Forum

Is there a simple way to disguise SERVER_SOFTWARE string or should I go digging the source code?
I'd like to replace my production Apache server with Hiawatha but I'm concerned about security by reveling unnecessary information.
At first I thought that "ServerString = none" will do but running Symfony still outputs:

server:
DOCUMENT_ROOT: /usr/local/var/www/hiawatha/web
FCGI_ROLE: RESPONDER
GATEWAY_INTERFACE: CGI/1.1
HTTP_ACCEPT: 'application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5'
HTTP_SCHEME: http
PHP_FCGI_CHILDREN: '2'
PHP_FCGI_MAX_REQUESTS: '20'
PHP_SELF: /frontend_dev.php
REQUEST_URI: /frontend_dev.php
SCRIPT_FILENAME: /usr/local/var/www/hiawatha/web/frontend_dev.php
SCRIPT_NAME: /frontend_dev.php
SERVER_NAME: 127.0.0.1
SERVER_PORT: '80'
SERVER_PROTOCOL: HTTP/1.1
SERVER_SOFTWARE: 'Hiawatha v7.0'



Hiawatha version: Hiawatha v7.0, cache, chroot, CommandChannel, debug, Monitor, SSL, URL toolkit, XSLT
Operating System: Linux myhost 2.6.32-ARCH #1 SMP PREEMPT Tue Feb 23 19:24:08 UTC 2010 i686 Intel(R) Pentium(R) 4 CPU 2.60GHz GenuineIntel GNU/Linux

Remove line 189 in envir.c and recompile Hiawatha.

Could You please make this an option to ./configure?

Thank You.