Problem/Motivation

I try to remove Server and X-Powered-By to suppress server and PHP informations for my website security.

Steps to reproduce

Add this lines if the configuration form :

Server
X-Powered-By
X-Generator

Proposed resolution

Only X-Generator is deleted. I don't know if it's possible to delete Server and X-Powered-By with the module but it could be really useful to be able to.

Comments

Jérôme Dehorter created an issue. See original summary.

j_s’s picture

j_s commented

I'm also getting this issue. Would be good to remove x-powered-by.

Aside from changing it in php settings, setting this in htaccess may work:

Header always unset X-Powered-By
Header unset X-Powered-By

anybody’s picture

anybody
Primary language German
Location Porta Westfalica
commented
Version: 2.0.1 » 2.0.x-dev

Hi, could you let us know a bit more about your server setup? Are you using Apache or NGINX? Are you using NGINX as reverse proxy or any other reverse proxy?

j_s’s picture

j_s commented

In my case it's Apache. I'm not sure about proxy details.