隱藏或修改nginx返回的Server信息(以及隱藏版本號)


如何隱藏nginx版本號:

[root@localhost /]# vi /etc/nginx/nginx.conf
[root@localhost /]# nginx -t
[root@localhost /]# nginx -s reload

配置文件中,http區段中插入“server_tokens  off;”,重新載入配置文件

worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    server_tokens  off;
    expires         5s;
    sendfile        on;

隱藏或修改nginx返回的Server信息:

[root@localhost /]# vi /opt/nginx/nginx-1.2.0/src/http/ngx_http_special_response.c 
找到29行:修改展示名稱(LLSERVER)
[root@localhost /]# "<hr><center>LLSERVER</center>" CRLF
[root@localhost /]# cd
/opt/nginx/nginx-1.2.0/src/http/ngx_http_header_filter_module.c
[root@localhost /]# vi
/opt/nginx/nginx-1.2.0/src/http/ngx_http_header_filter_module.c
找到49和50行: 修改展示名稱(Server: LLSERVER)
[root@localhost /]# static char ngx_http_server_string[] = "Server: LLSERVER" CRLF;
[root@localhost /]# static char ngx_http_server_full_string[] = "Server: LLSERVER " NGINX_VER CRLF;
隱藏nginx請求頭header:修改nginx.conf ,在location中添加配置如下:
[root@localhost /]# proxy_hide_header X-Frame-Options;   //將X-Frame-Options換成Location
[root@localhost /]# add_header X-Frame-Options SAMEORIGIN always; //將X-Frame-Options換成Location

 


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM