Hardening¶
Hardening refers to the raise of security level in the installation of PHP (or other technologies). It means reviewing the default or installed configurations and set ups, to make them safer.
For example, by default, PHP displays its version number in the HTTP headers, with X-Powered-By
. This may be hidden, so as not to disclose any information, by setting expose_php
directive to off (0
) in the php.ini file.
See also https://www.tecmint.com/hide-php-version-http-header/, https://www.zend.com/blog/php-hardening-strategies, https://cheatsheetseries.owasp.org/cheatsheets/PHP_Configuration_Cheat_Sheet.html
Related packages : drupal/core-vendor-hardening, jvmtech/neos-hardening