#32079 [Opn->WFx]: PHP "Safe"-Mode not identifiable in X-Powered-By header

ID: 32079 Updated by: derick@php.net Reported By: milky at users dot sf dot net -Status: Open +Status: Wont fix Bug Type: Feature/Change Request Operating System: all PHP Version: Irrelevant New Comment: We won't change because of obvious security concerns. External people should not know exactly what your set-up is. Previous Comments: ------------------------------------------------------------------------ [2005-02-23 15:17:02] milky at users dot sf dot net Description: ------------ PHP sends an "X-Powered-By" header with each request answer, containing a PHP version string. It's also included with the Apache id in its "Server" header. This version information however misses important informations - for example which sort of PHP is running over there. If PHP is running in crippled mode, it should identify itself as "SM-PHP/5.03" or just "S/M-PHP" or so. This would significantly benefit the Web hosting provider industry, since fewer contracts would be discarded again after customers find out that they've only be given "Safe"-Mode PHP. Incorrectly advertising features ("PHP" instead of "S/M-PHP") counts as mischief in central Europe. *hint,hint* (Given, that there is always either Python or Perl running on "safe"-moded Webservers, it's obvious that this setting was made for dumb providers. No need to discuss that again here; no?) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=32079&edit=1