How do I hide server and software version information?

Attackers scan for sites that reveal exactly which software and versions they run, so they can target known weaknesses. Hiding this information ("security through reducing disclosure") is a simple, worthwhile step.

Hide PHP version by disabling the X-Powered-By header. In your .htaccess:

Header unset X-Powered-By

Or set expose_php = Off in your PHP settings via the MultiPHP INI Editor in the DirhamHost panel.

Hide the WordPress version, which appears in your page's HTML and feeds. Most security plugins (Wordfence, Sucuri) can remove it, or add to your theme's functions the standard snippet that removes the generator meta tag.

Turn off directory browsing so folder contents are never listed:

Options -Indexes

Remove readme and install files that state versions, for example readme.html in a fresh WordPress install.

These changes will not stop a determined attacker on their own, but they remove easy targeting information and are best combined with the real defences: updates, strong passwords, ModSecurity and firewalls. Access the panel at my.dirhamaday.ae. For help applying these, contact WhatsApp +971 58 553 6767 or support@dirhamaday.ae.