Why is Awstats implemented? -> security risk

[monotek]

Why is awstats implemented in upcoming omega release?
Imho thats a security risk. More than one time there was ugly bugs which could be used to compromise a server using awstats.

Sure Awstats looks nice but is webalizer not enough anyway?

Is awstats only optional or is it always used?

[Shin]

You can disable it from the code, but it is better that webalizer

[monotek]

Yes ist is. And sometimes unsecure.
What do you mean with "You can disable it from the code"?
Will there be a config option to choose webalizer or awstats?

[Shin]

no that you can modify the vhcs code for webalizer use

[ephigenie]

later on we could think over adding modlogan support i.e.

[Donni]

Why not integrate Awstats with static page generation? If you use it with this option all output pages are pure html pages and there should be no security risk. AFAIR there is a "awstats static howto" somewhere in the official forum.

[RatS]

Yes, there is, it's made by me ...
The trunk is only a WIP-Version, please be patient!

[monotek]

Is this changed to static genration yet?

[BeNe]

I dont think so - Integrate AwStats support is change in the Roadmap to Omega 1.0.0.

[BioALIEN]

I prefer AWStats to Webalizer. I know more newbie sys admins will convert to VHCS Omega because of this fact