Comments on: XAMPP Security: Cleaning the cgi-bin folder http://robsnotebook.com/xampp-cgi-bin-cleaning Fri, 29 Aug 2008 00:12:49 +0000 http://wordpress.org/?v=2.2.3 By: Lisa Ridley http://robsnotebook.com/xampp-cgi-bin-cleaning#comment-3733 Lisa Ridley Fri, 28 Dec 2007 06:47:50 +0000 http://robsnotebook.com/xampp-cgi-bin-cleaning#comment-3733 Sorry, but the code did not show up in my post. You need to remove the line !--#echo var="SERVER_SOFTWARE" --, including the closing brackets, to remove the server software information from the bottom of the error pages. Sorry, but the code did not show up in my post.

You need to remove the line !–#echo var=”SERVER_SOFTWARE” –, including the closing brackets, to remove the server software information from the bottom of the error pages.

]]>
By: Lisa Ridley http://robsnotebook.com/xampp-cgi-bin-cleaning#comment-3732 Lisa Ridley Fri, 28 Dec 2007 06:45:25 +0000 http://robsnotebook.com/xampp-cgi-bin-cleaning#comment-3732 Hi! Your guide here is great! Just one thing -- not sure when this changed, but I just installed XAMPP 1.6.5, and removing the .pl script from the cgi folder as you noted above does not remove the environment variables from the error pages. To do this, you have to look in \xampp\apache\error\include\bottom.html. Remove the following instructions from the 11th line: <!--#echo var="SERVER_SOFTWARE" --> which can be found before the closing tag. I'm not sure which version of XAMPP changed the delivery of the error pages, but this will remove the software information from the bottom of the error pages, leaving only the website name and date. Awesome guide! Really helpful! Hi! Your guide here is great!

Just one thing — not sure when this changed, but I just installed XAMPP 1.6.5, and removing the .pl script from the cgi folder as you noted above does not remove the environment variables from the error pages. To do this, you have to look in \xampp\apache\error\include\bottom.html. Remove the following instructions from the 11th line:

which can be found before the closing tag.

I’m not sure which version of XAMPP changed the delivery of the error pages, but this will remove the software information from the bottom of the error pages, leaving only the website name and date.

Awesome guide! Really helpful!

]]>