[Piwik-hackers] Domains are not checked (bug or intended behaviour) / Function of site URLs

[Elmar Weber]

Hello,

I don't know if the following is intended behaviour or I get something 
wrong, therefore I post it to the list instead of directly as a bug.

What function do the URLs of a site have? For me it looked like they are 
used to filter valid domains, i.e. hindering someone from just snipping 
the Piwik JS code on another domain and wreak havoc with the statistics.
Or in a more simpler scenario: to exclude test installations of a site 
from the statistics.

However, in the current version this is not what is done, every access 
is counted as a visit, even if it occurred from a non-listed domain.

Is this intended? If so, isn't this a (major) security problem? And is 
there are way to limit the statistics to certain URLs in the current 
version?


Thanks & ciao,
Elmar Weber

-- 
"Religion und Familie sind die beiden größten Feinde des Fortschritts."
(André Gide (1869 - 1951), französischer Schriftsteller)