How to hide OJS version from generator metadata

Software Support
1

I am an OJS manager and the IT security team detected that my journal was showing the version of my OJS with this tool https://sitecheck.sucuri.net/ avalaible on the Internet.
I have some doubts:
Can I hide the OJS version?
How I can do this?
Does it affect the functioning of the magazine?

OJS 3.2.1.2

2

Hi @Williams_Baster,

It’s standard practice for CMSs to include information about the software (e.g. version number). Even if you edit the software to remove this, it’ll still be easy to determine your OJS version e.g. by fetching the dbscripts/xml/version.xml descriptor directly. (And if that is hidden, the software version can still be determined by fingerprinting its behaviour.) I don’t consider obscuring the version number to be a good security practice – better to stay on top of any security updates and generally stay up to date with the latest releases.

Regards,
Alec Smecher
Public Knowledge Project Team

2 Likes
3

Thank you, Ashmecher