=== Hiding apache version ==== If you run a curl on your website similar to the curl below, does it return apache versions? \\ This is NOT secure. We will now make a simple change to the httpd.conf or apache2.conf file to hide this ==Example curl:== curl -LIsX GET lukeslinux.co.uk | grep -i apache \\ ^ Value ^ Description ^ | ServerTokens Prod | This will configure apache not to send any version numbers in the HTTP header | | Server Signature Off | This will make sure apache does not display version number in footer of server generated pages | To hide the php value, turn the following value Off ServerSignature On; You will also need to change the following value: ServerTokens Prod Restart apache and you are done. Test again by rerunning the curl command.