FALKEN'S MAZE / CHECKS / PHP VERSION

PHP version

What Joshua checks

When the X-Powered-By header gives the PHP version away, checks that php.net still supports it. Skipped for sites that hide it.

Why it matters

A PHP release past its end of life gets no security fixes, however up to date the site's own code is.

How to fix it

Ask your host to move the site to a supported PHP version, and set expose_php = Off.

In the Maze Score

Worth

5 points (half for a warning)

Severity

High

Runs on

Pro (Watchtower) and above

Related checks

• Server version leakagePro (Watchtower)
• security.txtFree
• robots.txtFree