Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

jewelhuq's avatar

How to hide website created language?

For instance, I don't want to let other people know about which server I am using, which language even which framework I am using.

0 likes
2 replies
Cronix's avatar

It can be tough to get rid of all traces. A few things to check...

In php.ini, make sure expose_php = Off, or "PHP" and the version will show up in all headers.

You'd need to do the same for your webserver, ie nginx or apache. Each has it's own way of exposing what server is being used in headers. I believe for nginx it's server_tokens off

Change cookie names from the default "laravel", like the default session cookie name contains "laravel". (/config/session.php)

If you're using cloud based hosting, you might not be able to hide all the server info since the ip ranges are known. Like I could tell by the IP address if you're using AWS, etc.

Also, make sure there isn't anything in your /public dir (or anything that links to the public dir) that could give away info, such as readme files.

Please or to participate in this conversation.