#35209 [NEW]: X-Powered-By: PHP/4.4.1 is visible with expose_php=off

From: ghost777ghost at hotmail dot com Operating system: Trustix 2.2 PHP version: 4.4.1 PHP Bug Type: Apache related Bug description: X-Powered-By: PHP/4.4.1 is visible with expose_php=off Description: ------------ I have compiled php 4.4.1, with apache 1.3.34 on a trustix secure linux 2.2. I can not get X-Powered-By header, nor built-in Easter-eggs to disappear. expose_php = Off is set in php.ini (expose_php = 0 behaves the same) This is the output of a head-request: ........................................ HEAD / HTTP/1.0 HTTP/1.1 200 OK Date: Sun, 13 Nov 2005 22:11:49 GMT Server: Apache X-Powered-By: PHP/4.4.1 Connection: close Content-Type: text/html ........................................ compilation: ./configure --prefix=/usr/local/php --enable-memory-limit --enable-magic-quotes --enable-sockets --with-openssl --enable-force-cgi-redirect --enable-safe-mode --with-apache=/somedir/apache_1.3.34 Easter-egg: ?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 I have php 4.4.0 with apache 1.3.33 on another trustix 2.2, and this setup responds to changes in expose_php, and it does not show X-Powered-By. I will greatly appreciate any productive feedback to disable the exposure of php. Best wishes from ghost -- Edit bug report at http://bugs.php.net/?id=35209&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=35209&r=trysnapshot4 Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=35209&r=trysnapshot50 Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=35209&r=trysnapshot51 Fixed in CVS: http://bugs.php.net/fix.php?id=35209&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=35209&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=35209&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=35209&r=needscript Try newer version: http://bugs.php.net/fix.php?id=35209&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=35209&r=support Expected behavior: http://bugs.php.net/fix.php?id=35209&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=35209&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=35209&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=35209&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=35209&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=35209&r=dst IIS Stability: http://bugs.php.net/fix.php?id=35209&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=35209&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=35209&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=35209&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=35209&r=mysqlcfg