Secure error handling shows the user a generic message with no technical detail, while the information useful for diagnosis (trace, query) is recorded on the server side. A displayed trace or SQL message helps an attacker understand the system.
Example
User: "An error occurred." Server log: full trace and incident identifier.