Skip to content
whois.me.uk
Menu
Sign in

SERVER-VERSION-EXPOSED

The server advertises its software version

What it means

Headers such as Server: Apache/2.4.57 or X-Powered-By: PHP/8.1 tell attackers exactly which known vulnerabilities to try.

How to fix it

  1. 1Apache: ServerTokens Prod and ServerSignature Off. nginx: server_tokens off.
  2. 2PHP: expose_php = Off.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.