Hide the version of Apache and PHP on the Server

This item was filled under [ Tips & Tricks ]

Discusses hide the version of Apache and PHP on the Server, One of the most basic things in web application security practice is to hide the software version of your web server. Not be a problem if you are using Apache 1.3.37 or 2.0.XX or lighttpd Linux 1.4.10 or IIS on Windows, the version number is important if you want to reduce the risk that the server is protected from the attack of certain parties.

Software version number (apache, php, etc.) is the first thing sought by hackers if they want to attack your server. This is because the web server know which version to use, they can easily find the type of point of vulnerability or weakness associated with this version exploitation it ago. For example, in the firefox browser, can be added so that each plugin serverspy I visited the web can be viewed using the server and what version of.

Therefore, the version of software hide your web server, unless you truly believe that if the problem will not show it.
To do this, you need to do some work sys admin. Discussion of this, more focus on the Apache and PHP, user LAMP (Linux + Apache + MySQL + PHP)

To hide the version of Apache (httpd):
- Open the file httpd.conf vi / usr / local / apache / conf / httpd.conf, search syntax “ServerSignature On”
- Change syntax is “ServerSignature Off” (this will hide the Apache version is usually visible at the bottom of the error page 404)
- Add “ServerTokens Prod” below the line above (to hide the version in the HTTP response header)
- Restart Apache / etc / init.d / httpd restart
- Done

Hide PHP version:
- Edit php.ini file with the following command # vi / usr / local / lib / php.ini and find the line that says “Expose_php On”
- Change the file to “Expose_php Off”
- Restart Apache / etc / init.d / httpd restart
- Done

Easy … just with a little action you can reduce your risk in the system, it is necessary to note that this trick does not fully reduce the security risk. Always update your system with the patch and the latest Update for your system.

Readers who read this page, also read:

  1. Make access point (ad hoc network) in Ubuntu Linux
  2. How to Get Full Version Software Softwer Trial Version Of Good And Right
  3. Aster Adds ‘data-application Server’ in Version 4.0
  4. Download Windows Server 2008 and Vista SP2 32-bit and 64-bit Official KB948465
  5. Configuring WordPress in Ubuntu
  6. Adobe Shockwave Player 11.5.0.600 | the latest version free down load
  7. Asus EeeNAS D200 2TB Server
  8. Free DNS Server Lists
  9. Kaze Server 5.25″, turn the fan speed control
  10. Microsoft makes available new high performance Windows Server test build


You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment