In order to prevent PHP from exposing the fact that it's installed on the server, by adding to the web server header we require to locate in php.ini the variable expose_php and turn it off.
By default expose_php is set to ‘On’
In your php.ini locate the line containing expose_php On and set it to Off ;
expose_php = Off
After doing these modifications PHP will no longer add its signature to the web server header. Doing this, will not make your server more secure but, it will only prevent remote hosts to easily find out that you have PHP installed on the system and what version you are running.
|