CodeIgniter will display all errors in the ``development`` and ``testing`` environments, and will not
+Error Reporting
+---------------
+
+By default, CodeIgniter will display a detailed error report with all errors in the ``development`` and ``testing`` environments, and will not
 display any errors in the ``production`` environment. You can change this by setting the ``CI_ENVIRONMENT`` variable
-in the **.env** file.
+in the :ref:`.env <dotenv-file>` file.
 
 .. important:: Disabling error reporting DOES NOT stop logs from being written if there are errors.
 
+.. warning:: Note that your settings from the **.env** file are added to ``$_SERVER``
+    and ``$_ENV``. As a side effect, this means that if the detailed error report
+    is displayed, **your secure credentials are publicly exposed**.
+
 Logging Exceptions
 ------------------