Plesk: Hide PHP version

Preface

For security reasons, we recommend hiding the PHP version in the header of HTTP responses so that potential attackers do not receive any information about which PHP version is currently being used.

Prerequisites

• Plesk Control Panel

Hide PHP version

Under Websites & Domains, navigate to the PHP settings for the domain for which you want to apply the described setting.

The following instruction must be added here in the additional instructions:

expose_php = off

The instruction can be saved by clicking on the Apply button.