User Tools

Site Tools


apache_security_php

Hiding php version

If you run a curl on your website similar to the curl below, does it return php versions?
This is NOT secure. We will now make a simple change to the /etc/php.ini file to hide this

Example curl:

curl -LIsX GET lukeslinux.co.uk | grep php
To hide the php value, turn the following value Off
expose_php = On;
Restart apache and you are done. Test again by rerunning the curl command.

apache_security_php.txt · Last modified: 2024/05/23 07:26 by 127.0.0.1

Except where otherwise noted, content on this wiki is licensed under the following license: Public Domain
Public Domain Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki