note 17312 deleted from security.hiding by jimw
| From: | jimw@php.net | Date: | Tue, 18 Dec 2001 23:18:49 +0000 |
| Subject: | note 17312 deleted from security.hiding by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-23308@lists.php.net to get a copy of this message | ||
Yes, security by obscurity is always debated, but this doesn't mean it has no place in a
security policy. The measures described in this chapter - when combined with solid peer code review,
both of PHP itself and of your script - go a long way towards making script kiddies unhappy. One
more thing one should add is setting "expose_php" to "off" (and generally, using
Apache's ServerTokens to reveal as little about the system as possible).