Posted by susi_333 on November 8, 2009 at 3:46pm
Jump to:
| Project: | Piwik Web analytics |
| Version: | 6.x-1.1 |
| Component: | Miscellaneous |
| Category: | support request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed (fixed) |
Issue Summary
Hi,
I installed piwik, now I'd like to enter my data into the drupal module piwik.
Therefore I have the line "Piwik HTTP-URL" to fill out. The URL to Piwik is behind a htaccess file so I get the error "Fehler „Authorization Required“ fehlgeschlagen (HTTP-Code 401)."
Hmm any hints? However I need the htaccess file.... Many thanks
I postet this post also on the piwik forum page. I will add the result to this side as well then. wasnt shure if its a piwik or drupal problem.
Comments
#1
Remove this buggy rule, please.
#2
I wrote with Alexander and here is a short result:
piwik doesnt work if there is a htaccess file which will protect the whole piwik folder. how to make the piwik data safe? i doent know.
maybe you have to adopt the htaccess file. i wouldnt use piwik as long there is no htaccess. in case someone finds a tuturial about how piwik can be made safe, please write me.
many thanks.
#3
If you *block* the piwik module from accessing it's own tracker files (piwik.php, piwik.js) - piwik is not able to track anything!
You may be able to protect the subfolders with .htacces, but I cannot say if this will work well, but it may be possible to block from all other files except the tracker URLs. Untested - maybe the piwik core maintainers know...
#4
Automatically closed -- issue fixed for 2 weeks with no activity.
#5
.. then why not just add an .htaccess file that only allows those two files?
AuthUserFile /path/to/.htpasswd
AuthGroupFile /path/to/.htgroups
AuthName "PIWIK"
AuthType Basic
<Files "*">
require group admins
</Files>
<FilesMatch "^piwik.(js|php)$">
Allow from all
Satisfy any
</FilesMatch>
Also, as far as I can tell, the file piwik.php is not accessed directly by the user anyway. In that case, you can add another restriction which says: only allow 127.0.0.1/localhost/(your server IP) to access piwik.php without authentication.
#6
Without piwik.php nothing can be tracked... It's called from the js code
#7
That makes sense.
I just couldn't see
piwik.phpthe file being calling in my network requests. In that case, just use the.htaccessI posted above. Should work.