LoginSign Up
← Back to all sparks
O

Open Web Analytics

MARKETING
Velocity5.0

Self-hosted web analytics for tracking site visitors

openwebanalytics.com ↗

Open Web Analytics 1.14.7 ships unspecified security fixes and a field-clearing command.

web-analyticsself-hostedsecurityphpopen-source
◆Current state
Open Web Analytics is a self-hosted web analytics tool. Release 1.14.7 includes security fixes it does not describe, recommends upgrading, needs no schema changes and adds a clear-field-values CLI command with a dry-run mode. It follows a run of 1.14 patches that closed cross-site record access, restored heatmaps broken since 1.10.1 and 1.13.0, and fixed relative date periods that covered the wrong days.
◆Where it's heading
The 1.14 line is cleanup after the large 1.11 to 1.13 rework (date partitioning, a job scheduler, custom reports and new admin URLs), with fixes landing every few days. The 1.13.0 notes describe it as preparation for a 2.0 branch, so the patch stream is clearing debt before that.
◆Prediction
Expect more 1.14.x patches for regressions and access checks. The entries say a 2.0 branch is coming but give no date or scope.

◆Recent moves

  1. 1d ago

    Security fixes and a command to clear stored field values

    An upgrade-recommended release with undisclosed security fixes and a new CLI command to clear stored field values in batches, with a dry run. It continues the 1.14 patch stream's focus on access control and data repair, without schema changes.

    View source ↗
  2. 12d ago

    Relative date periods fixed, including an eight-day 'last seven'

    'Last seven days' had covered eight days and 'Last week' ended a day late; relative periods now count calendar days, so daylight saving no longer shifts them. Small, but it changes the numbers in every relative report.

    View source ↗
  3. 13d ago

    Heatmaps show clicks again after a 1.13.0 regression

    Heatmaps draw clicks again after a data request had been refused since 1.13.0, and the heatmap link works for uncached sites. Finishes the repair started in 1.14.3.

    View source ↗
  4. 13d ago

    Heatmap overlay link restored and limited to the site's domain

    The heatmap overlay link opens the page again, after sending users to the dashboard since 1.10.1, and only opens pages on the site's own domain for permitted users.

    View source ↗
  5. 22d ago

    URL filter truncation and proxy sign-in fixes

    Query-parameter filtering no longer truncates page URLs, regex goals can contain @, and sign-in behind a sub-path proxy returns to the requested page. Fixes for long-standing issues.

    View source ↗
  6. 22d ago

    Fix lets per-site users stop reading other sites' records

    Closes a cross-site access gap: clickstream, transaction and recording lookups checked the site a request named, not the site the record belonged to. Multi-site installs with per-site users should upgrade.

    View source ↗