Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:40303 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 42567 invoked from network); 6 Sep 2008 12:42:20 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Sep 2008 12:42:20 -0000 Authentication-Results: pb1.pair.com smtp.mail=bri@cshell.gr; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=bri@cshell.gr; sender-id=unknown Received-SPF: error (pb1.pair.com: domain cshell.gr from 195.130.121.123 cause and error) X-PHP-List-Original-Sender: bri@cshell.gr X-Host-Fingerprint: 195.130.121.123 pc123.cs.uoi.gr Linux 2.5/2.6 (sometimes 2.4) (2) Received: from [195.130.121.123] ([195.130.121.123:1117] helo=cshell.gr) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 0B/84-12247-CAA72C84 for ; Sat, 06 Sep 2008 08:42:20 -0400 Received: from [192.168.1.110] (dsl-201-165.adsl.uoi.gr [83.212.201.165]) by cshell.gr (Postfix) with ESMTPSA id 84DBEEF885 for ; Sat, 6 Sep 2008 15:42:08 +0300 (EEST) Message-ID: <48C27AB1.3000505@cshell.gr> Date: Sat, 06 Sep 2008 15:42:25 +0300 User-Agent: Thunderbird 2.0.0.16 (Windows/20080708) MIME-Version: 1.0 To: internals@lists.php.net Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: remove x-powered-by from php 5.2.3 cgi module From: bri@cshell.gr (sotiris karavarsamis) i've got a webserver which runs php 5.2.3 via fastcgi, and i've recently tried to remove the x-powered-by header for security reasons. however, changing the php.ini expose-php directive value to off made no difference. After searching a little on google for this problem, it came out that there is no configuration directive for this, and so i created a little patch for the cgi sapi module to solve it. you can find the patch at http://docs.cshell.gr/patches/xpoweredby-cgiphp5.2.3.patch . hope it helps many people who encounter the same problem. you can also argue for this at http://www.cshell.gr/?p=113 .