Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

Register

FAQ

It is currently Fri May 14, 2021 8:23 am

ROOT ‹ Unix Networked Services & Applications ‹ Apache, Nginx, Lighttpd and other web server software ‹ Remove "X-Powered-By: PHP/5.2.11" from HTTP headers of your web server

This forum is dedicated to Apache, Nginx, Lighttpd, Squid and other HTTP transport protocol related software

1 post • Page 1 of 1

Remove "X-Powered-By: PHP/5.2.11" from HTTP headers of your web server

« Previous topic | Next topic »

Author

Message

Post subject: Remove "X-Powered-By: PHP/5.2.11" from HTTP headers of your web server | Posted: Wed Mar 24, 2010 6:49 am

Joined: Thu Aug 06, 2009 2:48 am
Posts: 105

Remove "X-Powered-By: PHP/5.2.11" from HTTP headers of your web server

HTTP 1.1 protocol, as most of the other protocol, uses headers for the communication between client (usually browser) and server.

An example of the header looks like:

Code:

HTTP/1.1 200 OK
Date: Wed, 24 Mar 2010 04:03:41 GMT
Server: Apache/2.2.11 (Unix) DAV/2 PHP/5.2.11 with Suhosin-Patch mod_ssl/2.2.15 OpenSSL/0.9.8k
X-Powered-By: PHP/5.2.11
Set-Cookie: phpbb3_qxggi_u=1; expires=Thu, 24-Mar-2011 04:03:41 GMT; path=/; domain=forum.ivorde.ro; HttpOnly
Set-Cookie: phpbb3_qxggi_k=; expires=Thu, 24-Mar-2011 04:03:41 GMT; path=/; domain=forum.ivorde.ro; HttpOnly
Set-Cookie: phpbb3_qxggi_sid=514ad39b91e1e29bcb1a7553dcb8f4a7; expires=Thu, 24-Mar-2011 04:03:41 GMT; path=/; domain=forum.ivorde.ro; HttpOnly
Cache-Control: private, no-cache="set-cookie"
Expires: 0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=UTF-8

To remove the X-Powered-By: PHP/5.2.11 from this header, open your php.ini file and change the line:

Code:

expose_php = On

to

Code:

expose_php = Off

Of course, restart of apache is needed for this to take effect.

			Tweet
Follow @IvordeCom

You might also be interested in:
How to test deflate/gzip compression on a HTTPS (HTTP over SSL) Apache server. Apache - Restricting "Server" information in HTTP response header with ServerTokens. NGINX: How to redirect http to https website. Apache to Nginx Server parameters translation with php function. Apache: how to list virtual hosts that are currently configured on my Apache server ?.

Top

1 post • Page 1 of 1

Topics			Author	Replies	Views	Last post
Topics related to - "Remove "X-Powered-By: PHP/5.2.11" from HTTP headers of your web server"
		How to test deflate/gzip compression on a HTTPS (HTTP over SSL) Apache server	debuser	0	4843	Tue Aug 03, 2010 3:30 am debuser
		Apache - Restricting "Server" information in HTTP response header with ServerTokens	debuser	0	1872	Thu Nov 10, 2011 6:39 am debuser
		NGINX: How to redirect http to https website	mandrei99	0	3368	Mon Feb 09, 2015 3:27 pm mandrei99
		Apache to Nginx Server parameters translation with php function	debuser	0	99811	Thu Aug 26, 2010 7:47 am debuser
		Apache: how to list virtual hosts that are currently configured on my Apache server ?	LaR3	0	3944	Sun Feb 07, 2010 10:04 am LaR3

Who is online

Users browsing this forum: No registered users and 0 guests

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:

ROOT ‹ Unix Networked Services & Applications ‹ Apache, Nginx, Lighttpd and other web server software

Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]

phpBB SEO