Force SSL on phpMyAdmin for versions greater than 4.6.0

phpMyAdmin is a great tool written in PHP intended to handle the administration of MySQL or MariaDB with the use of a web browser. For security reasons I have been using it over https. Till version 4.6.0 you could force using https instead of http with just configuring the config.inc.php

Continue reading

Advertisements

Unset/Remove apache’s X-Powered-By header in ubuntu

When a browser send a request to an apache web server, apache will send back the response data as well as response headers. You can check what kind of headers are send back with curl command.

$ curl -I http://mysite/

or if the site is on https

$ curl -Ik https://mysite/
Date: Mon, 07 Dec 2015 10:12:52 GMT
Server: Apache
X-Powered-By: Phusion Passenger (mod_rails/mod_rack) X.X.XX
Cache-Control: no-cache

Continue reading