From the course: PHP: Creating Secure Websites

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Other configuration options

Other configuration options - PHP Tutorial

From the course: PHP: Creating Secure Websites

Start my 1-month free trial

Other configuration options

- [Instructor] Let's take a look at a few other configurations in your php.ini file. Many of these are optional configurations, and many of them will depend on how you use php. The first configuration is expose_php. It controls whether or not php's version number is sent in the response headers to the browser. Remember, one of our principles was security through obscurity. We don't want to give away extra information. It might let a hacker know that we're vulnerable to certain security issues. Let me demonstrate. I'll show you what a header looks like using the Unix curl command. Curl can be used to retrieve a webpage at a URL. If you don't have the curl command available, don't worry, just watch my demonstration. You can see I've got curl, and then I'm using the dash dash head option. That will request a web page, but only return the head information that comes back. I will demonstrate with a simple php page on my…

Contents