Hello, I bought the paid version of the software because I find it really great. And it corresponds to my expectations.

I used the following tracking code:
[code]<script type="text/javascript" src="https://www.abri29.com/phpwebstat53/pws.php?mode=js"></script>
<script type="text/javascript" src="https://www.abri29.com/phpwebstat53/plugins/onclick/pws_file.php"></script>
<noscript><img src="https://abri29.com/phpwebstat53/pws.php?mode=img" style="border:0; width:1px; height:1px" alt="noscript-img"></noscript>[/code]

Everything works fine, except when I use "header('X-Content-Type-Options: nosniff');" to reinforce the security of the website.
The problem is that the tracking code is blocked, here is what the debugger displays:
https://i.postimg.cc/d39QjFhY/firefox.jpg

It detects "pws" files as text/html, and the tracking code says text/javascript.
the MIME type is not the sames and therefore the files are blocked.

How to adapt the tracking code, or the files concerned so that they are accepted by the X-Content-Type-Options: nosniff security option?

Thank you.  ;)

Hi there,

we will analyze this case and come back to you.

Kind regards
Reimar

First idea: is it possible for you to change the webserver configuration so that javascript resources will get the correct mim type in the Content-type header? It should be set to "text/javascript" instead of "text/html".

Let me further investigate this issue. Thanks for your patience.

If you are using an Apache HTTP Webserver, you can use a ".htaccess" file within your root folder to set the correct content type as follows:

[code]
<IfModule mod_headers.c>

  <FilesMatch "\.(js)$">
    Header set Content-Type "text/javascript"
  </FilesMatch>

</IfModule>
[/code]

I use a shared hosting, I don't know if I have the possibility to change the webserver configuration. Or at least, I don't know how to change it.

Thank you for your answer, I love your product. This is the only point that blocks me a little. Because it is really a quick and practical solution to have the statistics of visits.

EDIT: I just got your last message, I will try to modify the .htaccess. I'll come back to you soon.

We are very happy to hear that you like our stat solution !

You can also google for "mod headers set content type javascript".
That was my way to find a solution.
If it is not working, we have to make a deeper diving session :-)
Just let us know.

I have modified my .htaccess with your solution. I have cleared the cache.
here is a txt file that copy my .htaccess if you want to see :
https://abri29.com/pages/htaccess.txt

Edge dev console :
https://i.postimg.cc/Y0nXcppM/Sans-titre.png
Vivaldi dev console :
https://i.postimg.cc/RV11y7TG/Sans-titre2.png
Firefox dev console :
https://i.postimg.cc/XNkcDKLL/Sans-titre3.png

I think it doesn't solve the problem. I could remove this security setting, but it is recommended to use, so I hesitate.

That is a pity to hear ... so we have to make a deep dive.
Let me check this and come back to you.
Please be patient, it takes a few days. Thanks.

I have deactivated this security in the meantime, I only have a modest website, so it is not urgent. ;)
Take your time to see if something is possible in this case.
I think it will interest many people in the future, because the option "nosniff" on the headers is part of the security options that will be more and more common.
Anyway, thanks again for your answer and your help! :)

Many thanks for your patience.

We analyzed the situation and found out the following. If you change your code from


Code (html):

<script type="text/javascript" src="https://www.abri29.com/phpwebstat53/pws.php?mode=js"></script> <script type="text/javascript" src="https://www.abri29.com/phpwebstat53/plugins/onclick/pws_file.php"></script> <noscript><img src="https://abri29.com/phpwebstat53/pws.php?mode=img" style="border:0; width:1px; height:1px" alt="noscript-img"></noscript>

to


Code (html):

<script src="https://www.abri29.com/phpwebstat53/pws.php?mode=js"></script> <script src="https://www.abri29.com/phpwebstat53/plugins/onclick/pws_file.php"></script> <noscript><img src="https://abri29.com/phpwebstat53/pws.php?mode=img" style="border:0; width:1px; height:1px" alt="noscript-img"></noscript>

So the difference is to exclude the parameter "type=text/javascript".

We hope this helps.

a big thank you, everything is working now. Thanks for your help and this great software!