Security Headers Print

1. Set headers on Hosting

On the web server control panel,

1. Got to the website
2. Then Hosting & DNS tab
3. Apache & nginx Settings

Add the following to "Additional directives for HTTP" and "Additional directives for HTTPS"

Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-Content-Type-Options "nosniff"
Header always set Cache-control "no-store, Pragma: no-cache"
Header always set Strict-Transport-Security "max-age=10886400; includeSubDomains; preload"
Header unset X-Powered-By

Add the following to "Additional nginx directives"

proxy_hide_header X-Powered-By;

Click "Apply"

2. Set headers on php

On the web server control panel,

1. Got to the website
2. Dashboard tab
3. PHP Settings

Add the following to "Additional configuration directives"

expose_php=off

Click "Apply"