ckizer

Well-Known Member
Aug 12, 2001
129
0
316
How can I get serverinformation to actually be off? I modified it in httpd.conf however using whois.sc/anydomain.com here you'll still see this with all cpanel hosts:

Apache/1.3.33 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.3.10 FrontPage/5.0.2.2635 mod_ssl/2.8.22 OpenSSL/0.9.7a

How do I hide this?
 

hostultra

Well-Known Member
Aug 21, 2002
167
0
166
Theres nothing called ServerInformation
So i will assume you mean ServerSignature.

Signature is the signature in server error messages not the headers.
You need to use

ServerTokens ProductOnly
 

hostultra

Well-Known Member
Aug 21, 2002
167
0
166
No downsides that i can think of.
All it does is prevent version numbers and module information being public.

You may also want to set expose_php to off in the php.ini to stop php giving its version number in the headers.