Cloaking the tracking 'tag'?


(HarryPotter) #1

hi there!

just thinking ahead, i see that each javascript tracking tag has “www.domain.com/piwik/”. and i guess my question is, if someone were determined to find all your sites you are tracking with a single install of piwik, they probably could just by typing “www.domain.com/piwik/” into google?

<!-- Piwik -->
<script type="text/javascript">
var pkBaseURL = (("https:" == document.location.protocol) ? "https://www.domain.com/piwik/" : "http://www.domain.com/piwik/");
document.write(unescape("%3Cscript src='" + pkBaseURL + "piwik.js' type='text/javascript'%3E%3C/script%3E"));
</script><script type="text/javascript">
try {
var piwikTracker = Piwik.getTracker(pkBaseURL + "piwik.php", 5);
piwikTracker.trackPageView();
piwikTracker.enableLinkTracking();
} catch( err ) {}
</script><noscript><p><img src="http://www.domain.com/piwik/piwik.php?idsite=5" style="border:0" alt=""/></p></noscript>
<!-- End Piwik Tag -->

is there a way to prevent that? should we be cloaking the javascript tag?

if this sounds crazy or non-sense… please forgive me. it’s all new to me so i am just throwing questions out there (or here) =0

thanks!


(vipsoft) #2

You can rename the piwik folder and use js/index.php (instead of piwik.js).

e.g.

<script type="text/javascript" src="http://www.domain.com/pwk/js/"></script>

In 0.8, we’ll roll out a server side tracker (no javascript), as an alternate method. There’s an early prototype in trac.


(HarryPotter) #3

[quote=vipsoft @ Nov 13 2009, 01:48 AM]You can rename the piwik folder and use js/index.php (instead of piwik.js).

e.g.

<script type="text/javascript" src="http://www.domain.com/pwk/js/"></script>

In 0.8, we’ll roll out a server side tracker (no javascript), as an alternate method. There’s an early prototype in trac.[/quote]

cool!

ahah, i don’t know much about development process but… since piwik is at 0.4.5, it will probably be a while until 0.8 is out?

just curious style_emoticons/<#EMO_DIR#>/blink.gif


(vipsoft) #4

The version numbers are somewhat arbitrary. We went up to 0.1.10 before starting 0.2. We went up to 0.2.32 before 0.4 (skipping 0.3.x entirely). 0.4.5 is the last of the 0.4.x series. We’re hoping for a Monday release of 0.5.0.


(HarryPotter) #5

ahhah, cool. i see


(andras) #6

Any news from this server side tracker since this post ? That’s just what I need since my web site is mainly an Ajax application (all in one page). Can you point me to this module ?


(vipsoft) #7

A prototype is in http://dev.piwik.org/trac/ticket/134 if you want to play with it. Consider it a proof-of-concept. This is not yet a core plugin, and I expect to make more changes before it is officially released.