Plesk

How to remove the header X-Powered-By for all websites hosted in Plesk?

Question

How to remove the header X-Powered-By for all websites hosted in Plesk for Linux?

# curl -I https://example.com
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Jun 2017 00:00:00 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PleskLin

Answer

  1. Log in to Plesk.

  2. Install the extension Panel.ini editor to manage Plesk settings.

  3. Go to Extensions > My Extensions > Panel.ini Editor (Open button) > switch to the Editor tab.

  4. Add the following lines at the end of the file:

    [webserver]
    xPoweredByHeader = off

  5. Click Save.

  6. Go to Tools & Settings > Diagnose & Repair and click repair for Web & FTP Servers to rebuild web-server configuration.

 

Command-line solution

  1. Connect to the Plesk server via SSH (Linux) / RDP (Windows Server).

  2. Open panel.ini file with the command (on Windows Server, use a command prompt):

    # plesk conf panel.ini

  3. Add the lines below at the bottom of the file:

    [webserver]
    xPoweredByHeader = off

  4. Save changes and close the file.

  5. Recreate web-server configuration for domains:

    # plesk repair web -domains-only