Security Issue


Soemone was so kind as to email me a security isssue and found a link to my analytics indexed on Google with the ability to see everything including change my password!!

Please help? Where can I send this link?


Contact security at

Although I think this is not an issue if Google indexes your Piwik installation.

Is it even possible? Did he gave you the details

To resolve this: The token_auth appeared in Google, which means that is was shared somewhere. This is NOT due to a bug in Piwik.