Monday, March 17, 2014

To remove server information from header

For removing php version, need to off at expose_php at php.ini. For removing web server version, For Apache, at httpd.conf, change to below setting. ServerSignature Off ServerTokens Prod For IIS, - Install urlscan(IIS extensoin) - change 1 to RemoveServerHeader at UrlScan.ini - Add "" between "" tag at each .netframe's machine.config file.