Php: Improve security without x-powered-by and PHP version

Created on 22 Oct 2020  路  1Comment  路  Source: docker-library/php

Hello,
I notice that in the file $PHP_INI_DIR/php.ini-production (.ini for production) the header of x-powered-by is exposed.

I think, for security reasons, is better (in production) to hide this information.

The change that I suggest is :
from expose_php = On to expose_php = Off, what do you think about this?

Regards

picture alessandro-candon

Most helpful comment

This file is juste a copy of the php.ini-production provided by PHP, this should probably be reported to PHP directly.

picture jvasseur on 22 Oct 2020
👍5

>All comments

This file is juste a copy of the php.ini-production provided by PHP, this should probably be reported to PHP directly.

jvasseur picture jvasseur on 22 Oct 2020
👍5
Was this page helpful?
0 / 5 - 0 ratings

Related issues

skyzyx picture skyzyx  路  3Comments
ihorsamusenko picture ihorsamusenko  路  4Comments
solocommand picture solocommand  路  3Comments
sanjay-rakholiya picture sanjay-rakholiya  路  3Comments
igodorogea picture igodorogea  路  3Comments