• WWW: PHP

  • How to hide “Server” and “X-Powered-By” response headers?

I'm currently using php to build a website, then I noticed that there are two headers in the response: “Server” and “X-Powered-By”, they show the technical information of the server, and I think it's not safe, what to What can I do to hide these response headers? thanks!!!

    wuxiaci You can block access to header certain data by modifying headers using the .htaccess file.

        Thanks, but I tried that, not sure why it didn't work.
        I put the .htaccess file in the root directory of the site and then the content is:
        "
        AddType application/x-httpd-php74 .php
        Header unset Server
        Header unset X-Powered-By
        Header set X-Content-Type-Options "nosniff"
        Header set X-Frame-Options"DENY"
        "

        It's strange that “set” works, but “unset” does not.

        admin
        Thanks, but I tried that, not sure why it didn't work.
        I put the .htaccess file in the root directory of the site and then the content is:
        "
        AddType application/x-httpd-php74 .php
        Header unset Server
        Header unset X-Powered-By
        Header set X-Content-Type-Options "nosniff"
        Header set X-Frame-Options"DENY"
        "

        It's strange that “set” works, but “unset” does not.

            wuxiaci We don't support unset for now. But you can override headers.