apache php安全配置_长治网站建设_长治网络推广_长治软件开发-长治中联科创科技有限公司_长治网络工程建设

apache php安全配置

httpd.conf 配置

<IfModule headers_module>
Header always append X-Frame-Options SAMEORIGIN
Header set X-Content-Type-Options nosniff
Header set X-XSS-Protection "1; mode=block"
Header set Content-Secure-Policy "base-uri 'self';"
Header set Strict-Transport-Security "max-age=15768000;includeSubDomains;"
Header set Referrer-Policy "no-referrer"
Header set X-Permitted-Cross-Domain-Policies "master-only"
Header set X-Download-Options "noopen"
</IfModule>

<Location "/">
AllowMethods GET POST
</Location>

ServerTokens ProductOnly
ServerSignature Off
TraceEnable off

php.ini配置

session.cookie_httponly = 1
expose_php = Off