website security: disable apache signature

1. open apache config and set ServerTokens to Prod.
 /etc/apache2/conf.d/security

2. set ServerSignature to Off

3. set expose_php to off in php.ini file.