{"id":1835,"date":"2024-12-26T12:40:08","date_gmt":"2024-12-26T11:40:08","guid":{"rendered":"https:\/\/wpmastertoolkit.com\/module\/masquer-les-versions-php\/"},"modified":"2025-01-02T18:02:40","modified_gmt":"2025-01-02T17:02:40","slug":"masquer-les-versions-php","status":"publish","type":"module","link":"https:\/\/wpmastertoolkit.com\/en\/module\/hide-php-versions\/","title":{"rendered":"Hide PHP versions"},"content":{"rendered":"<h1 class=\"wp-block-heading\">Hide PHP Versions with WPMasterToolKit's Hide PHP Versions Module<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">In the world of website management, one of the most critical aspects is security. The developers of WPMasterToolKit have designed an essential module called \"Hide PHP Versions\" to meet this need. This module focuses on hiding the PHP versions used by your server in order to enhance the security of your WordPress site, protecting sensitive information from prying eyes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Which plugin can Hide PHP Versions replace?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WPMasterToolKit's Hide PHP Versions module could effectively replace various security plugins that aim to eliminate traces of the PHP version on your server. It works unobtrusively to ensure that HTTP headers do not reveal the PHP version to external users, which is critical for preventing targeted attacks that exploit known vulnerabilities in specific PHP versions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How the Hide PHP Versions module works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Hide PHP Versions module works by manipulating HTTP headers and server configurations to hide PHP versions. When enabled, this module removes the \"X-Powered-By\" header, which is often used to indicate the PHP version on Apache and Nginx servers. Removing this header is essential as it reduces the detectability of the PHP version and, consequently, limits the potential risks associated with specific PHP vulnerabilities.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Management for Apache<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For servers running Apache, this module uses a <code data-no-auto-translation=\"\">.htaccess<\/code> to ensure that the \"X-Powered-By\" header is removed. On activation, the module adds the necessary lines to the <code data-no-auto-translation=\"\">.htaccess<\/code> to hide the PHP version :<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"apacheconf\" class=\"language-apacheconf\" data-no-auto-translation=\"\">&lt;IfModule mod_headers.c>\n    Header unset X-Powered-By\n&lt;\/IfModule><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">When deactivated, the module deletes these entries for clean deployment.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Management for Nginx<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For Nginx servers, the module inserts specific code snippets in the Nginx configuration file to hide PHP versions. The approach adopted includes disabling server_tokens and hiding the X-Powered-By header:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code lang=\"nginx\" class=\"language-nginx\" data-no-auto-translation=\"\">server {\n    server_tokens off;\n    proxy_hide_header X-Powered-By;\n    fastcgi_hide_header X-Powered-By;\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">These adjustments prevent Nginx from disclosing sensitive information about the PHP version.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Find all the adjustments to paste into your nginx configuration file in the \"Nginx Code Snippets\" tab of WPMasterToolKit.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img alt=\"Site administration interface with Nginx code.\" fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"281\" src=\"https:\/\/wpmastertoolkit.com\/wp-content\/uploads\/2024\/12\/image-65-1024x281.png\" class=\"wp-image-3127\" srcset=\"https:\/\/wpmastertoolkit.com\/wp-content\/uploads\/2024\/12\/image-65-1024x281.png 1024w, https:\/\/wpmastertoolkit.com\/wp-content\/uploads\/2024\/12\/image-65-300x82.png 300w, https:\/\/wpmastertoolkit.com\/wp-content\/uploads\/2024\/12\/image-65-768x210.png 768w, https:\/\/wpmastertoolkit.com\/wp-content\/uploads\/2024\/12\/image-65-1536x421.png 1536w, https:\/\/wpmastertoolkit.com\/wp-content\/uploads\/2024\/12\/image-65.png 1777w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">How to use the Hide PHP Versions module<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Using the Hide PHP Versions module is simple. Simply activate the module from the WPMasterToolKit plugin dashboard. This action automatically applies the necessary changes to your server configurations, whether you're using Apache or Nginx. The module is designed for seamless integration and requires no additional user configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Technical choices behind Hide PHP Versions<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The developers of WPMasterToolKit have focused on efficiency and simplicity with this module. Rather than offering a multitude of complex options, the focus has been on targeted functionality that eliminates a common attack vector without increasing server load. By using server configuration files directly, it ensures that changes are applied at the right level, increasing your website's robustness against potential PHP security flaws.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WPMasterToolKit's Hide PHP Versions module is a valuable addition to any WordPress installation looking to improve its security. By effectively hiding PHP versions, this module significantly reduces the risk of exploitation by malicious third parties. With a simple click to activate, it offers additional peace of mind to website administrators, while keeping setup and use simple and intuitive.<\/p>","protected":false},"excerpt":{"rendered":"<p>This article introduces WPMasterToolKit's \"Hide PHP Versions\" module, designed to enhance the security of WordPress sites by hiding the PHP versions used. This module replaces other security plugins by discreetly manipulating HTTP headers to prevent the disclosure of sensitive information on the server. It works with Apache and Nginx servers, by removing the \"X-Powered-By\" header and disabling \"server_tokens\" for Nginx. Easy to activate via the plugin's dashboard, this module offers a simple and effective solution for protecting sites against specific PHP vulnerabilities.<\/p>","protected":false},"featured_media":0,"parent":0,"template":"","meta":{"_acf_changed":false,"_seopress_titles_title":"Masquez PHP pour s\u00e9curiser votre site avec WPMasterToolKit","_seopress_titles_desc":"Masquez vos versions PHP avec WPMasterToolKit pour s\u00e9curiser votre site WordPress. Prot\u00e9gez vos donn\u00e9es sensibles efficacement.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"both","_seopress_redirections_param":"","_seopress_redirections_type":301,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"_surecart_dashboard_logo_width":"180px","_surecart_dashboard_show_logo":true,"_surecart_dashboard_navigation_orders":true,"_surecart_dashboard_navigation_invoices":true,"_surecart_dashboard_navigation_subscriptions":true,"_surecart_dashboard_navigation_downloads":true,"_surecart_dashboard_navigation_billing":true,"_surecart_dashboard_navigation_account":true},"class_list":["post-1835","module","type-module","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/wpmastertoolkit.com\/en\/wp-json\/wp\/v2\/module\/1835","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wpmastertoolkit.com\/en\/wp-json\/wp\/v2\/module"}],"about":[{"href":"https:\/\/wpmastertoolkit.com\/en\/wp-json\/wp\/v2\/types\/module"}],"wp:attachment":[{"href":"https:\/\/wpmastertoolkit.com\/en\/wp-json\/wp\/v2\/media?parent=1835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}