Can AWStats be used to make Cross Site Scripting Attacks ?
… section in its parameter, when AWStats will show the links on the report page, does the script will be executed ? SOLUTION: No. AWStats use a filter to remove all scripts codes that was included in an URL to make a Cross Site Scripting Attack using a log analyzer report page. FAQ-SEC150 : HOW CAN I PREVENT SOME USERS TO SEE STATISTICS OF OTHER USERS ? PROBLEM: I don’t want a user xxx (having a site www.xxx.com) to see statistics of user yyy (having a site www.yyy.com). How can i setup AWStats for this ? SOLUTION: Take a look at the security page. FAQ-SEC200 : HOW TO MANAGE LOG FILES (AND STATISTICS) CORRUPTED BY ‘WORMS’ ATTACKS ? PROBLEM: My site is attacked by some worms viruses (like Nimba, Code Red…). This make my log file corrupted and full of 404 errors. So my statistics are also full of 404 errors. This make AWStats slower and my history files very large. Can I do something to avoid this ? SOLUTION: Yes.
