hide server info

<?php

/*wamp64\bin\apache\apache2.4.18\confhttpd.conf ServerSignature On  ServerTokens Full 

Server:Apache/2.4.18 (Win64) PHP/5.6.19
X-Powered-By:PHP/5.6.19
*/
<?php
header(‘X-Powered-By: ASP.NET‘);

/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature On
 ServerTokens Full 

Server:Apache/2.4.18 (Win64) PHP/5.6.19
X-Powered-By:ASP.NET
*/
<?php
header(‘Server: ASP.NET‘);
header(‘X-Powered-By: ASP.NET‘);

/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature On
 ServerTokens Full 

Server:Apache/2.4.18 (Win64) PHP/5.6.19
X-Powered-By:ASP.NET
*/
<?php

/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature Off
 ServerTokens Full 

Server:Apache/2.4.18 (Win64) PHP/5.6.19
X-Powered-By:ASP.NET
*/
<?php

/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature Off
 ServerTokens ProductOnly 

Server:Apache
X-Powered-By:PHP/5.6.19
*/
<?php
 header(‘X-Powered-By: ASP.NET‘);
/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature Off
 ServerTokens ProductOnly 

Server:Apache
X-Powered-By:ASP.NET
*/
<?php
 header(‘X-Powered-By: yuanjiangw‘);
/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature Off
 ServerTokens ProductOnly 

Server:Apache
X-Powered-By:yuanjiangw
*/

https://httpd.apache.org/docs/2.4/mod/core.html#serversignature

ServerSignature Directive

Description: Configures the footer on server-generated documents
Syntax: ServerSignature On|Off|EMail
Default: ServerSignature Off
Context: server config, virtual host, directory, .htaccess
Override: All
Status: Core
Module: core

The ServerSignature directive allows the configuration of a trailing footer line under server-generated documents (error messages,mod_proxy ftp directory listings, mod_info output, ...). The reason why you would want to enable such a footer line is that in a chain of proxies, the user often has no possibility to tell which of the chained servers actually produced a returned error message.

The Off setting, which is the default, suppresses the footer line (and is therefore compatible with the behavior of Apache-1.2 and below). The Onsetting simply adds a line with the server version number and ServerName of the serving virtual host, and the EMail setting additionally creates a "mailto:" reference to the ServerAdmin of the referenced document.

After version 2.0.44, the details of the server version number presented are controlled by the ServerTokens directive.

See also

ServerTokens Directive

Description: Configures the Server HTTP response header
Syntax: ServerTokens Major|Minor|Min[imal]|Prod[uctOnly]|OS|Full
Default: ServerTokens Full
Context: server config
Status: Core
Module: core

This directive controls whether Server response header field which is sent back to clients includes a description of the generic OS-type of the server as well as information about compiled-in modules.

ServerTokens Full (or not specified)
Server sends (e.g.): Server: Apache/2.4.2 (Unix) PHP/4.2.2 MyMod/1.2
ServerTokens Prod[uctOnly]
Server sends (e.g.): Server: Apache
ServerTokens Major
Server sends (e.g.): Server: Apache/2
ServerTokens Minor
Server sends (e.g.): Server: Apache/2.4
ServerTokens Min[imal]
Server sends (e.g.): Server: Apache/2.4.2
ServerTokens OS
Server sends (e.g.): Server: Apache/2.4.2 (Unix)

This setting applies to the entire server, and cannot be enabled or disabled on a virtualhost-by-virtualhost basis.

After version 2.0.44, this directive also controls the information presented by the ServerSignature directive.

Setting ServerTokens to less than minimal is not recommended because it makes it more difficult to debug interoperational problems. Also note that disabling the Server: header does nothing at all to make your server more secure. The idea of "security through obscurity" is a myth and leads to a false sense of safety.

See also

<?php
 header(‘X-Powered-By: yuanjiangw‘);
/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature On
 ServerTokens ProductOnly 

Server:Apache
X-Powered-By:yuanjiangw
*/
<?php
 header(‘X-Powered-By: yuanjiangw_mail‘);
/*
wamp64\bin\apache\apache2.4.18\conf
httpd.conf
 ServerSignature EMail
 ServerTokens ProductOnly 

Server:Apache
X-Powered-By:yuanjiangw_mail
*/

发问:

0-ServerSignature作用?

时间: 2024-08-24 02:50:16

hide server info的相关文章

读书笔记——《黑客大曝光》(2/8)

第三章 查点 查点:针对已知的弱点,对识别出来的主机和服务进行更为充分的探查. 信息收集技术和查点技术之间的关键区别是攻击者的入侵程度.查点包括了对目标系统的主动连接和直接查询.通过查点寻找的信息包括用户账号名.错误配置的共享资源和具有已知安全漏洞的旧版软件. 查点技术在很大程度上取决于端口扫描和操作系统侦测收集到的信息.端口扫描和查点功能经常捆绑到同一个工具中——SuperScan. 标语获取是最通用的查点技术. 3.1 服务指纹分析技术 1.服务指纹分析技术:是一项能够快速和有效的分析出整个

Jetty Session

需求 困难 分析 解决 根据sessionid获取session 遇到的问题 将session存储到MongoDB中 需求 系统管理员可以根据用户登录时的sessionid使用户的session变为无效状态,以达到强制其下线的目的. 要在集群环境中仍然有效,即用户在一个服务节点下线后,在其他节点也同样下线. 在集群环境session要共享且同步. 困难 Servlet API中没有提供根据sessionid获取相应session的方法. Jetty默认不支持集群环境下的session共享 分析

SQL Server – Show/Hide Results Pane in Management Studio 2012

In earlier version of SQL Server Management Studio (2005, 2008 and 2008 R2) you can show/hide results pane using keyboard shortcut Ctrl+R . This shortcut was also present in Query Analyzer (SQL Server 2000). This shortcut is no longer available in SQ

树莓派上启动nfs server

1. nfs 是什么 (略)http://vbird.dic.ksu.edu.tw/linux_server/linux_redhat9/0330nfs.php 2. 安装 nfs-kernel-server 和 rpcbind(替代portmap), 并启动rpcbind和nfs-kernel-server服务. apt-get install nfs-common nfs-kernel-server sudo apt-get install portmap [email protected]

windows server 2003下配置IIS服务器

Internet Information Services(IIS,互联网信息服务),是由微软公司提供的基于运行Microsoft Windows的互联网基本服务.最初是Windows NT版本的可选包,随后内置在Windows 2000.Windows XP Professional和Windows Server 2003一起发行,但在Windows XP Home版本上并没有IIS. 1.IIS(Inter-IC Sound bus)又称I2S,是菲利浦公司提出的串行数字音频总线协议.目前很

web server &amp;&amp; web framework角色区分

问题 web framework是否包括webserver? 是否可以包括? webserver 和 framework的关系是? https://www.quora.com/What-is-the-difference-between-a-web-server-and-a-web-framework A web server is an executable that handle http requests and serve your files to the client. A lot

转换Arcgis Server REST接口实现OL2直接调用

概述: 本文讲解如何通过Arcgis Server REST 的导出地图(Export)接口,实现在OL2中直接以WMS的方式调用Arcgis Server REST服务. 实现思路: 1.rest的export接口介绍 服务支持导出地图 导出参数 Parameter Details f Description: The response format. The default response format is html. If the format is image, the image

走进http的世界------用C代码模拟浏览器IE(http client)访问web(http server)的行为

在本文中, 我们来玩一下http.   既然你看到了这篇文章, 那就说明你肯定直接或间接借助了http协议(浏览器的实现需要用到http协议). 很多书本把http介绍得玄乎其玄, 高深莫测, 其实,  http也没什么大不了的. 当我们用浏览器看登录www.baidu.com的时候, 浏览器相当于客户端, 而服务端是百度公司掌控着. 要想大致了解http,  网上资料可谓如山如海.作为一名程序员(注意, 我说的是程序猿), 我始终坚信, 没有代码, 没有实践, 只讲理论, 那就是扯淡, 尽管一

sql server 中隐藏掉无关数据库

先贴上我实际测试的效果 Problem I have a SQL Server instance that has hundreds of databases.  Navigating the database tree in SSMS is a pain and I was wondering if there was a way to limit the list of databases that I see in SSMS? Solution SQL Server consolidati