From:             ghost777ghost at hotmail dot com
Operating system: Trustix 2.2
PHP version:      4.4.1
PHP Bug Type:     Apache related
Bug description:  X-Powered-By: PHP/4.4.1 is visible with expose_php=off

Description:
------------
I have compiled php 4.4.1, with apache 1.3.34 on a trustix secure linux
2.2. I can not get X-Powered-By header,
nor built-in Easter-eggs to disappear. 

expose_php = Off is set in php.ini

(expose_php = 0 behaves the same)


This is the output of a head-request:
........................................
HEAD / HTTP/1.0

HTTP/1.1 200 OK
Date: Sun, 13 Nov 2005 22:11:49 GMT
Server: Apache
X-Powered-By: PHP/4.4.1
Connection: close
Content-Type: text/html
........................................


compilation:

./configure --prefix=/usr/local/php --enable-memory-limit
--enable-magic-quotes --enable-sockets --with-openssl
--enable-force-cgi-redirect --enable-safe-mode
--with-apache=/somedir/apache_1.3.34


Easter-egg:
?=PHPE9568F36-D428-11d2-A769-00AA001ACF42

I have php 4.4.0 with apache 1.3.33 on another trustix 2.2, and this setup
responds to changes in expose_php, and it 
does not show X-Powered-By.

I will greatly appreciate any productive feedback to disable the exposure
of php.


Best wishes from ghost






-- 
Edit bug report at http://bugs.php.net/?id=35209&edit=1
-- 
Try a CVS snapshot (php4):   http://bugs.php.net/fix.php?id=35209&r=trysnapshot4
Try a CVS snapshot (php5.0): 
http://bugs.php.net/fix.php?id=35209&r=trysnapshot50
Try a CVS snapshot (php5.1): 
http://bugs.php.net/fix.php?id=35209&r=trysnapshot51
Fixed in CVS:                http://bugs.php.net/fix.php?id=35209&r=fixedcvs
Fixed in release:            http://bugs.php.net/fix.php?id=35209&r=alreadyfixed
Need backtrace:              http://bugs.php.net/fix.php?id=35209&r=needtrace
Need Reproduce Script:       http://bugs.php.net/fix.php?id=35209&r=needscript
Try newer version:           http://bugs.php.net/fix.php?id=35209&r=oldversion
Not developer issue:         http://bugs.php.net/fix.php?id=35209&r=support
Expected behavior:           http://bugs.php.net/fix.php?id=35209&r=notwrong
Not enough info:             
http://bugs.php.net/fix.php?id=35209&r=notenoughinfo
Submitted twice:             
http://bugs.php.net/fix.php?id=35209&r=submittedtwice
register_globals:            http://bugs.php.net/fix.php?id=35209&r=globals
PHP 3 support discontinued:  http://bugs.php.net/fix.php?id=35209&r=php3
Daylight Savings:            http://bugs.php.net/fix.php?id=35209&r=dst
IIS Stability:               http://bugs.php.net/fix.php?id=35209&r=isapi
Install GNU Sed:             http://bugs.php.net/fix.php?id=35209&r=gnused
Floating point limitations:  http://bugs.php.net/fix.php?id=35209&r=float
No Zend Extensions:          http://bugs.php.net/fix.php?id=35209&r=nozend
MySQL Configuration Error:   http://bugs.php.net/fix.php?id=35209&r=mysqlcfg

Reply via email to