Turn off sending of PHP identifying header. This is complete useless for

any practical application and is a total wasting bandwidth/cpu.

diff --git a/php.ini-recommended b/php.ini-recommended
index dc832e1d4bc05074260632200d8c3b2d564a9c22..0c0d993539e4f8a7c8419368f4c6ed34fbb8a0d4 100644 (file)
--- a/php.ini-recommended
+++ b/php.ini-recommended
@@ -288,7 +288,7 @@ disable_classes =
 ; (e.g. by adding its signature to the Web server header).  It is no security
 ; threat in any way, but it makes it possible to determine whether you use PHP
 ; on your server or not.
-expose_php = On
+expose_php = Off
 
 
 ;;;;;;;;;;;;;;;;;;;