apache_security_version []

This is an old revision of the document!

Hiding apache version

If you run a curl on your website similar to the curl below, does it return apache versions?
This is NOT secure. We will now make a simple change to the httpd.conf or apache2.conf file to hide this

Example curl:

curl -LIsX GET lukeslinux.co.uk | grep -i apache

To hide the php value, turn the following value Off

ServerSignature On;

You will also need to change the following value:

ServerTokens Prod

Restart apache and you are done. Test again by rerunning the curl command.