Remove X-Powered-By

[neo2012]

Hello,
I use an Ubuntu 14.04.3 LTS Server with Plesk 12.5.30 Update #18.
Is it possible to completly remove the X-Powered-By in the header?
In the Plesk Panel I added for additional Apache HTTP commands: "Header unset X-Powered-By".
This removed the "PleskLin" in the X-Powered-By.
So the resulting header is: X-Powered-By PHP/5.5.9-1ubuntu4.14
Can I even remove the rest?
And how can I change the Cache-Control in the header?
The command: Header set Cache-Control "max-age=86400, public, must-revalidate"
only adds this value and does not remove the default.

Thank you for your help!

 

[Lloyd_mcse]

Hi neo2012,
the X-Powered-By header is removable via the server.php (line 59) template located at..

/opt/psa/admin/conf/templates/default/server.php

copy this file to...

/opt/psa/admin/conf/templates/custom/server.php

If you don't have the custom folder, just create it, once you have copied the file into the custom folder you can edit it.
Then you will have to regenerate the server conf files with...

/opt/psa/admin/bin/httpdmng --reconfigure-all

Now check your headers.
Hope that helps
Kind regards

Lloyd

 

[neo2012]

Thank you for your quick answer. My answer is a little late, but that has reasons.
Your answer helped for removing "Plesklin" but "X-Powered-ByPHP/5.5.9-1ubuntu4.14" still appears in the Header. Is there a way to remove that?
Thanks again!

 

[Lloyd_mcse]

Hi Neo2012,
that one is removed when you set expose_php to off in the php.ini file. I do this server wide in...

/etc/php5/cgi/php.ini

/etc/php5/fpm/php.ini

/etc/php5/apache2/php.ini

In my files it's around line 376.
Hope that helps
Kind regards

Lloyd

EDIT: Ref: http://php.net/manual/en/ini.core.php#ini.expose-php

 

[neo2012]

Thanks. I changed it in the files you wrote, but after apache restart it was still showing the version. Then I changed it in the PHP config in Plesk Panel and added:
expose_php = off
Then it worked.
EDIT: In static nginx files the header still shows "X-Powered-By PlesLin", where can I remove this? EDIT2: I changed like in an older threat the template in "/opt/psa/admin/conf/templates/custom/domain/nginxDomainVirtualHost.php" and removed there the "add_header X-Powered-By PleskLin" line. That solved this.