MRatWork Forum by Mustafa Ramadhan

Sawo Project - Kloxo-MR Discussions => Kloxo-MR Technical Helps => Topic started by: Spacedust on 2013-02-10, 21:19:24

Title: How to hide php and nginx version
Post by: Spacedust on 2013-02-10, 21:19:24: How to hide this ?

Quote
[root@server /]# curl -s --head domain.com
HTTP/1.1 200 OK
Server: nginx/1.3.12
Date: Sun, 10 Feb 2013 15:20:53 GMT
Content-Type: text/html
Connection: keep-alive
X-Powered-By: PHP/5.4.11
Cache-Control: public
Title: Re: How to hide php and nginx version
Post by: MRatWork on 2013-02-10, 21:48:23: Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On
Title: Re: How to hide php and nginx version
Post by: Spacedust on 2013-02-10, 22:54:26: Quote from: "MRatWork"
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On

Disabled all 3 and still got the same...
Title: Re: How to hide php and nginx version
Post by: MRatWork on 2013-02-10, 23:23:05: Quote from: "Spacedust"
Quote from: "MRatWork"
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On

Disabled all 3 and still got the same...
After restart services?
Title: Re: How to hide php and nginx version
Post by: Spacedust on 2013-02-10, 23:42:14: Quote from: "MRatWork"
Quote from: "Spacedust"
Quote from: "MRatWork"
Default value:

nginx -> server_tokens on
httpd -> ServerSignature On
php -> expose_php = On

Disabled all 3 and still got the same...
After restart services?

Yes.

Also nginx reporting:
Quote
/etc/init.d/nginx restart
nginx: [emerg] unknown "rootdirhttp" variable
nginx: configuration file /etc/nginx/nginx.conf test failed
Title: Re: How to hide php and nginx version
Post by: Spacedust on 2013-02-12, 04:42:39: I was able to hide PHP version after reloading php-fpm, but nginx is still there:

HTTP/1.1 200 OK
Server: nginx/1.3.12
Date: Mon, 11 Feb 2013 22:44:11 GMT
Content-Type: text/html
Connection: keep-alive
Cache-Control: public

Is there any way to spoof this Server name ?