Site statistics

Not sure if anyone will read this, but I've just changed hosting provider. The process hasn't been without hiccups and overall I think that I'm happy. However, I am not happy with the stats.

If I had know that the stats were so bad. I would have put up with the bad customer service from the other guys.

You could always install your own - I run AwStats and am very happy with that.

What specifically do you find to be so bad about our Analog stats?

- Dallas
- DreamHost Honcho

My only real problem is the version being run - 5.23.

Newer versions give a better breakdown of browser types, but in the overall scale of running a large hosting company I fully understand that updating the stats program is well down the list of imortant jobs to do each month.

A "high" risk vulnerability in AWStats(5.0-5.9, 6.0-6.2) caught my eye here.

I didn't see Analog listed anywhere.

In reply to:

---

An input validation vulnerability exists in the 'awstats.pl' script due to insufficient sanitization, which could let a remote malicious user execute arbitrary commands.

No workaround or patch available at time of publishing.

Proof of Concept exploit has been published.

---

Get yours now. :-)

Be careful with your statistics out there,

BobS

In reply to:

---

A "high" risk vulnerability in AWStats(5.0-5.9, 6.0-6.2) caught my eye here.

---

Thanks for the heads-up! Shouldn't be much of a problem though if you store awstats.pl out of the web root, right?

We are upgrading Analog to the latest stable version (5.32) today.

- Dallas
- DreamHost Honcho

AWStats is by far the best stats program out there. To avoid any security issues, just put it in its own directory in your home dir (but not under your web dir) and set up a cron job to run it nightly and re-render your stats pages.

It's great: http://awstats.sourceforge.net/