RE: [cobalt-users] Bug in AWstats Package

["Gavin Nelmes-Crocker" <cobalt@xxxxxxxxxxxxxxxx>]

> I think there is a bug in your package or in AWstats!
>
> If i go to the url of one of the vsites (www.aaa.com/awstats) and
> login with an siteadmin-account from www.aaa.com.
> Then the stats from www.aaa.com are viewed.
>
> But if I take the urls on the left menu I´ll see:
> "Month/Day" and the link:
> http://www.aaa.com/awstats-cgi/awstats.pl?config=&framename=mainright#TOP
>
> and now if I change the config-Parameter to config=www.bbb.com
> (other vsite
> on the same server)
> http://www.aaa.com/awstats-cgi/awstats.pl?config=www.bbb.com&frame
name=mainr
ight#TOP

then the stats from the www.bbb.com will be viewed without asking any
user/password.
This works on all stats on the server.

Did you close the browser and then open it up again between each test -
because as you have logged in already then the browser has cached the
password.

Don't get me wrong there is still a bug i think in the way AWstats handles
it because you can change the config to not match the url you logged in from
thereby giving you access to other sites stats - a feature in some cases if
you admin several sites but a bug in others.

Gavin