blocks|key|3104554|text|大多数是由nginx设置的，例如服务器、日期、内容编码和连接。但是，其他一些标头是由PHP设置的，您可以在PHP中添加其他头部，如下面的header("Name:+Value");|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3104555|entityMap^0|1W|M|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

The majority are set by nginx, for example the Server, Date, Content-Encoding, and Connection. However, some other headers are set by PHP, and you can add others in PHP like this <code>header("Name: Value");</code>

blocks|key|1549673|text|我相信这是两者的结合。您可以看出，“X驱动-By:+PHP/5.3.6-6~dotdeb.1”来自PHP，而"Server:+nginx“来自NGINX。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1549674|您可以按以下方式修改PHP中的头：|1549675|<?php
++++header("HTTP/1.0+404+Not+Found");
?>|code-block|syntax|javascript|1549676|gzip头非常明确地来自NGINX，因为它正在将输出(html)压缩到浏览器。PHP可以通过调用像上面这样的函数“添加”到标头中。然后，服务器将其与PHP头结合起来，并为请求提供服务。|1549677|这取决于您的服务器是否优先于服务器头。|1549678|希望这能有所帮助。|1549679|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|U|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

I believe it is a combination of both... You can tell that "X-Powered-By: PHP/5.3.6-6~dotdeb.1" comes from PHP and "Server: nginx" comes from NGINX.

You can alter the headers in PHP as follows:

<pre><code>&lt;?php
 header("HTTP/1.0 404 Not Found");
?&gt;
</code></pre>

The gzip header most definitely comes from NGINX as it is compressing the output (html) to the browser. PHP can "add" to the headers by calling a function like the one above. Then the server combines it with the PHP headers and serves the request.

It depends on your server whether or not the PHP headers take precedence over the server headers.

Hope this helps.

blocks|key|2746059|text|X-Powered-By头由php.ini中的php指令的值控制：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2746060|决定PHP是否可以公开其安装在服务器上的事实(例如，将其签名添加到Web服务器头中)。它在任何方面都不构成安全威胁，但它可以确定您是否在服务器上使用PHP。|blockquote|2746061|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/expose_php^0|0|C|N|3|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@$9|T|A|U|1|V]]|E|$]]|$1|F|3|G|5|H|7|W|8|@]|D|@]|E|$]]|$1|I|3|-4|5|6|7|X|8|@]|D|@]|E|$]]]|J|$K|$5|L|M|N|E|$O|P]]]]

The <code>X-Powered-By</code> header is controlled by the value of the <a href="http://php.net/expose_php" rel="nofollow">expose_php</a> directive in php.ini:

<blockquote>
 Decides whether PHP may expose the fact that it is installed on the server (e.g. by adding its signature to the Web server header). It is no security threat in any way, but it makes it possible to determine whether you use PHP on your server or not.
</blockquote>

blocks|key|1549738|text|大多数标头是由nginx发送的。若要列出由PHP发送的标头，请使用函数headers_list|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1549739|<?php
echo+htmlentities(print_R(headers_list(),+true));
?>|code-block|syntax|javascript|1549740|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/manual/en/function.headers-list.php^0|Z|C|Z|C|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@$9|V|A|W|1|X]]|E|$]]|$1|F|3|G|5|H|7|Y|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|L|$M|$5|N|O|P|E|$Q|R]]]]

Most headers are sent by nginx. To list the headers (to be) sent by PHP, use the function <a href="http://php.net/manual/en/function.headers-list.php" rel="nofollow"><code>headers_list</code></a>:

<pre><code>&lt;?php
echo htmlentities(print_R(headers_list(), true));
?&gt;
</code></pre>

blocks|key|2746115|text|PHP会自动设置其中的一些，比如hello页面的Content-Type:+text/html。nginx设置与套接字相关的内容，如Connection:+keep-alive。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2746116|您将在nginx的配置中找到连接的设置。就内容而言，它是PHP。您可以使用PHP中的header()函数覆盖相当多的文件，并添加您自己的自定义标头。http://php.net/manual/en/function.header.php|2746117|例如，如果计划让PHP发送一个JSON字符串，可以将Content-Type设置为application/json。|2746118|entityMap|0|LINK|mutability|MUTABLE|url|http://php.net/manual/en/function.header.php^0|O|N|1U|M|0|16|8|22|18|0|0|Q|C|15|G|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]|$9|U|A|V|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@$9|Z|A|10|1|11]]|E|$]]|$1|H|3|I|5|6|7|12|8|@$9|13|A|14|B|C]|$9|15|A|16|B|C]]|D|@]|E|$]]|$1|J|3|-4|5|6|7|17|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|Q]]]]

PHP automatically sets some of them, like <code>Content-Type: text/html</code> for the hello world page. nginx sets the ones that have to do with the socket, like <code>Connection: keep-alive</code>.

You'll find settings for connections in nginx's configuration. Content-wise, it's PHP. You're allowed to override quite a few of them with the <code>header()</code> function in PHP, as well as add your own custom headers.
<a href="http://php.net/manual/en/function.header.php" rel="nofollow">http://php.net/manual/en/function.header.php</a>

For example, you could set the <code>Content-Type</code> to <code>application/json</code> if you're planning to have PHP send out a JSON string.

blocks|key|2746142|text|还可以使用header()函数覆盖任何默认服务器标头。例如，如果在PHP中包含header('Server:+')，这将将Server:+header重置为空。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2746143|entityMap^0|5|8|13|I|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

You can also overwrite any of the default server headers using the <code>header()</code> function. For example, if you include in your PHP <code>header('Server: ')</code> this will reset the Server: header to be blank.

blocks|key|1549814|text|答案中仍然缺少的是PHP的角色：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1549815|有些标头确实是由PHP本身设置的，但原因并不是那么容易找到。这是这里解释的默认会话缓存分隔符行为：http://www.php.net/manual/en/function.session-cache-limiter.php|offset|length|1549816|afaik在文档中没有的是如何完全关闭它们--只需将一些未定义的值传递给它：|1549817|session_cache_limiter(false);|code-block|syntax|javascript|1549818|在开始会话之前，您必须这样做。如果您正在使用Zend，则必须在应用程序引导程序()之前设置它，否则它将无法工作。|1549819|entityMap|0|LINK|mutability|MUTABLE|url|http://www.php.net/manual/en/function.session-cache-limiter.php^0|0|1D|1R|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@$D|Y|E|Z|1|10]]|A|$]]|$1|F|3|G|5|6|7|11|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|12|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|13|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

What's still missing in the answers is the role of PHP:

Some of the headers are indeed set by PHP itself, but the reason is not that easy to find. It's the default session cache delimiter behavior explained here: <a href="http://www.php.net/manual/en/function.session-cache-limiter.php" rel="nofollow">http://www.php.net/manual/en/function.session-cache-limiter.php</a>

What's afaik not in the docs is how to turn them off completely - simply pass some undefined value to it:

<pre><code>session_cache_limiter(false);
</code></pre>

You must to do this before you start your session. In case you are using the Zend Framework, you have to set this before your applications bootstrap() - otherwise it won't work.

When I simply echo something out of php file, I do not send any headers intentionally, however - there are some default headers present anyway when I look at firebug response:

response headers:

<blockquote>
 HTTP/1.1 200 OK 
 Server: nginx 
 Date: Thu, 23 Jun 2011 19:33:51 GMT 
 Content-Type: text/html 
 Transfer-Encoding: chunked 
 Connection: keep-alive 
 Vary: Accept-Encoding 
 X-Powered-By: PHP/5.3.6-6~dotdeb.1 
 Expires: Thu, 19 Nov 1981 08:52:00 GMT 
 Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 
 Pragma: no-cache 
 Content-Encoding: gzip
</blockquote>

I'm curious - are these default response headers set by the server(nginx) or by PHP?

Where are these extra HTTP headers coming from?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

但是，当我简单地从php文件中回显某些内容时，我并没有故意发送任何标头--在查看firebug响应时，仍然存在一些默认的标题：响应头：HTTP/1.1 200正常服务器: nginx日期:清华，2011年6月23日19:33:51内容-类型: text/html传输-编码:分块连接:保持连接可变:接受-编码X供电: P...

问这些额外的HTTP报头来自哪里？
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问这些额外的HTTP报头来自哪里？EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问这些额外的HTTP报头来自哪里？
EN