Disable httpd.conf server os token

Swakoo · 01-22-2007, 08:41 PM

we all know as httpd (apache) serve webpages, in every communication with web clients, the apache version will be send out.

Is there anyway to prevent it (version number) to be sent out? I was told it can be done in httpd.conf over some configuration call serverOsToken but I can't find it.

Anyone knows?

trickykid · 01-22-2007, 09:37 PM

You're probably looking for this:

http://httpd.apache.org/docs/2.0/mod...l#servertokens

Swakoo · 01-23-2007, 12:21 AM

ah its servertokens.. thanks!

but there's no way to totally turn it off? (ok I know I am being anal...)

Swakoo · 01-23-2007, 03:17 AM

is it possible to turn off the php version too?

trickykid · 01-23-2007, 06:53 AM

Quote:

Originally Posted by Swakoo

is it possible to turn off the php version too?

Did you not read the page I linked you to?

Here are the options for this Directive:

Code:

ServerTokens Prod[uctOnly]
Server sends (e.g.): Server: Apache
ServerTokens Major
Server sends (e.g.): Server: Apache/2
ServerTokens Minor
Server sends (e.g.): Server: Apache/2.0
ServerTokens Min[imal]
Server sends (e.g.): Server: Apache/2.0.41
ServerTokens OS
Server sends (e.g.): Server: Apache/2.0.41 (Unix)
ServerTokens Full (or not specified)
Server sends (e.g.): Server: Apache/2.0.41 (Unix) PHP/4.2.2 MyMod/1.2

Swakoo · 01-23-2007, 09:35 PM

Quote:

Originally Posted by trickykid

Did you not read the page I linked you to?

Here are the options for this Directive:

Code:

ServerTokens Prod[uctOnly]
Server sends (e.g.): Server: Apache
ServerTokens Major
Server sends (e.g.): Server: Apache/2
ServerTokens Minor
Server sends (e.g.): Server: Apache/2.0
ServerTokens Min[imal]
Server sends (e.g.): Server: Apache/2.0.41
ServerTokens OS
Server sends (e.g.): Server: Apache/2.0.41 (Unix)
ServerTokens Full (or not specified)
Server sends (e.g.): Server: Apache/2.0.41 (Unix) PHP/4.2.2 MyMod/1.2

I did, and I am using the Prod option. Just that when I run a simple php script I realise it is still showing the PHP version, though not the apache one.

So am just wondering.

trickykid · 01-24-2007, 05:24 AM

Quote:

Originally Posted by Swakoo

I did, and I am using the Prod option. Just that when I run a simple php script I realise it is still showing the PHP version, though not the apache one.

So am just wondering.

What does this php script look like? It might behave differently that displays the php version.

Swakoo · 01-24-2007, 11:38 PM

actually I just ran 'php mail.php' off the CLi, where mail.php is a simple script that does mailing using mail()

it showed the php version