Where to type RequestHeader in apache?

Solution 1:

According to:

http://httpd.apache.org/docs/current/mod/mod_headers.html#requestheader

You can set this anywhere. If you are doing it to prevent attacks you probably want to make it global, so put it above your first:

<VirtualHost>

declaration.