Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #8
Over 270,000 servers still expose their PHP version publicly
Original: Hiding your PHP version takes one config line. 270,448 servers haven't done it yet. The list of every server still annou
A security dataset claims 270,448 web servers are still announcing their PHP version in HTTP headers, despite it being hideable with a single config change. The information is being sold as a $39 list aimed at defenders and researchers who want to identify exposed servers. The discussion highlights how basic configuration hygiene remains widely neglected across the web.
Why now: The scale of the exposure is striking and the fix is trivial, prompting discussion among web developers and security researchers.
Evidence
- Hiding your PHP version takes one config line. 270,448 servers haven't done it yet. The list of every server still announcing its version is $39, for defenders and researchers. cl0q.com/datasets #php #webdev #infosec Datasets — public web data, re... · cl0qsearch.bsky.social@bsky.brid.gy
API: https://socialmediatrends-api.osmike.com/v1/trends/3828155