MilesWeb Hosting Forum

Web Hosting Technical Support => How To's => Topic started by: Dipak Bhoi on September 25, 2014, 04:36:28 PM

Title: How to hide PHP and Apahce version from intruders and hackers ?
Post by: Dipak Bhoi on September 25, 2014, 04:36:28 PM
Hello Guys,

If you have a production server with PHP and Apache installed then it should be secure from intruders, hackers. You can restrict them to read installed PHP and Apache version from server and make your server safe.

Restrict PHP Information :-

1. Login to your server via SSH as a root user.
2. Open the php.ini configuration file in your favorite editor. If you don't know the correct php file location then click here. (https://www.milesweb.com/forums/how-to%27s/how-to-find-right-location-of-php-ini-server-configuration-file/)

Quote#vi  /usr/local/lib/php.ini

[ Here find for variable expose_php and set value to Off]

Quoteexpose_php=Off

3. Now save and quite the file. Restart Apache server.

Hide the Apache version :-

There are two config directives that controls Apache version ServerSignature and ServerTokens .

1. Open Apache configuration file.

Quote#vi httpd.cof

2. Modify config directive as follows:

QuoteServerSignature Off
ServerTokens Prod

Save and close the file. Restart Apache server:

Quote# /etc/init.d/httpd restart

Hope this port will help you out.

Enjoy !!