This application package acts as an add-on to the mod_log_sql apache/apache2 module. There is a command-line element, which aggregates visitor data, and an awstats-like frontend for the user to view an up to the minute history of user activity.
Be the first to post a text review of Apache Stats. Rate and review a project by clicking thumbs up or thumbs down in the right column.
I have been working, on and off, for the past month or so at a new Apache Stats release. So far, I have completely reworked the aggregation scripts to be more robust. I now need to tackle the front-end of the system, so expect to see something new and improved in the upcoming months. Cheers, Ian
This release is mainly dealing with some security holes in the software. In the previous releases, I was using php's extract() to gather in all variables under the sun. I've written in some input filtering, and only look for specific incoming variables. Check out the ReadMe/ChangeLog for more, but a definite upgrade if you're using the software.
ChangeLog: Version 0.0.3Beta 2007-02-02 Ian Bezanson <irb@ianbezanson.ca> * Got rid of ./includes/agents.inc, as it's functions were all already in ./includes/iLogFunctions.inc. * Got rid of extract($_REQUEST) which was open to a multitude of security holes. * Added primitive form of input filtering with checkInput() function. This function basically determines whether the input variable is a string, and pumps it through the built-in php escapeshellcmd() function. It's a start, I gather. The major win out of this, however, is that I'm only looking for specific input variables, rather than grabbing anything the user throws at us, so we're a little harder to compromise the app. * Changed the version information so that it is defined strictly from the config file, rather than from multiple spots. * Added Upgrade instructions to ./INSTALL.
ChangeLog: Version 0.0.3Beta 2007-02-02 Ian Bezanson <irb@ianbezanson.ca> * Got rid of ./includes/agents.inc, as it's functions were all already in ./includes/iLogFunctions.inc. * Got rid of extract($_REQUEST) which was open to a multitude of security holes. * Added primitive form of input filtering with checkInput() function. This function basically determines whether the input variable is a string, and pumps it through the built-in php escapeshellcmd() function. It's a start, I gather. The major win out of this, however, is that I'm only looking for specific input variables, rather than grabbing anything the user throws at us, so we're a little harder to compromise the app. * Changed the version information so that it is defined strictly from the config file, rather than from multiple spots. * Added Upgrade instructions to ./INSTALL.
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?
Thanks for your review!
Get credit for your review by logging in via OpenID. Click your account provider: