Friday, January 24 2003 @ 02:06 PM EST
Contributed by: tomw
Views: 1,347
John Hughes has been at it again. He has added paging to the statistic pages, asc/desc sorting and a whois lookup for anonymous ips. You can get the changes from the download section as release 1.2.2.
The following comments are owned by whomever posted them. This site is not responsible for what they say.
Visitor Statistics V 1.2.2
Authored by: anonymous on
Friday, January 24 2003 @ 08:51 PM EST
Thank-you very much.
The very simple bug fix I pointed out in the bugtracker wasn't included. I guess you didn't see it. So, I'll repost it here.
The Stats Plugin (previous and latest releases) do not restrict access to root users. The problem lies in the third expression in this line of code located in index.php:
if ((!SEC_inGroup('Root')) && ($_ST_anon != 1) && (SEC_hasRights('stats.admin'))) {
As written, this line will always evaluate to FALSE thus everyone can always view the site's stats. To fix the problem the last expression needs to have a ! in front of it. The corrected line should be changed to read:
if ((!SEC_inGroup('Root')) && ($_ST_anon != 1) && (!SEC_hasRights('stats.admin'))) {
Althought this is a very minor fix, it will restrict access to root users as you all originally intended.
Thank-you very much.
The very simple bug fix I pointed out in the bugtracker wasn't included. I guess you didn't see it. So, I'll repost it here.
The Stats Plugin (previous and latest releases) do not restrict access to root users. The problem lies in the third expression in this line of code located in index.php:
if ((!SEC_inGroup('Root')) && ($_ST_anon != 1) && (SEC_hasRights('stats.admin'))) {
As written, this line will always evaluate to FALSE thus everyone can always view the site's stats. To fix the problem the last expression needs to have a ! in front of it. The corrected line should be changed to read:
if ((!SEC_inGroup('Root')) && ($_ST_anon != 1) && (!SEC_hasRights('stats.admin'))) {
Althought this is a very minor fix, it will restrict access to root users as you all originally intended.