[Piwik-hackers] Domains are not checked (bug or intended behaviour) / Function of site URLs

[Matthieu Aubry]

Hi,
This is not a bug, but a "missing feature" :-) Because we know this 
needs to be implemented we already implemented the UI and DB part, but 
not the actual code to do the test.
There is a related ticket http://dev.piwik.org/trac/ticket/9 "referer 
URLs with host registered as main_url or alias_url should NOT be counted 
as referer, they should instead be counted as "Direct entry".

If you want to jump in, you're welcome to send us a patch!

Elmar Weber wrote:
> Hello,
>
> I don't know if the following is intended behaviour or I get something 
> wrong, therefore I post it to the list instead of directly as a bug.
>
> What function do the URLs of a site have? For me it looked like they are 
> used to filter valid domains, i.e. hindering someone from just snipping 
> the Piwik JS code on another domain and wreak havoc with the statistics.
> Or in a more simpler scenario: to exclude test installations of a site 
> from the statistics.
>
> However, in the current version this is not what is done, every access 
> is counted as a visit, even if it occurred from a non-listed domain.
>
> Is this intended? If so, isn't this a (major) security problem? And is 
> there are way to limit the statistics to certain URLs in the current 
> version?
>
>
> Thanks & ciao,
> Elmar Weber
>
>