PHP : Hide PHP version information from curl
By default, PHP will expose its version information when query by curl -I
and you may want to hide the version information to prevent a potential attacker from gaining more information.
For example:
localhost:~ admin$ curl -I https://www.socketloop.com
HTTP/1.1 200 OK
Server: nginx/1.4.6
Content-Type: text/html
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.4.25
<------ hereAccess-Control-Allow-Credentials: true
Date: Thu, 14 Aug 2014 12:21:40 GMT
Cache-Control: max-age=0, no-cache
To turn off the version information. Do the following on the webserver's PHP configuration :
vi /etc/php.ini
look for expose_php = On
line
change it to expose_php = Off
and this will cause PHP not to send over the version information when queried.
By Adam Ng
IF you gain some knowledge or the information here solved your programming problem. Please consider donating to the less fortunate or some charities that you like. Apart from donation, planting trees, volunteering or reducing your carbon footprint will be great too.
Advertisement
Tutorials
+5.8k Unix/Linux : Get reboot history or check when was the last reboot date
+23.5k Golang : Check if element exist in map
+21.1k Golang : Sort and reverse sort a slice of strings
+40.5k Golang : Convert to io.ReadSeeker type
+9.7k Golang : Populate slice with sequential integers example
+9.7k Golang : Find correlation coefficient example
+6.6k Golang : Totalize or add-up an array or slice example
+12.7k Golang : zlib compress file example
+15.6k Chrome : ERR_INSECURE_RESPONSE and allow Chrome browser to load insecure content
+9.4k Golang : Launch Mac OS X Preview (or other OS) application from your program example
+11.3k Golang : Fix fmt.Scanf() on Windows will scan input twice problem
+5.8k Golang : Markov chains to predict probability of next state example