> How to Remove Apache Server Information From HTTP Error Pages

How to Remove Apache Server Information From HTTP Error Pages

Posted on Thursday, December 19, 2013 | Comments Off





1. Open the Apache Web server configuration file in a text editor, from the directory to which Apache was installed. The configuration file will be named 'apache2.conf' or 'httpd.conf,' depending on your operating system and Apache version.
2. Locate the setting named 'ServerTokens,' which is usually set to 'Full' by default and displays the full Apache version information. Change this setting to 'Prod,' which will only display 'Apache' and not the version number or module information.

3. Locate the setting 'ServerSignature,' which is set to 'On' by default. Change this setting to 'Off,' which will stop the server information from being included on HTTP error pages.
4. Save the file and restart Apache to start using the new settings.
5. Test that Apache is no longer showing server information by browsing to a page that doesn't exist on the server. The server will show a 404 'page not found' error page, and you should no longer be able to see any information about the server version and modules.

Powered by Blogger.