Will this cause any harm? Does it serve any purpose other than tell browsers you have .net installed?
I like this article about changing the header to Pure Evil. Genius!
http://www.iishacks.com/index.php/2009/11/11/remove-x-powered-by-aspnet-http-response-header/
Open the site which you would like to open and then click on the HTTP Response Headers option. Click on the X-Powered-By header and then click Remove on the Actions Pane to remove it from the response.
To remove the X-Powered-By header, you can use: <? php header_remove( name: 'X-Powered-By' ); As you can see, you only have to pass the header name as a string as parameter, and you are done.
X-Powered-By is set by various servers to say what kind of server it is. Software installed on that server might override the server's default. There is an argument that giving this information to clients gives information that can only serve to help attackers (just a little bit: saves working out what kind of server).
Add this to your web.config section
<system.webServer> <httpProtocol> <customHeaders> <remove name="X-Powered-By" /> </customHeaders> </httpProtocol> </system.webServer>
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With