How to hide “Server” and “X-Powered-By” response headers?

wuxiaci

I'm currently using php to build a website, then I noticed that there are two headers in the response: “Server” and “X-Powered-By”, they show the technical information of the server, and I think it's not safe, what to What can I do to hide these response headers? thanks!!!

admin

wuxiaci You can block access to header certain data by modifying headers using the .htaccess file.

wuxiaci

admin
Thanks, but I tried that, not sure why it didn't work.
I put the .htaccess file in the root directory of the site and then the content is:
"
AddType application/x-httpd-php74 .php
Header unset Server
Header unset X-Powered-By
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options"DENY"
"

It's strange that “set” works, but “unset” does not.

wuxiaci

Thanks, but I tried that, not sure why it didn't work.
I put the .htaccess file in the root directory of the site and then the content is:
"
AddType application/x-httpd-php74 .php
Header unset Server
Header unset X-Powered-By
Header set X-Content-Type-Options "nosniff"
Header set X-Frame-Options"DENY"
"

It's strange that “set” works, but “unset” does not.

admin

wuxiaci We don't support unset for now. But you can override headers.