note 64278 added to security.hiding

I think the best way to hide PHP on Apache and Apache itself is this: httpd.conf ------------- # ... # Minimize 'Server' header information ServerTokens Prod # Disable server signature on server generated pages ServerSignature Off # ... # Set default file type to PHP DefaultType application/x-httpd-php # ... php.ini ------------ ; ... expose_php = Off ; ... Now the URLs will look like this: http://my.server.com/forums/post?forumid=15 Now hacker knows only that you are using Apache. ---- Server IP: 193.219.81.76 Probable Submitter: 217.147.43.162 ---- X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER autolearn=no version=2.64 ---- Manual Page -- http://www.php.net/manual/en/security.hiding.php Edit -- http://master.php.net/note/edit/64278 Del: integrated -- http://master.php.net/note/delete/64278/integrated Del: useless -- http://master.php.net/note/delete/64278/useless Del: bad code -- http://master.php.net/note/delete/64278/bad+code Del: spam -- http://master.php.net/note/delete/64278/spam Del: non-english -- http://master.php.net/note/delete/64278/non-english Del: in docs -- http://master.php.net/note/delete/64278/in+docs Del: other reasons-- http://master.php.net/note/delete/64278 Reject -- http://master.php.net/note/reject/64278 Search -- http://master.php.net/manage/user-notes.php