• Apache is the most widely used web server software. It runs on 67% of all webservers in the world. It is fast, reliable, and secure. It can be highly customized to meet the needs of many different environments by using extensions and modules.
• If you use OS/400 V5R3 or higher, you must use the HTTP server powered by Apache. This topic covers how to configure this server for WebDocs. For some generic information on configuring a web server for WebDocs, refer to Overview of Configuring the Web Server. Note: To configure the web server, you should temporarily shut it down.
• 1.2 Task: Configure IBM i Web Server (powered by Apache) LANSA Web supports CGI on IBM i. If you have used a Typical Install or if you have selected CGI during the Custom Install of the LANSA Web, then a default IBM HTTP Server (powered by Apache) configuration will have been installed on your system named the same as your LANSA program library.

• Oracle Http Server Powered By Apache 1.3.22 Exploit
• Z/os Http Server - Powered By Apache User's Guide

Download HTTP Server powered by Apache for PC - free download HTTP Server powered by Apache for PC/Mac/Windows 7,8,10, Nokia, Blackberry, Xiaomi, Huawei, Oppo - free download HTTP Server powered by Apache Android app, install Android apk app for PC, download free android apk files at choilieng.com.

It all starts from here – whenever the client requests for a page, the server sends out response data (the actual content) and some response headers as well. The header contains information such as HTTP response status, Content-Type, Content-Length, Location of the requested page, response date and time, server information and informations generated by third party tools and plugins. For example, a default configuration of web server will send out critical informations such as web server version, name of the operating system, W3 Total Cache version (in case of using WordPress plugin), PHP version, Pagespeed version etc…

Here’s an example header response:

How to view response headers of a website?

Method 1: You can use Chrome Inspect element or Firebug extension.

Method 2: Using Curl command:

Method 3: Using wget command

Method 4: Using Telnet

You can telnet to a server on port 80 and send GET request as shown below.

You need to hit enter twice after Host: www.domain.com to see the response headers.

Below is the sample response header:

From the above examples, you can see information such as Apache version, operating system name, PHP version, Pingback URL, Mod-Pagespeed version etc…It doesn’t stop there, sometimes third party tools and plugins might push few information into headers and that are visible publicly.

It’s a good practice to hide those information using Apache Header Directive. The apache header directive will be processed before the server responds to the client and hence it allows you to set or unset response headers.

To do that, you need headers_module. Check if your webserver has Header module installed using the below command:

You will find more information about Apache Modules and list of enabled modules here!

You should never be loading too many modules that are not required for your server. Too many modules, too many problems. Learn to list all modules loaded by PHP and disable unwanted ones to secure your website.

Turn Off Apache Signature information

Open httpd.conf file as below:

Make sure, you set the values of ‘ServerSignature‘ and ‘ServerTokens‘ as below:

Restart the web server as below:

Oracle Http Server Powered By Apache 1.3.22 Exploit

Turn Off PHP version information

Open php.ini file as below:

Make sure ‘expose_php‘ is turned Off as below:

Restart web server as below:

Now, lets go ahead and remove some of the unwanted response headers:

Set or Unset Apache response headers

Copy and paste the below lines in httpd.conf or .htaccess

Restart web server as below:

That’s it! After restarting the web server, the headers_module will unset headers such as ‘Server’, ‘X-Powered-By’, ‘X-CF-Powered-By’, ‘X-Mod-Pagespeed’, ‘X-Pingback’ before sending out the response.

Note: You cannot completely remove ‘Server‘ from response data – you’ll still ‘Server: Apache‘ in the response headers. Also you may need to use ‘Header always unset X-Powered-By‘ to remove headers generated by CGI.

Bonus…

A Complete Guide to Secure your WordPress, Web Server and Database!

Also Download ebook on : WordPress Optimization.

Was this article helpful?

Z/os Http Server - Powered By Apache User's Guide