Re: [PHP-DEV] remove x-powered-by from php 5.2.3 cgi module

2008-09-08 Thread Lars Strojny
Hi, Am Montag, den 08.09.2008, 11:44 +0200 schrieb Lars Strojny: > So it is a bug. Read as: if we can reproduce it in one of our current versions, it is a bug :) cu, Lars -- Jabber: [EMAIL PROTECTED] Weblog: http://usrportage.de signature.asc Description: Dies ist ein digital signierter

Re: [PHP-DEV] remove x-powered-by from php 5.2.3 cgi module

2008-09-08 Thread Lars Strojny
Hi Sotiris, Am Samstag, den 06.09.2008, 15:42 +0300 schrieb sotiris karavarsamis: > i've got a webserver which runs php 5.2.3 via fastcgi, and i've recently > tried to remove the x-powered-by header for security reasons. however, [...] Please try the latest 5.2 with expose_php=0. I can't reprod

Re: [PHP-DEV] remove x-powered-by from php 5.2.3 cgi module

2008-09-08 Thread Lars Strojny
Hi Christian, Am Montag, den 08.09.2008, 05:29 -0400 schrieb Cristian Rodríguez: [...] > I hope you are kidding .. do you still think that "security through > obscurity" has any value ? Doesn't matter. expose_php=Off should definitely disable that header too. So it is a bug. cu, Lars -- Jabb

Re: [PHP-DEV] remove x-powered-by from php 5.2.3 cgi module

2008-09-08 Thread Cristian Rodríguez
sotiris karavarsamis escribió: > i've got a webserver which runs php 5.2.3 via fastcgi, and i've recently > tried to remove the x-powered-by header for security reasons. I hope you are kidding .. do you still think that "security through obscurity" has any value ? -- "A computer is like an Ol

Re: [PHP-DEV] remove x-powered-by from php 5.2.3 cgi module

2008-09-06 Thread Antony Dovgal
On 06.09.2008 16:42, sotiris karavarsamis wrote: i've got a webserver which runs php 5.2.3 via fastcgi, The latest stable version is 5.2.6, not 5.2.3. I can't find any mention of X-Powered in 5.2.6 CGI sources, but both cases in main/main.c do check expose_php INI setting. -- Wbr, Antony D

[PHP-DEV] remove x-powered-by from php 5.2.3 cgi module

2008-09-06 Thread sotiris karavarsamis
i've got a webserver which runs php 5.2.3 via fastcgi, and i've recently tried to remove the x-powered-by header for security reasons. however, changing the php.ini expose-php directive value to off made no difference. After searching a little on google for this problem, it came out that there