Web Server hardening is one of the very important steps which are required to be taken so that the website will be less vulnerable to attacks. In brief, below are few points to consider. Run Apache httpd server as a new Linux user other than the default user apache. Hide server signature (apache version disclosure) so that in case of runtime errors, apache version will not be disclosed to the users. Each apache version may have specific vulnerabilities which the attacker may target if he comes to know about the sever version. Hide php version . Each php version may have specific vulnerabilities which the attacker may target if he comes to know about the php version. Directory listing needs to be disabled . This will make sure that the contents of the website folder located on the hard disk will not be visible to the users. The user should be able to view only the file which he clicks in the web browser. Apache confi...