My site is behind basic htauth. When I set Piwik HTTP URL to http://example.com/piwik I get an error 401, authentication required. If I set it to http://user:password@example.com then the form is happy but the actual analytics on the site don't work.

To work around this, I turned off the htauth, set Piwik HTTP URL to http://example.com/piwik and submitted the configuration form. The setting was accepted because there was no authentication required. Then I went back and turned my htauth back on. After this the analytics work correctly on the site.

In my case I'm using htauth since the site is under development but I think this could affect other users since it's not unreasonable to use htauth to hide the main Piwik dashboard.

Thanks for the very helpful module, it's working great otherwise.

Comments

hass’s picture

hass commented
Category: bug » support
Status: Active » Closed (won't fix)

I don't understand what I could do here.

If you block access to your site it cannot work. Because of single-sign-on logic per site you need to auth only once if you block access to the complete site. Additional if you write the auth info in a plain URL you can really remove the authentication as it's readable in plain text and therefore useless and no longer any protection.