Awstats mod - uses dynamic pages (non static)

[djtremors]

This is my version of the awstats page. It uses dynamic generating awstats.pl code and uses HTTP basic authentication to access the pages.

http://www.djtremors.com/index.php?o...=25&Itemid=139

The stats page is viewed under the domain you are checking and with a /stats on the end.
ie. www.domain.com/stats

Hopefully I got the installer.sh working enough to work on any Linux distro but it's been biased towards Fedora/Redhat/Centos.

Hopefully I've ironed out the installer and so on. I'm still currently working on it a bit. But it's pretty much all there.

NOTE: It's not compatible with the other awstats version released by one of the other contributors which creates static HTML pages. So make sure you pick one or the other.

[domino]

Thanks for this. If all works well, I think this would be a great ISPConfig Add-on

[djtremors]

yeah I uploaded it to my friends Fedora box to test first time deployment which was were I realised some small missed files, mistakes and required changes to my scripts and then modified my local copies and so on.

So I hope I haven't missed anything or left something out. my mates machine is now working so should be fine.

Basically the way it works on the front side is like this:

1. Browse points to http://www.____.com/stats
2. The .htaccess file (created by the crontab/awstats.php file) authenticates the user and redirects to the /ispc.awstats/awstats.pl?config=www____.com page.
3. the crontab/awstats.php file creates all the .htaccess/.htpasswd files as well as creates all /etc/awstats/awstats.{domain}.conf files

All awstats data is stored in /home/admispconfig/ispconfig/web/ispc.awstats.data/, outside of the /ispc.awstats page.

Authentication files are stored together in /home/admispconfig/ispconfig/web/ispc.awstats/.htpasswd as well as the websites home directory. ONLY the domains allowed users can access their own sites so there's no cross site security issues there.

So hopefully everything is right to go first go for you all. Otherwise just msg me the hiccups and the configuration you got (ie. where's apaches confs are and crontab if not /var/spool/cron/root etc.etc.etc.)

thx

[djtremors]

Updated

Fixed a small bug which didn't create/update the awstats archive & db logs due to an incorrect DataDir setting in the /etc/awstats/awstats.model.conf file.
Full path corrects the problem.

Anyone with this bug can easily change the line in /etc/awstats/awstats.model.conf

and put instead

PHP Code:

DirData="/home/admispconfig/ispconfig/web/ispc.awstats.data" 


[falko]

Originally Posted by djtremors

Fixed a small bug which didn't create/update the awstats archive & db logs due to an incorrect DataDir setting in the /etc/awstats/awstats.model.conf file.
Full path corrects the problem.

Did you change this in your package on http://www.djtremors.com/index.php?o...=25&Itemid=139 ?

[djtremors]

yes, I ran an update script which auto creates the tgz and puts it on the site but forgot to at least create a changelog or even version file but yeah, if you see me mention an update then it's live on the download already.

[Petr WhiskI]

Originally Posted by djtremors

Authentication files are stored together in /home/admispconfig/ispconfig/web/ispc.awstats/.htpasswd as well as the websites home directory. ONLY the domains allowed users can access their own sites so there's no cross site security issues there.

Try this:
Log in stats of your site and change url in browser:
http://www.yoursite.tld/ispcstats/awstats.pl?config=www.another_site_on_the_same_isp.tld

So what do you thing about crossite security now?

[martinfst]

Try this:
Log in stats of your site and change url in browser:
http://www.yoursite.tld/ispcstats/aw...e_same_isp.tld

So what do you thing about crossite security now?

Did this (before you even posted) and the result in your browser is:

Error: User 'web1_xxxxxxxx' is not allowed to access statistics of this domain/config.

Setup ('/etc/awstats/awstats.www.anothersideatisp.tld.conf' file, web server or permissions) may be wrong.
Check config file, permissions and AWStats documentation (in 'docs' directory).

So, now it's awstats rejecting, but even so, you don't have access.

[Petr WhiskI]

Thanks, I found it.
In /etc/awstats/awstats.model.conf
have to set
AllowAccessFromWebToAuthenticatedUsersOnly=1

- it was AllowAccessFromWebToAuthenticatedUsersOnly=0 !! after fresh install of your package
Strange thing - look at /home/admispconfig/ispconfig/web/ispc.awstats/awstats.model.conf
there is AllowAccessFromWebToAuthenticatedUsersOnly=0 too...

Thank you for fast reply and hope

[martinfst]

I finally found the time to create an update for the AWstats package created by djtremors. The updates included in this package:

• Updated to AWstats 6.9
• Added the /js/ alias to the generic part of the Apache config, so you can include /js/awstats_misc_tracker.js in any page on any website if you like to create detailed stats like screensize: http://awstats.sourceforge.net/docs/...tml#SCREENSIZE
• Updated the awstats creation script to adhere to the latest ISPConfig 2.2.32 setup, like to use the super account to view any site statistics
• Removed the annoying two times authentication when trying to open the stats with https.
• Improved install.sh script:

• In the setup script, adapted the crontab to not interfere with webalyser entry.
• The root crontab is during setup inserted at the correct location (based on Ubuntu 8.04 LTS)
• The setup script can now be run multiple times without creating a messy apache.conf file
• Fix permissions, to ensure the script runs nightly

The version is only tested on Ubuntu 8.04, ISPConfig 2.2.32. You can find the new package at http://www.tiempo.nl/ispconfig_awstats

Martin