I have no idea why, but anyone can access my client's stats simply by going to www.example.com/stats.
In the core module, I have Statistics unchecked. In the Permissions, I don't have anything checked in the System Module.

What am I missing? Any help you can give would be most appreciated - thank you!

Comments

guitarma’s picture

I have searched the forums for this answer, but possibly I'm wording it incorrectly.

Do I need to password protect my stats page or add something to my htaccess? I would have thought that giving no one permission to access statistics would hide that page from prying eyes.