RE: [cobalt-users] Bug in AWstats Package

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> But if I take the urls on the left menu I´ll see:
> "Month/Day" and the link: 
> http://www.aaa.com/awstats-cgi/awstats.pl?config=&framename=ma
inright#TOP

and now if I change the config-Parameter to config=www.bbb.com (other
vsite on the same server)
http://www.aaa.com/awstats-cgi/awstats.pl?config=www.bbb.com&framename=m
ainr
ight#TOP

then the stats from the www.bbb.com will be viewed without asking any
user/password. This works on all stats on the server.

Is this a bug on my server or to others have the same.

____________________________________

I'm not running awstats.pl but, I wouldn't think that's a bug. If the
program is parsing one main file for each of the awstats users instead
of having its own log file to parse there's no way to prevent that.
Unless, if each site is running their own copy of awstats.pl then the
site URL could be hard coded into the script so that it wouldn't be part
of string. If the awstats-cgi is a script alias directory, then I would
guess it would have to use an HTTP_REFERRER to accomplish that.
-- 
©2002 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.