PHP (Hypertest Preprocessor) is a server-side HTML embedded scripting language that is very popular for web development. When PHP is running on a web server, each and every request to the web server will return the following line of header with PHP version information to the browser.
The X-Powered-By header info is controlled by expose_php core php.ini directive. expose_php determines whether web server will report that PHP is being used to process the request, and what version of PHP is installed to every request. expose_php is enabled by default, so the information is sent on each HTTP and HTTPS request.
While PHP is generally reliable and secure, older and outdated versions of PHP may contain security holes and bugs. Although there is no problem leaving PHP version info exposed, and enable expose_php is not classified as security risk, but malicious hackers looking for potentially vulnerable targets can use PHP version installed on a web server to identify a weakness. By turning off expose_php, the existence and version of PHP is hidden, and help lower threat to attacks that rely on simple reconnaissance techniques to scan for vulnerable targets. Although websites not using SEO-optimized URL structures may still potentially been seen by human as running PHP from link location (e.g. index.php?variable=value), but bots and automated scripts from novice attackers may be fooled.
So it’s recommended disable and turn expose_php off. Webmasters can disable expose_php in the php.ini file, usually located in /etc, /usr/lib, /usr/local/lib or /usr/local/lib/php/:
; Disable expose_php for security reasons
expose_php = Off
Tip: Setting expose_php to Off in php.ini does not prevent or stop php_info() function from executing.
- How to Install Windows 10 & Windows 8.1 with Local Account (Bypass Microsoft Account Sign In)
- How to Upgrade CentOS/Red Hat/Fedora Linux Kernel (cPanel WHM)
- How to Install Popcorn Time Movies & TV Shows Streaming App on iOS (iPhone & iPad) With No Jailbreak
- Stream & Watch Free Torrent Movies & TV Series on iOS with Movie Box (No Jailbreak)
- Windows 10 Preview ISO Images Download Links & Product Key Live
- Microsoft Office 2016 July Feature Update 16.0.7167.2015 To Insider
- Aiseesoft MXF Converter Free Full Version With Genuine License Key Code
- WonderFox Mega Summer Software Giveaway – Free 14 Premium Full Version Software Worth $860 With Genuine License Serial Code [Ashampoo Photo Commander 12, Wise Care 365 Pro, Tenorshare iPhone Care Pro, PowerArchiver 2015, PD Howler 9.6, DoYourData Recovery Pro]
- Windows 10 Insider Preview Build 14393.3 Released To the Fast ring and Slow ring Insider for PC and Mobile – Here’s What’s New Improvements, Fixes, and Known Issues
- Windows 10 Build 14388 and Build 14390 Rolling Out to Fast Ring and Slow Ring Insiders for PC and Mobile