웹서버에서 PHP 버전을 숨기는 방법
1. 기본으로 셋팅시에는 PHP 버전이 노출이 된다
|
1
2
3
4
5
6
7
8
9
10
11
12
|
[root@xinet ~]# curl -IL https://xinet.kr --insecure
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Apr 2022 05:45:03 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Set-Cookie: PHPSESSID=so4c1q4plhf12d05t72mrcl53b; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <https://xinet.kr/index.php?rest_route=/>; rel="https://api.w.org/"
|
2. 버전 정보를 숨기기 위해서 php.ini 파일을 열어서 expose_php 값을 Off 로 수정한다
|
1
2
3
4
5
|
[root@xinet ~]# vi /usr/local/php-fpm/etc/php.ini
;expose_php = On
expose_php = Off
|
3. php 재시작 , 만약 php가 apache, nginx에 모듈로 동작이 된다면 웹서버 재시작
|
1
2
3
4
|
[root@xinet ~]# systemctl restart php-fpm
### 모듈형태
[root@xinet ~]# systemctl restart httpd
|
4. 이제 다시 확인
|
1
2
3
4
5
6
7
8
9
10
11
|
[root@xinet ~]# curl -IL https://xinet.kr --insecure
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 Apr 2022 05:47:38 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Set-Cookie: PHPSESSID=asi36g9177ormfbgoq3tpbqei0; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <https://xinet.kr/index.php?rest_route=/>; rel="https://api.w.org/"
|