Version Number in HTML

While looking through the source of my site I noticed something quite disturbing from a security standpoint. The All in One SEO plugin puts the version number in the source of the site. From a security standpoint this is a big no-no, you don’t want people to know the version of something you are running. If your version is outdated and there is a known security problem it is much easier for a script kiddie to exploit.

For my personal site I changed the following code:

echo "\n<!-- all in one seo pack $this->version ";
if ($this->ob_start_detected) {
echo "ob_start_detected ";
}
echo "[$this->title_start,$this->title_end] ";
echo "-->\n";

to

echo "\n<!-- all in one seo pack -->\n";