Page 1 of 1

Help to Stop Apache from .....

PostPosted: 17. July 2010 22:06
by whiterican
I would like to know how to get Apache to stop displaying the server information on error pages that may come up to the Public. A small but helpful added security measure I would think.


[quote]7/17/2010 3:34:55 PM
Apache/2.2.14 (Win32) DAV/2 mod_ssl/2.2.14 OpenSSL/0.9.8l mod_autoindex_color PHP/5.3.1 mod_apreq2-20090110/2.7.1 mod_perl/2.0.4 Perl/v5.10.1[quote]


I have identified this as being a part of the script in the bottom html page...

Is it as simple as removing that line?

Anyway I will try it and Update accordingly

White


Ok it is that simple..

If any one else would like to know heres the way

Go to xampp/apache/error/includes/bottom.html and delete line 11 up to </span>

thanks again

Re: Help to Stop Apache from .....

PostPosted: 18. July 2010 03:11
by Altrea
Or even better just configure the Apache options "ServerTokens" and "ServerSignature" which are defined in the file xampp\apache\conf\extra\http-default.conf

Re: Help to Stop Apache from .....

PostPosted: 18. July 2010 15:07
by JonB
Altrea's way is the correct fix, as the server signature can be queried even if HTML pages are not served.

Good Luck
8)

Re: Help to Stop Apache from .....

PostPosted: 18. July 2010 15:42
by whiterican
Thanks for the replies after reading the config I understood better as to why you suggested this approach.

Thanks for your time yet again....

White