Opened 5 years ago

Closed 4 years ago

Last modified 4 years ago

#530 closed New feature (fixed)

Report actions by html page title as well as reporting by URL (or custom page name)

Reported by: matt Owned by:
Priority: critical Milestone: Piwik 0.5
Component: Core Keywords:
Cc: Sensitive: no

Description (last modified by matt)

Currently Piwik reports on pages URL structures, or if user specifies a custom action name in the javascript, Piwik reports on this custom name.
Piwik has always access to the html page title and could build the report of the best page by title.

Therefore there would be a new API function to get the top pages by title, as well as the current method getActions to get the top actions by URL.

The title could be customized on the JS side by calling piwik.setDocumentTitle().

We would not report on best landing page, or top exit pages by title. We would not report on time per page title. These extra analysis would only be done on the URLs to minimize overhead during archiving.

Change History (11)

comment:1 Changed 5 years ago by matt (mattab)

  • Description modified (diff)

comment:2 Changed 5 years ago by matt (mattab)

  • Description modified (diff)

comment:3 Changed 5 years ago by vipsoft (robocoder)

piwik.js sends the document.title in the 'title' parameter but it is not currently used by the server. (A mod_security issue was raised in #564. We could add title_var_name to global.ini.php, in a similar manner to download_url_var_name, or we could use encodeURIComponent() in piwik.js instead of simply, escape().)

comment:4 Changed 5 years ago by vipsoft (robocoder)

Re: previous comment. Upon closer inspection, the parameter name doesn't matter. mod_security's PHP injection rules are generic and extremely broad, e.g.,

SecRule REQUEST_FILENAME|ARGS|ARGS_NAMES

i.e., try to match against the request filename, arguments, and argument names. To address the issue requires encoding all args from client-to-server, and a review of the arg names used in Piwik to make sure they aren't on the blacklist.

Note: encodeURIComponent() doesn't have a native PHP equivalent; similarly, there's no native version of urlencode() for JavaScript.

comment:5 Changed 5 years ago by matt (mattab)

  • Milestone changed from Stable release to DigitalVibes

comment:6 Changed 5 years ago by matt (mattab)

  • Priority changed from major to critical

comment:7 Changed 5 years ago by vipsoft (robocoder)

Per analysis in #564, mod_security requirements are removed from this ticket.

comment:8 Changed 5 years ago by matt (mattab)

  • Description modified (diff)

comment:9 Changed 5 years ago by domtop

comment:10 Changed 4 years ago by matt (mattab)

  • Resolution set to fixed
  • Sensitive unset
  • Status changed from new to closed

fixed in [1530]

comment:11 Changed 4 years ago by matt (mattab)

  • Milestone changed from 2- DigitalVibes to 1 - Piwik 0.5
Note: See TracTickets for help on using tickets.