Hi,
I installed piwik, now I'd like to enter my data into the drupal module piwik.
Therefore I have the line "Piwik HTTP-URL" to fill out. The URL to Piwik is behind a htaccess file so I get the error "Fehler „Authorization Required“ fehlgeschlagen (HTTP-Code 401)."
Hmm any hints? However I need the htaccess file.... Many thanks

I postet this post also on the piwik forum page. I will add the result to this side as well then. wasnt shure if its a piwik or drupal problem.

Comments

hass’s picture

hass commented
Assigned: susi_333 » Unassigned
Status: Active » Fixed

Remove this buggy rule, please.

susi_333’s picture

susi_333 commented

I wrote with Alexander and here is a short result:
piwik doesnt work if there is a htaccess file which will protect the whole piwik folder. how to make the piwik data safe? i doent know.
maybe you have to adopt the htaccess file. i wouldnt use piwik as long there is no htaccess. in case someone finds a tuturial about how piwik can be made safe, please write me.
many thanks.

hass’s picture

hass commented

If you *block* the piwik module from accessing it's own tracker files (piwik.php, piwik.js) - piwik is not able to track anything!

You may be able to protect the subfolders with .htacces, but I cannot say if this will work well, but it may be possible to block from all other files except the tracker URLs. Untested - maybe the piwik core maintainers know...

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

andrewsuth’s picture

andrewsuth commented

.. then why not just add an .htaccess file that only allows those two files?

AuthUserFile /path/to/.htpasswd
AuthGroupFile /path/to/.htgroups
AuthName "PIWIK"
AuthType Basic
    
<Files "*">
require group admins
</Files>

<FilesMatch "^piwik.(js|php)$">
    Allow from all
    Satisfy any
</FilesMatch>

Also, as far as I can tell, the file piwik.php is not accessed directly by the user anyway. In that case, you can add another restriction which says: only allow 127.0.0.1/localhost/(your server IP) to access piwik.php without authentication.

hass’s picture

hass commented

Without piwik.php nothing can be tracked... It's called from the js code

andrewsuth’s picture

andrewsuth commented

That makes sense.

I just couldn't see piwik.php the file being calling in my network requests. In that case, just use the .htaccess I posted above. Should work.