Woopra Forums » Feature Requests

Page view reveals email address and code number.

(7 posts)
  • Started 4 months ago by achilles66
  • Latest reply from jad
  • This topic is not a support question
  • achilles66
    Member

    I turned off Woopra because of that. I know another thread very briefly discussed this, but I think it's a serious problem and I saw no resolution.

    If someone goes to page view (or view source) they can see the admin email address and the special Woopra code number.

    That's not a good thing. This information should be hidden.

    Posted 4 months ago #
  • Jad Y.
    Administrator

    If someone goes to a page on your website he will see HIS session information (email,name..) and not yours!

    Posted 4 months ago #
  • achilles66
    Member

    What about the Woopra code number? Does that show up as well?

    Posted 4 months ago #
  • achilles66
    Member

    It looks like it does show the Woopra ID number on other computers. But, you're right. No email address.

    Posted 4 months ago #
  • achilles66
    Member

    Is there a potential security issue with the revelation of that ID?

    Posted 4 months ago #
  • kreal
    Member

    #achilles66

    If you use the WordPress plugin for instance, it is not your email that are being displayed, but merely the user logged onto your site.

    And since you properly login to your own site, it is ofcause your email which is being displayed in the view source.

    Try and logout, and notice that your email is no longer displayed in the woopra code.

    Regarding the "Woopra code number" I see no security issues, since it is only an identifier for your site as far a I know. Woopra still depends on the url to be whatever site you registered, so you can't copy it into another site and misuse it that way.

    Kind regards
    Kris

    Posted 4 months ago #
  • Jad Y.
    Administrator

    Thanks kreal for making this clear.

    Posted 4 months ago #

RSS feed for this topic

Reply

You must log in to post.