Usually, most of the webservers installed with default settings have information leakage, and one of them is PHP. PHP is one of the popular server-side htmlembedded languages (one?). In these challenging times, there are many attackers who will try to find vulnerabilities on your server. Therefore, I will briefly describe how to hide PHP information in Linuxserver.
is on by default expose_php is on by default. Turning off the "expose_php" parameter allows php to hide its version information.
[root@centos66 ~]#vi /etc/php.ini
In your php.ini, locate the one containing expose_php That's OK Set On to Off:
expose_php = Off
Before that, webThe server header looks like Like this:
[root@centos66 ~]#curl -I http://www.ehowstuff.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary:Accept-Encoding
X-Powered-ByHP/5.3.3
X-Pingback: http: //www.ehowstuff.com/xmlrpc.php
Date: Wed, 11 Feb2015 14:10:43 GMT
X-Page-Speed:1.9.32.2-4321
Cache-Control: max-age=0, no-cache
After changing and restarting the Web service, php will not show the version in the web service header Got:
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
V ary:Accept-Encoding
X-Powered-ByHP/5.3.3
GMT
X-Page-Speed:1.9.32.2-4321
Cache-Control: max-age=0, no-cache
LCTTAnnotation: In addition to the version of PHP , the Web server will also be leaked by default version number. If you use Apache server, please refer to this article to turn off Apache version display; if you use Nginx server, please turn off http Add within paragraph server_tokens off; configuration. Please remember to restart related services for the above modifications.
Receive LAMP Brothers’ original PHP tutorial CD/"Essential PHP in Detail" for free. For details, please contact the official website customer service: http://www.lampbrother.net
PHPCMSSecondary development http://yun.itxdl.cn/online/phpcms/index.php?u=5
WeChat development =5
Mobile Internet Server Side Development http://yun.itxdl.cn/online/server/index.php?u=5
JavascriptCourse http: //yun.itxdl.cn/online/js/index.php?u=5
CTOTraining Camp u=5
|