FriendsOfFlarum Analytics - tracking user visits
- Edited
0E800 someone correct me if thats a major security concern, just saying that I am unable to get Piwik analytics to show unless all references are removed
While not a big risk, I would advice against removing that header. SAMEORIGIN
should be fine, depending on what you host on the same domain. If there's any place users or third-party might place custom HTML, in particular IFRAMES, I strongly suggest not disabling frame protection.
Allowing inclusion of your analytics admin panel inside another website is dangerous, one could trick you into clicking various options by placing it in an iframe behind content on a webpage.
You're probably a lot safer if your analytics server can only be accessed directly. That header has no impact on the correct working of the javascript tracking code.
I'm not sure why that iframe thing was added to the extension in the first place ? It's not required for the tracking to work and users might downgrade their security to use it...
By the way X-Frame-Options is now deprecated, the browser will use the frame setting provided via CSP if available.
clarkwinkelmann could you please comment on why the extension name is all garbled in the left pane of the admin page?
bikepost could you please comment on why the extension name is all garbled in the left pane of the admin page?
I'm not sure what you mean ? I don't have a working install with that panel right now. Do you have a picture ?
@clarkwinkelmann Have a look at the screenshots I posted higher in this thread. In the left side of the screenshot, below Extensions, you will notice that instead of seeing "Analytics" the name shows "Flagrow-analytics.admin.page.nav.title"
bikepost That's the translations cache that is outdated. Disable and re-enable any extension or run php flarum cache:clear
to refresh it ? That should normally do the trick.
I had used
php flarum cache:clear
many times and it didn't work.
I just disabled the English extension, re-enabled it and ran
php flarum cache:clear
again for good measure.
Didn't work and Piwik widgets are still now showing any visitors data. It's all 0 visitor.
Yep, sorry guys, I even closed the tab and launched a new one and then the browser and reopened.
- Edited
bikepost then this was caused by a local/browser cache or Flarum cache.
The process described here should fix it:
https://discuss.flarum.org/d/5623-gamification-reflar-issue-with-locale/15
- Edited
I still don't see how Cloudflare comes into consideration @luceos
But I am using Opera in macOS and to relad a page without cache:
option + command + R
does the trick. It may be the same in Safari and Chrome. clearing the Flarum cache on the server does not solve this.
I just installed an extension that shows users and I was having the same text formatting issue before using those keys combo.
Thank you very much each one of you for all of your help!
This thread needs moderation attention ? I'm at a loss where to start splitting though ?
For me Piwik integration did not work with this extension. _paq.push(['setSiteId', '1']);
gets included with ##piwik_options##
and not at its appropriate place after _paq.push(['setTrackerUrl', u+'piwik.php']);
, so nothing got tracked.
I don’t know if this was also responsible for the iframe only giving a 500 error in the Flarum admin interface, but possibly?
I have now manually included the correct tracking code in core/views/app.blade.php
and tracking works.
But it only tracks initial visits and when you refresh a page. So not pages visited via the forum navigation (until refreshed). Is there a setting to change this behaviour or is it just due to how Flarum is built?
Do you think you could add an option to set the username ie
_paq.push(['setUserId', '<?=$user['username']?>')
That's from my site not Flarum
Thanks,
Larry
jenolan where would that $user
variable come from ?
Registering the Flarum username, email or id as the Piwik user id with this extension would make sense though.