diff options
| author | mattab <matthieu.aubry@gmail.com> | 2014-04-23 10:58:29 +0400 |
|---|---|---|
| committer | mattab <matthieu.aubry@gmail.com> | 2014-04-23 10:58:29 +0400 |
| commit | 2acb364552e1ba3184bd18d3541736e9b1ef9219 (patch) | |
| tree | cdf657b7d11cc4bc980adb2bd89ea2cb9b6fbe70 /config | |
| parent | a24594f869cdfb7f74b68fe747ff5d9c244ded84 (diff) | |
Fixes #5030 Tracking API now does not require token_auth for bulk requests.
To make behavior the same as in Piwik 2.1.0 or earlier, set the following config setting under [Tracker]:
; Whether Bulk tracking requests to the Tracking API requires the token_auth to be set.
bulk_requests_require_authentication = 1
Diffstat (limited to 'config')
| -rw-r--r-- | config/global.ini.php | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/config/global.ini.php b/config/global.ini.php index 9d76c4be20..31b8beb8c5 100644 --- a/config/global.ini.php +++ b/config/global.ini.php @@ -494,6 +494,9 @@ page_maximum_length = 1024; ; TTL: Time to live for cache files, in seconds. Default to 5 minutes. tracker_cache_file_ttl = 300 +; Whether Bulk tracking requests to the Tracking API requires the token_auth to be set. +bulk_requests_require_authentication = 0 + ; DO NOT USE THIS SETTING ON PUBLICLY AVAILABLE PIWIK SERVER ; !!! Security risk: if set to 0, it would allow anyone to push data to Piwik with custom dates in the past/future and even with fake IPs! ; When using the Tracking API, to override either the datetime and/or the visitor IP, @@ -501,6 +504,7 @@ tracker_cache_file_ttl = 300 ; DO NOT USE THIS SETTING ON PUBLIC PIWIK SERVERS tracking_requests_require_authentication = 1 + [Segments] ; Reports with segmentation in API requests are processed in real time. ; On high traffic websites it is recommended to pre-process the data |