Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-03-28, 10:05:11

Author Topic: How to hide php and nginx version  (Read 5694 times)

0 Members and 1 Guest are viewing this topic.

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
How to hide php and nginx version
« on: 2013-02-10, 21:19:24 »
How to hide this ?

Quote
[root@server /]# curl -s --head domain.com
HTTP/1.1 200 OK
Server: nginx/1.3.12
Date: Sun, 10 Feb 2013 15:20:53 GMT
Content-Type: text/html
Connection: keep-alive
X-Powered-By: PHP/5.4.11
Cache-Control: public
« Last Edit: 1970-01-01, 01:00:00 by Guest »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: How to hide php and nginx version
« Reply #1 on: 2013-02-10, 21:48:23 »
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On
« Last Edit: 1970-01-01, 01:00:00 by Guest »
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: How to hide php and nginx version
« Reply #2 on: 2013-02-10, 22:54:26 »
Quote from: "MRatWork"
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On

Disabled all 3 and still got the same...
« Last Edit: 1970-01-01, 01:00:00 by Guest »

Offline MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,807
  • Karma: +119/-11
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: How to hide php and nginx version
« Reply #3 on: 2013-02-10, 23:23:05 »
Quote from: "Spacedust"
Quote from: "MRatWork"
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On

Disabled all 3 and still got the same...
After restart services?
« Last Edit: 1970-01-01, 01:00:00 by Guest »
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: How to hide php and nginx version
« Reply #4 on: 2013-02-10, 23:42:14 »
Quote from: "MRatWork"
Quote from: "Spacedust"
Quote from: "MRatWork"
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On

Disabled all 3 and still got the same...
After restart services?

Yes.

Also nginx reporting:
Quote
/etc/init.d/nginx restart
nginx: [emerg] unknown "rootdirhttp" variable
nginx: configuration file /etc/nginx/nginx.conf test failed
« Last Edit: 1970-01-01, 01:00:00 by Guest »

Offline Spacedust

  • Super Grand Master
  • ****
  • Posts: 4,050
  • Karma: +1/-0
    • View Profile
Re: How to hide php and nginx version
« Reply #5 on: 2013-02-12, 04:42:39 »
I was able to hide PHP version after reloading php-fpm, but nginx is still there:

HTTP/1.1 200 OK
Server: nginx/1.3.12
Date: Mon, 11 Feb 2013 22:44:11 GMT
Content-Type: text/html
Connection: keep-alive
Cache-Control: public

Is there any way to spoof this Server name ?
« Last Edit: 1970-01-01, 01:00:00 by Guest »

 


Top 4 Global Search Engines:    Google    Bing    Baidu    Yahoo

Page created in 0.068 seconds with 21 queries.

web stats analysis