On Thu, Jun 20, 2002 at 03:04:07PM -0400, Joshua Slive wrote: > > The ServerTokens directive controls what is returned. So, if the > > admin doesn't want to display what version they are running, they > > only need to set that directive and that changes it for everything > > (including the Server HTTP header). -- justin > > No, that's not true at all. ServerTokens controls ONLY the HTTP header. > It does not control internal messages (ServerSignature does that), nor > does it control anything not generated directly from the apache source > code (like the internationalized error docs).
Someone snuck in and moved the furniture on you while you were sleeping (i.e. follow the source). SERVER_SOFTWARE is the variable used by error/include/bottom.html. That is added in ap_add_common_vars() in server/util_script.c:268. That calls ap_get_server_version() which is the same call used to populate the Server HTTP header (see basic_http_header in http_protocol.c). That call just returns the server_version variable in server/core.c. And, the ServerTokens directive controls that value. -- justin
