How to hide php version information and header version information in the header

How to hide php version information and header version information in the header

Preface

The php-rendered webpage header information contains the php version number, for example, X-Powered-by: php/5.3.3, which is somewhat insecure, some hackers may scan low-version php servers in batches and use php vulnerabilities (such as hash conflicts) to attack servers.

Php. ini has an option to control whether to expose this information, that is:

Expose_php = On

The default value is On. After it is changed to Off, the php version information will not be displayed.

You can also set it in the pool configuration file of php-fpm:

Php_admin_flag [expose_php] = off

Summary

The above is how to hide all the content of the php version in the header information. I hope this article will help you in your need. If you have any questions, please leave a message to discuss it.