note 86286 added to security.hiding

The idea of hiding the X-Powered-By in PHP is a flawed attempt at establishing security. As the manual indicates, obscurity is not security. If I were exploiting a site, I wouldn't check what scripting language the site runs on, because all that would matter to me is exploiting it. Hiding the fact that you use [x] language isn't going to prevent me from bypassing poor security. ---- Server IP: 69.147.83.197 Probable Submitter: 68.173.205.18 ---- Manual Page -- http://www.php.net/manual/en/security.hiding.php Edit -- https://master.php.net/note/edit/86286 Del: integrated -- https://master.php.net/note/delete/86286/integrated Del: useless -- https://master.php.net/note/delete/86286/useless Del: bad code -- https://master.php.net/note/delete/86286/bad+code Del: spam -- https://master.php.net/note/delete/86286/spam Del: non-english -- https://master.php.net/note/delete/86286/non-english Del: in docs -- https://master.php.net/note/delete/86286/in+docs Del: other reasons-- https://master.php.net/note/delete/86286 Reject -- https://master.php.net/note/reject/86286 Search -- https://master.php.net/manage/user-notes.php