Updated WordPress Plugin Security Testing Cheat Sheet (markdown)

WordPress-Plugin-Security-Testing-Cheat-Sheet.md

@@ -32,6 +32,19 @@ When doing dynamic testing for XSS the following setting in the wp-config.php fi
 define( 'DISALLOW_UNFILTERED_HTML', true );
 ```
 
+### Enable error logging
+
+Add the following to your wp-config.php file:
+
+```
+define( 'WP_DEBUG', true );
+define( 'WP_DEBUG_LOG', true );
+```
+
+The PHP errors will be saved to the `/wp-content/debug.log` file.
+
+To do some logging yourself, you can use the `error_log( 'This is a log' );` function.
+
 ## Cross-Site Scripting (XSS)
 
 Check if the following global PHP variables are echo'd to pages, or stored in the database and echo'd at a later time without first being sanitised or output encoded.