lundi 16 février 2015

Disable the secure information from header

In my application(developed by PHP) using some ajax calls, So in every ajax call Request header there is some information about the website like



Connection:Keep-Alive
Content-Length:500
Content-Type:text/html
Date:Mon, 16 Feb 2015 10:44:39 GMT
Keep-Alive:timeout=5, max=99
Server : Apache/x.x.10
X-Powered-By:PHP/5.5.15


So i want to disable the information about server & x-powered by etc. I googled for this issue and got alink Disable x-powered by. If i will set the variable in php.ini file



expose_php=Off


It's removing the content 'X-powered-By' and can we remove the web server information from request headers?





Aucun commentaire:

Enregistrer un commentaire