#server_tokens

How to remove PHP X-Powered-By & Nginx Version

While I’m auditing my website’s security with curl command to view HTTP Response Header. I see that nginx gives out quite some server’s info which should be hidden for security reason.

You can view your HTTP Response Header with curl command $ curl -I http://domain.com/

This is the output from one of my Nginx web server

HTTP/1.1 200 OK Server: nginx/1.6.0 Date: Fri, 09 May 2014 05:19:45 GMT…