How to hide the PHP version number on a Linux system server, linux version number_PHP tutorial

How to hide the PHP version number on a Linux system server, linux version number

Usually, most web servers installed with default settings have information leakage, one of which is PHP. PHP is one of the most popular server-side HTML embedded languages ​​today. In these challenging times, there are many attackers who will try to find vulnerabilities on your server. Therefore, I will briefly describe how to hide PHP information in a Linux server.

Expose_php is enabled by default. Turning off the "expose_php" parameter allows PHP to hide its version information.

 [root@centos66 ~]# vi /etc/php.ini

In your php.ini, locate the line containing expose_php and set On to Off:

expose_php = Off

Before this, the web server header looked like this:

  [root@centos66 ~]# curl -I http://www.ehowstuff.com/

  HTTP/1.1 200 OK
  Server: nginx
  Content-Type: text/html; charset=UTF-8
  Vary: Accept-Encoding
  X-Powered-By: PHP/5.3.3
  X-Pingback: http://www.ehowstuff.com/xmlrpc.php
  Date: Wed, 11 Feb 2015 14:10:43 GMT
  X-Page-Speed: 1.9.32.2-4321
  Cache-Control: max-age=0, no-cache

After changing and restarting the web service, php will no longer display the version in the web service header:

  HTTP/1.1 200 OK
  Server: nginx
  Date: Wed, 11 Feb 2015 15:38:14 GMT
  Content-Type: text/html; charset=UTF-8
  Vary: Accept-Encoding
  X-Pingback: http://www.ehowstuff.com/xmlrpc.php
  Date: Wed, 11 Feb 2015 14:10:43 GMT
  X-Page-Speed: 1.9.32.2-4321
  Cache-Control: max-age=0, no-cache

http://www.bkjia.com/PHPjc/1012741.htmlwww.bkjia.comtruehttp: //www.bkjia.com/PHPjc/1012741.htmlTechArticleHow to hide the PHP version number on a Linux system server. The linux version number is usually installed with most default settings. There are information leaks in web servers, one of which is PHP. PHP is like...