Remove PHP and Server Version Headers
Strips X-Powered-By, Server, and WordPress generator headers to reduce server fingerprinting exposure.
PHPby SnipCraft
php
<?php
// Suppress PHP version disclosure.
@ini_set( 'expose_php', '0' );
add_action( 'send_headers', 'scseed_strip_version_headers' );
function scseed_strip_version_headers() {
if ( function_exists( 'header_remove' ) ) {
header_remove( 'X-Powered-By' );
header_remove( 'Server' );
}
}
// Remove the WordPress version meta generator tag from <head>.
remove_action( 'wp_head', 'wp_generator' );
// Strip WordPress version from all RSS/Atom feeds.
add_filter( 'the_generator', '__return_empty_string' );
// Remove version query strings from scripts and styles to prevent version leakage.
add_filter( 'style_loader_src', 'scseed_remove_ver_query', 9999 );
add_filter( 'script_loader_src', 'scseed_remove_ver_query', 9999 );
function scseed_remove_ver_query( $src ) {
if ( strpos( $src, 'ver=' ) ) {
$src = remove_query_arg( 'ver', $src );
}
return $src;
}#fingerprinting#hardening#headers#security