In order to access the web admin, you need first to authorize a list of
IP with the admin password file. So it will restrict access to your
admin, avoiding people to play with your reports. Best would be to use
an .htaccess file (Apache server) but as some users forget (or don't
know how) to put one, there is now a minimal security feature. As you
cannot get IP with javascript, an ajax call is made to a php script to
get this value and compare with the list of authorized IP. If php is
not available, you'll need to secure the admin directory using an
.htaccess file or any other method. SSI is not being used as it can
be disabled on the server side.
PDF exportation have been cleaned for daily reports. Title page was missing
and some reports were broken.
Piwik
1.7 have been released. From their changelog, there are some
nice ideas to implement :
-> Visits by days since last visit
-> Visits to conversion
-> Day to conversion
If I have some time, I will look at heatmap again.
What next : new homepage for session report.