Nginx version of Http information
see http request response header inside we will find a server that argument, it indicates that the service is what the end use of the web server.
E.g
Sina:
Server: nginx
Open Source China:
Server: Tengine
segmentfault did not even return server!
Many sites not only returned but also with nginx version number, and the version number of this kind of thing as completely unnecessary exposure to the user, we can hide the version number by setting server_tokens off:
{HTTP
the include the mime.types;
default_type file application / OCTET-Stream;
#log_format main 'REMOTE_ADDR $ - $ REMOTE_USER [$ time_local] "$ Request"' # '$ $ body_bytes_sent Status "$ HTTP_REFERER"' # ' "$ HTTP_USER_AGENT" " HTTP_X_FORWARDED_FOR $ " ';
server_tokens OFF; ## hide the version number
Nginx PHP version information in
even the server_tokens set up off, it does not mean nginx version number is completely invisible -
By the graph we can see that although the return http header which has no version number, but there can still get to the php version of nginx, if you want to hide the version number of PHP also need to modify this file fastcgi.conf :
Remove / $ nginx_version directly behind or comment out this line!
fastcgi_param SERVER_SOFTWARE nginx / $ nginx_version;
modify or hide information Nginx
if I want nginx does not show it? Or modify nginx as Tengine it?
This time is necessary to modify nginx source file src / core / nginx.h, for example, I asked modify nginx tengine:
/*
- Copyright (C) Igor Sysoev
- Copyright (C) Nginx, Inc.
/ # IFNDEF _NGINX_H Notification and fees INCLUDED #define _NGINX_H Notification and fees INCLUDED #define nginx_version 1009005 / #define NGINX_VERSION "1.9.5" #define NGINX_VER "nginx /" NGINX_VERSION / # the DEFINE NGINX_VERSION "2.1.1" #define NGINX_VER "Tengine /" NGINX_VERSION # # ifdef NGX_BUILD the DEFINE NGINX_VER_BUILD NGINX_VER "(" NGX_BUILD ")" the else # # # endif # NGINX_VER the DEFINE NGINX_VER_BUILD the DEFINE NGINX_VAR "NGINX" #define NGX_OLDPID_EXT ".oldbin" #endif / _NGINX_H Notification and fees INCLUDED * /
can also put NGINX_VER assignment is empty, so Http return header inside the server also is empty!
Note that, if server_tokens set to off, even if the source NGINX_VER assignment is empty or changed to another value, or return the server nginx, just do not show the version number!