tag: apache

Webserver File Permissions

6 Aug, 2012 - 1 minutes
I often forget what the best permission masks are for web data. From what I have found out, the standard permissions should go along the lines of Directories 755 PHP 600 Everything Else 644 Also make sure that all files and folder are owned by the correct users/group. find . -exec chown www-data:www-data {} \; find . -type d -exec chmod 755 {} \; find .

Apache Remove Server Signature

21 Mar, 2012 - 1 minutes
Apache’s signature is the small block of text identifiying the running version of Apache, OS Running and modules installed. Example of a server signature: Apache/2.2.16 (Debian) PHP/5.3.10-1 Server at nationpigeon.com Port 80 To remove this you need to edit “/etc/apache2/conf.d/security” to show “ServerSignature Off". You might want to play around with ServerTokens which limits the amount of infromation returned in the server HTTP header.