How to hide Apache and PHP Versions from remote users

Hide Apache Information

To hide the information, add/change the following two apache directives in Apache configuration file /etc/httpd/conf/httpd.conf

ServerTokens ProductOnly
ServerSignature Off

Now you need to restart your web server using the following command

# service httpd restart

Now the output for apache header looks like below

Server: Apache

Hide PHP Version in Apache from remote user’s requests

In your php.ini (the typical path is /etc/php.ini) locate the line containing “expose_php = On