As per our documentation, we rely on the information passed by your web server in the server environment variable SERVER_SOFTWARE. If this information is truncated or missing we do a “best guess”. Your host only reports Apache in the SERVER_SOFTWARE environment variable. As a result we are not sure which version of Apache this is. We take a wild guess that your host can't be using an ancient version of Apache and use the fake version 2.5 so that the .htaccess Maker will use all Apache 2.4 features.
Please note that Apache 2.4 was first released in January 2012. That's almost ten years ago. Our expectation that your host has upgraded Apache sometime in the last TEN YEARS is not out of the blue. A decade is an eternity in computer terms...
In any case, you cannot override this anywhere in our software. The potential for people messing up badly is too great to allow this. You need to ask your host to make sure that the SERVER_SOFTWARE environment variable contains at the very least the major and minor versions of Apache, i.e. Apache/2.2.
Kindly note that hiding the Apache version IS NOT a security feature, even if the host tries to pass it as such. It is trivial deducing the web server technology and the Apache version family (1.3, 2.0, 2.2, 2.4) without even looking at what Apache reports and it's been so for years. That's what security researchers and attackers do. They don't believe what the server reports.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
