=== Hiding apache version ====
If you run a curl on your website similar to the curl below, does it return apache versions?
\\
This is NOT secure. We will now make a simple change to the httpd.conf or apache2.conf file to hide this
==Example curl:==
curl -LIsX GET lukeslinux.co.uk | grep -i apache
\\
^ Value ^ Description ^
| ServerTokens Prod | This will configure apache not to send any version numbers in the HTTP header |
| Server Signature Off | This will make sure apache does not display version number in footer of server generated pages |
To hide the php value, turn the following value Off
ServerSignature On;
You will also need to change the following value:
ServerTokens Prod
Restart apache and you are done. Test again by rerunning the curl command.