Zabezpiecz WordPress: Ukryj informacje o serwerze i PHP w nagłówkach

Kod

<?php
// Function to remove PHP version from HTTP headers
function wp_dudecom_remove_php_version() {
    header_remove('X-Powered-By');
}
add_action('init', 'wp_dudecom_remove_php_version');

// Function to remove server signature and other unwanted headers
function wp_dudecom_remove_unwanted_headers($headers) {
    unset($headers['X-Powered-By']);
    unset($headers['Server']);
    unset($headers['X-AspNet-Version']);
    unset($headers['X-AspNetMvc-Version']);
    return $headers;
}
add_filter('wp_headers', 'wp_dudecom_remove_unwanted_headers');

// Function to disable server signature in Apache
function wp_dudecom_disable_server_signature() {
    if (function_exists('apache_get_modules') && in_array('mod_headers', apache_get_modules())) {
        header('Server: ');
    }
}
add_action('send_headers', 'wp_dudecom_disable_server_signature');

// Function to modify .htaccess to hide server information
function wp_dudecom_modify_htaccess() {
    $htaccess_file = ABSPATH . '.htaccess';
    if (file_exists($htaccess_file) && is_writable($htaccess_file)) {
        $htaccess_content = file_get_contents($htaccess_file);
        $directives = "\n# WP-DUDE.COM: Hide server information\n";
        $directives .= "ServerSignature Off\n";
        $directives .= "Header unset X-Powered-By\n";
        $directives .= "Header unset Server\n";

        if (strpos($htaccess_content, 'WP-DUDE.COM: Hide server information') === false) {
            file_put_contents($htaccess_file, $htaccess_content . $directives);
        }
    }
}
add_action('init', 'wp_dudecom_modify_htaccess');
?>