Question ServerSignatur turn off

[hume1991]

Hello,

Under which file can the serverSignature be deactivated?
Version: 17.5.3.

 

[UFHH01]

Hi hume1991,

the "ServerSignature" can be turned off for your apache - webserver at the serverwide webserver - configuration file "apache2.conf" ( Debian/Ubuntu - based systems ) or "httpd.conf" ( CentOS/RHEL - based systems ).

Example to add:

...
ServerSignature Off
ServerTokens Prod
...

 

[hume1991]

I've changed it under /etc/apache2/apache2.conf. I could not see any changes. I have rebooted Apache.
I have added under /etc/apache2/apache2.conf

ServerSignature Off
ServerTokens Prod

Header:

HTTP/1.1 200 OK Date: Tue, 27 Jun 2017 14:39:42 GMT Server: Apache X-Powered-By: PHP/7.0.20 P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM" Expires: Wed, 17 Aug 2005 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: 9979992104c464a6cf7609dd3f830a86=o22c3k59ohhchujkopl1v21gj1; path=/; HttpOnly Last-Modified: Tue, 27 Jun 2017 14:39:42 GMT Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 8521 Content-Type: text/html; charset=utf-8

I have Ubuntu 14.04.5 LTS

 

[UFHH01]

Hi hume1991,

could you pls. tell us, WHAT you would like to change/modify? If you desire to change/modify "X-Powered-By: PHP/7.0.20", pls. be aware, that this is a PHP - depending setting, which can be set in your depending "php.ini" .

Examples to find and replace all serverwide "php.ini" - files, with the desire to set "expose_php = Off" ( => PHP: Description of core php.ini directives - Manual )

cd /etc/php
find ./ -type f -exec sed -i -e 's/expose_php = On/expose_php = Off/g' {} \;

cd /etc/php5
find ./ -type f -exec sed -i -e 's/expose_php = On/expose_php = Off/g' {} \;

cd /opt/plesk/php
find ./ -type f -exec sed -i -e 's/expose_php = On/expose_php = Off/g' {} \;

 

[hume1991]

Hello,

With me stands with all expose_php = off. I would not show the value value: PHP / 7.0.20. I want to hide the ServerSiganture at Apache. I do not know how far this is interest, but most sites use SSL.