1.

Which directive should we disable to obscure the fact that PHP is being used on our server?(a) show_php(b) expose_php(c) print_php(d) info_phpI had been asked this question during an internship interview.My question comes from Website Security using PHP in chapter File and Session Handling in PHP of PHP

Answer» RIGHT answer is (b) expose_php

The explanation: USING the expose_php directive we can PREVENT PHP version details from being appended on our web server signature. When expose_php is disabled, the server signature will look like: Apache/2.2.11 (Ubuntu) Server.


Discussion

No Comment Found

Related InterviewSolutions