基於 ISMS 上的 Linux 系統設定

1.關閉apache版本

vi /etc/httpd/conf/httpd.conf
ServerTokens OS # “OS”改為“Prod”
ServerSignature On # “On”改為“Off”


2.關閉php版本

vi /etc/php.ini
expose_php = On # “On”改為“Off”

http://phpsec.org/projects/guide/

3.hide phpmyadmin information schema

vi config.inc.php
$cfg['Servers'][$i]['hide_db'] = 'information_schema';