Support

Admin Tools

#9797 "X-Content-Encoded-By: Joomla! 1.5" Still Showing

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Tuesday, 29 March 2011 01:17 CDT

Monday, 21 March 2011 05:13 CDT

user23381
Hi,

I've entered a value for the "X-Content-Encoded-By HTTP header content for GZip compression" but when I refresh the page and view the response header it still shows "X-Content-Encoded-By: Joomla! 1.5"

The "X-Powered-By:" option is working properly.

I'm running Apache 2.

The Admin Tools system plugin is first on the list.

If "Configure WAF" screenshots and my domain are needed, I can PM those.

Thanks.

Monday, 21 March 2011 05:42 CDT

nicholas
This is a known issue with Joomla! 1.5. Joomla! hard-codes this string in its code. We try to perform a "magic trick" which allows us to replace the hard-coded header on-the-fly if you have PHP 5.1.3 or later and only if the headers have not already be sent to the browser. Do note that bugs in plugins, modules and components may cause Joomla! to send the headers to the browser before we have the change to do our magic trick. Unfortunately, there's no workaround to this kind of issues :(

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 21 March 2011 12:24 CDT

user33310
Nicholas,

Do you know if this continues to be an issue in Joomla 1.6?

Thanks,

MC

Tuesday, 22 March 2011 02:39 CDT

nicholas
Yes, it is. The Encoded-by header signature is hard-coded in Joomla! 1.6 as well. If a plugin forces PHP headers to be transmitted before Admin Tools' system plugin runs you'll run into the same issue.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 28 March 2011 22:44 CDT

user6359
For security reasons we, I assume others, don't want hackers to know that we are using J! period. So here is how to rid yourself of this:

Goto: Root Folder/libraries/joomla/environment/response.php

Find: line 279 JResponse::setHeader('X-Content-Encoded-By', 'Joomla! 1.5');

Change to: JResponse::setHeader('X-Content-Encoded-By', '');
Edited by user6359 on 2011-03-28 22:56 CDT

Tuesday, 29 March 2011 01:17 CDT

nicholas
Yes, that's the correct file. I suggest commenting out or deleting the line instead of changing it to a blank string. Or, even better, set the string to something unique or deceitful.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!