AwStats plugin for DA [Still in BETA]

Cameron Braid said:
No worries.

Thanks for letting me know.

I'll see what I can do myself.

Can't use it as apache Alias, because of the suexec restrictions. File can only be owned by 1 one user ;)
 
webalizer and awstats show different numbers

I am not sure if this is a problem with your plugin, or a problem with awstats...

You see I have noticed that for a customer the numbers that AWSTATS for visitor statistics are not necessarily correct.
because the range are too wide, for instance for one day it shows 200 visits and for next 15 visits.

Not only that, if you see the statistics reported by another sw like webalizer,
you will see that for one day, for instance March 17 AWSTATS shows 17 visits
while WEBALIZER shows 224 visits.

What could be wrong?
 

Attachments

  • clipboard02.jpg
    clipboard02.jpg
    42.6 KB · Views: 409
The webalizer image

This is the weablizer image you can see to compare
 

Attachments

  • clipboard02.jpg
    clipboard02.jpg
    91.5 KB · Views: 432
Hi,

We are running the awstats plug-in.

One of our users wants to have stats on Dynamic pages. He asked us if we can change URLwithQuery to 1, default is 0.

Can this be done on a domain by domain basis. Is it a parameter that the user can change in the awstats.pl that is in his awstats directory?


Regards

Neil :D
 
when the install on a domain says:
Code:
Ok .htaccess already exists let's delete it..Deleted!
Doing an extra permission setting through shell..+(Re-)Setting permissions
Doing an extra permission setting through shell..Done
Now (re-)creating your configuration file.
Config file has been created and your statistics are now setup!

which .htaccess file is being deleted?
I have several sites that have special .htaccess files. Is the .htaccess appended to or actually deleted and recreated?

Just want to make sure we don't run into a major bind. If the .htaccess is actually deleted, maybe the script can create a .htaccess.BAK as an emergency backup?

For the CRON, where should we add it? using SSH, do we put it in etc/crontabs???

Thanks!
 
Last edited:
rldev said:
I don't see why DA wouldn't pick this up at this point. Thanks for all the good work you have done.
fusionictnl said:
Probably because it doesn't directly go into their pocket ;)

I've stopped mailing them after a long time.
JBMC Software is not a large company. Surely their time could be better spent updating and developing new features rather than reimplementing features someone else has already implemented.

Jeff
 
jlasman said:
JBMC Software is not a large company. Surely their time could be better spent updating and developing new features rather than reimplementing features someone else has already implemented.

Jeff

Didn't DA pickup your Exim.conf, hence saving them time to actually develop other things?

AWstats is a feature most people want. Fusion showed how it could be deployed and implemented. It wouldn't take much effort for DA to use this model(if granted permission) and keep it updated. Most of the work has been done for them.
 
I also agree DA need to implement this, DA get paid for the control panel whilst a volunteer has showed them how it is possible to implement it. This volunteer has continued to update and maintain it for free of charge, why should he carry on doing it when DA could implement themselves.
 
albatroz I definitly see a big difference, but can't think of anything else than that the logs are wrongly written by apache, or the history files are somehow corrupted in the /etc/awstats/ (the .txt files)

netmotiv8

Only place to alter it, is the user conf file in the /etc/awstats/awstats.[domain].conf

jechilt

What do you think wich one is deleted :rolleyes: ??? The .htaccess in the public_html/awstats/ :D

jlasman

I know they aren't large and they have a lot of clients, but I've mailed john a time ago about the plugin, when it was in a state to copy/paste it into their source. So why didn't he do it ?

And wich one where they using that was broken? John said back then that they didn't had the time to figure it out completly.

Chrysalis

Thx for you kind words. I've mailed DA again today about this, and hopefully they will find a way (with me) to get this implemented into their panel. Let's say it is a final offer for them ;)
 
I now got that figured out. I should have been more attentive. Thanks!

So....I hope this question is not as dumb....where is the best spot to set up the cron?

fusionictnl said:
jechilt

What do you think wich one is deleted :rolleyes: ??? The .htaccess in the public_html/awstats/ :D
 
I wonder if there is an awstats conf file somewhere, so I can check it to see if it is pointing to the correct path.
 
Really dumb question time. Once I install the plug in, do I need to do anything to configure it? I've installed the plug in, added an hourly cron and get a header with this:

Never updated (See 'Build/Update' on awstats_setup.html page)

thanks,
-drmike
 
AWSTATS Security

Hi!

Look this message:

----
Warning, a security hole was recently found in old AWStats versions (from 5.0 to 6.3) when AWStats is used as a CGI: A remote user can execute arbitrary commands on your server using permissions of your web server user (in most cases user "nobody").
If you use AWStats with a recent version or if AWStats is not available as a CGI, you are safe. If not, it is highly recommanded to upgrade to 6.4 version that fix all known security holes.
----

on awstats web site:
http://awstats.sourceforge.net/

Thanks!
 
I have been seeing mod_security, blocking some attempts over awstats, I hope the 6.4 upgrade comes soon.
 
drmike

On admin level in the panel, go to Awstats statistics and enable it for the users, and user can choose to install it or not. Or read the first post of this thread, how to enable it for ALL or Selected users.


Others about the leaks:

This version DOES NOT include any of the by awstats mentioned Securtity leaks/bugs/holes or whatever. The version shipped with the plugin is a development version of 6.4. The day before it was launched as 6.4. I don't know why it displays 6.3 as it IS a development version of 6.4.

And as said a lot of times, this is a "modified" version of awstats, where almost all of the functionality like "Awstats plugins" have been removed from it, as these are exposed to security leaks.

I'm not upgrading until Awstats does launch a complete new featured version or some major other security leak, that could also affect my verion. So please don't post anything related to the pre-6.4 version. As these aren't affected by the current version I'm using.

If you do get breaches, make sure you have upgraded to the correct version of my plugin and that all awstats on sites display this new version or are behind .htaccess.

Thanks anyway for the notice, but everytime someone shouts that there "could" be a security hole, a lot of people take the phone/PM/Email me about that it should be fixed.
 
Do we need to run the cron?

After installing the plugin, I've activated the feature on few domains for clients. i've also ran the script as root for all domains.

1) Do aI ahve to do some cron thing?
2) If there will be new domains, do I have to redo the script again each time a new domain is installed?
 
Back
Top