how to remove serverSignature from Wordpress installation
I am trying to remove server Signature from Wordpress blog. I am using this setting for .htaccess:
ServerSignature Off
but I see X-Powered-By has gone and not this ServerSignature:
*Server: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8e-fips-rhel5开发者_运维问答 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.30*
I am setting the value in root public folder of .htaccess file.
[Better late than never LOL]
According to various sources, the inability to remove certain headers is design issue of Apache e.g. Removing http headers in Apache2
The best idea through Apache alone (as far as I'm aware) is to suppress how much information is given by adding this to your httpd.conf or apache.conf files (not .htaccess):
ServerTokens Prod
So in the header it will show something like:
Server: Apache
instead of your full:
Server: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.30
精彩评论