Matomo 2.16.2
3 August 2016
Matomo version 2.16.2 is now available (security release).
Upgrading to Matomo 2.16.2
Matomo 2.16.2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Matomo updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Matomo install to test the 2.16.2 upgrade prior to applying it live. Get started managing your Matomo installations with Installatron
What's New in Matomo 2.16.2
This release is rated critical. Several XSS security issues are fixed in this release. The Piwik security team would like to thank the following security researchers for their help making Piwik more secure: David Lindsay, Igor Blumental and Emanuel Bronshtein.
piwik/piwik
- #9883 New report listing all User ID, in Visitors > Users [by @alexkuk, @tsteur]
- #8689 Full PHP 7 compatibility [by @tsteur, @mattab]
- #7257 Piwik.js: Support for sending data to multiple idSites
- #4410 The string to escape is not a valid UTF-8 string in "@CoreHome/getDefaultIndexView.twig". [by @mattab, @tsteur]
- #9525 Piwik JS Tracker: Easier way for using multiple trackers [by @mattab]
- #10066 Manage websites: Links to website [by @Peteys93, @tsteur]
- #10214 Add a web app manifest so you can add Piwik icon to the launcher in Mobile devices [by @tsteur]
- #10105 piwik.js: Access is denied in Internet Explorer 8 within IFrame [by @Kijewski, @mattab]
- #9411 Let users exclude IPv6 address ranges using * wildcard exclusion rules for IPv6 such as 2001:DB8:*:*:*:*:*:* [by @mattab]
- #10174 Document new way to easily send tracking requests to multiple Piwik servers and/or multiple websites ID [by @mattab]
- #9995 Manage goals: Help text is misplaced [by @sgiehl]
- #10044 Unlimited paging in lists when selecting all [by @sgiehl]
- #10130 7 days in Evolution over the period when Period is Day [by @tsteur]
- #10163 Improve detection for empty keywords for referring search engines [by @sgiehl]
- #10172 Piwik.js: add callback ability to trackPageView [by @er314, @tsteur]
- #10305 New Goals.getGoal(idSite, idGoal) API method to get a single goal [by @tsteur]
- #9838 Embed Piwik Report – columnDescription-bubbles are out of view [by @sgiehl – Sponsored by Piwik PRO]
- #10242 Update country flags for Tokelau, Myanmar, Lesotho, Libya and French Guiana to their modern versions. [by @polyfloyd, @sgiehl]
- #9984 When changing segment definition, inform the user that past data will be cleared [by @sgiehl – Sponsored by Piwik PRO]
- #10045 on Mobile Device, let users drag and drop items such as segments, using touchpunch library [by @wronan, @mattab]
- #10189 Tweak core:archive output logging to better explain where to find error log depending on server configuration [by @mattab, @sgiehl]
- #10302 piwik.js: Prepend a slash to all paths such as when users don't specify leading slash for URL path [by @mattab]
- #10160 Accessibility: set a title attribute on Main menu item for better experience on screen readers [by @tyrylu, @sgiehl]
- #9966 Don't try to display a custom logo or favicon if they don't exist [by @ksubileau, @tsteur]
- #10204 Updates device detector to latest version [by @sgiehl]
- #10339 Professional Services for Piwik, neutral branding within Piwik app [by @mattab]
- #9196 Creating visitor segment in mobile phone fails [by @tsteur, @mattab]
- #9438 Bing, Yahoo, etc. may be shown as "Websites" instead of "Search engines"
- #9468 Some periods may not be archived at all [by @tsteur]
- #9872 Outlinks and downloads may not be tracked if users don't specify a leading slash in paths (eg. setDomains)
- #9923 Goal conversion sometimes not tracked when a Goal matches event names/categories/actions [by @mattab]
- #10000 Don't try to display a custom logo or favicon if they don't exist [by @ksubileau, @tsteur]
- #10115 PHP 7, API: actual error messages not shown when a PHP Error occurs [by @mattab]
- #10117 Error: Invalid dimension ‘null'. [by @mattab]
- #10121 When a custom search engine is added and it has the same domain as the website tracked, referrer is not detected as expected [by @sgiehl – Sponsored by Piwik PRO]
- #10153 trackLink does not invoke callback if request is done via GET ? [by @er314]
- #10169 Overlay bubbles are not displayed if custom port in http://hostname:port/ [by @tsteur]
- #10175 JavaScript SDK: Calling an undefined JS API method should trigger a useful error message to help users locate the issue quickly [by @mattab]
- #10206 Error in visit details when UserCountry plugin is disabled
- #10252 addEcommerceItem not added to subsequent order [by @mattab]
- #10273 API: CSV exports compatibility with &date=previousX, &date=lastX and more [by @tsteur, @mattab]
- #10276 Archiving output showing always "0" visits for period = day summary [by @mattab]
- #10283 New install of Piwik 2.16.1 incorrectly reports Tracker Status 500 "GET request to piwik.php failed." [by @mattab]
- #10289 Tracked resolution of Mac Retina displays is wrong
- #10303 Searching recursively in sub-tables should work as expected [by @mattab]
- #10310 Piwik.js: setting custom dimensions fails on IE8 with customDimensionIdsAlreadyHandled is a array,has no indexOf() in line 3932 [by @sgiehl, @mattab]
- #10092 [automatic translation update] Updated 42 strings in 5 languages (ru, de, sv, pt-br, fr) [by @sgiehl]
- #10114 [automatic translation update] Updated 491 strings in 48 languages (am, ar, be, bg, ca, cs, da, de, el, es, et, eu, fa, fi, fr, gl, he, hi, hr, hu, id, it, ja, ko, lt, lv, nb, nl, nn, pl, pt-br, pt, ro, ru, sk, sl, sq, sr, sv, ta, te, th, tl, tr, uk, vi, zh-cn, zh-tw) [by @sgiehl]
- #10155 [automatic translation update] Updated 251 strings in 4 languages (de, nl, sq, vi) [by @sgiehl]
- #10180 [automatic translation update] Updated 1490 strings in 3 languages (uk, ar, fa) [by @sgiehl]
- #10191 [automatic translation update] Updated 315 strings in 1 languages (uk) [by @sgiehl]
- #10265 [automatic translation update] Updated 418 strings in 11 languages (ar, da, de, es, et, fa, sl, fr, it, sq, el) [by @sgiehl]
- #10328 [automatic translation update] Updated 54 strings in 7 languages (nl, es, he, pt-br, cs, el, uk) [by @sgiehl]
- #10344 [automatic translation update] Updated 253 strings in 44 languages (tr, bg, cs, da, de, el, es, fr, id, it, ja, nb, nl, pt-br, ro, ru, sk, sl, sq, sr, sv, uk, zh-cn, zh-tw, fi, ko, am, ar, be, ca, et, eu, fa, gl, hi, hu, ka, lt, nn, pl, pt, th, tl, vi) [by @sgiehl]
- #10018 When an event is tracked without a URL, Goal conversions ("Event matching goals") should be tracked as expected [by @mattab, @tsteur]
- #10046 Add link to Product changelog in the Developer changelog [by @mattab, @tsteur]
- #10051 Piwik.js: Add current domain to list of domains automatically only if no path is set [by @tsteur, @mattab]
- #10082 Piwik.js: Explain a user should call setSessionCookieTimeout when changing visit length [by @tsteur, @sgiehl]
- #10085 JavaScript SDK: add support to send tracking requests to multiple Piwik servers and/or store in one or multiple websites ID [by @mattab]
- #10091 allow + in database names during setup [by @nbezzala, @tsteur]
- #10148 Source code: fix some typos [by @stweil, @sgiehl]
- #10170 Piwik.js: fix to double-execution of trackLink callback [by @er314, @tsteur]
- #10171 Overlay while using custom http port: fix to urlnormalizer [by @er314, @tsteur]
- #10192 CI builds: Splits AllTests build in two separate builds [by @sgiehl, @mattab]
- #10205 Update README.md file to link to our QA and Security pages [by @mattab]
- #10247 Put idSite into single quote for support custom string id [by @joubertredrat, @tsteur]
- #10260 Update JQuery to the latest 1.12.4 version [by @mattab]
- #10270 Let plugins provide custom piwik.js tracker tests [by @tsteur]
- #10274 deprecate ci-status project and ci-status.com website
- #10279 Piwik.js: Reset the list of items in the cart, after tracking an ecommerce conversion [by @mattab]
- #10331 When Piwik config file becomes un-readable, make it clear that the file still exists but is not readable [by @mattab]
- #10334 Update composer libraries, while enforcing the minimum php in composer.json [by @mattab]
- #10058 Release 2.16.2 [by @mattab]
piwik/device-detector
- #5483 Add detection for RemixOS if possible [by @sgiehl]
- #5485 Improve detection of Fever bot [by @sgiehl]
- #5486 Improve brand detection of Apple devices [by @sgiehl]
- #5488 Add detection of TweakStyle User Agent [by @felicienfrancois, @sgiehl]
- #5490 Improves inaccurate bot detections to avoid mismatches [by @sgiehl]
- #5491 Use configured cache for vendor fragment parsing [by @sideshowcecil, @sgiehl]
- #5492 Improve detection of Windows Media Player [by @sgiehl]
- #5493 Improve bot detections: Slackbot and Domain Re-Animator Bot [by @sgiehl]
- #5494 Introduce new Yaml Parser facade to allow switching the yml parser [by @sgiehl]
- #5495 Improve ReadMe [by @sgiehl]
- #5497 Implements new protected method getRegexesDirectory() [by @minterior, @sgiehl]
- #5498 Adds detection or various new bots for Yahoo, Cốc Cốc Bot, Yourls [by @sgiehl]
- #5499 Opera 7 was the first browser to use Presto [by @sgiehl]
- #5500 MotorolaWebKit is misidentified as a model named "rolaWebKit" [by @sgiehl]
- #5501 Qt misidentified as a Nokia model name [by @sgiehl]
- #5502 Palmscape browser is misidentified as a Palm model named "scape" [by @sgiehl]
- #5503 Custom user-agent OR detect LG TV [by @sgiehl]
- #5506 VLC 2.3.3 not detected as a mediaplayer [by @sgiehl]
- #5510 Add detection for 10+ podcast clients [by @benzimmer, @sgiehl]
- #5512 remove line of control characters from fixtures [by @benzimmer, @sgiehl]
- #5513 detection of MediaPlayer Foobar2000 [by @HostedDinner, @sgiehl]
- #5514 Rainmeter (https://www.rainmeter.net/) is not detected [by @sgiehl]
- #5517 adds quotes to database entries [by @mneudert, @sgiehl]
piwik/searchengine-and-social-list
- #3 Add many Search engines not recognized yet: HTTPS, non-HTTPS [by @sgiehl]
- #4 Adds missing hosts for Google Custom Search [by @sgiehl]
- #5 Adds missing parameter name for Excite [by @sgiehl]
- #6 Adds missing parameter name for Startpagina [by @sgiehl]
- #7 Adds missing hosts for Infospace [by @sgiehl]
- #8 Adds detection for searchengine SmartShopping [by @sgiehl]
- #9 Other local search engines (orange, qwant) [by @sgiehl]
- #10 Introduces possibility to define search engines not providing keywords for certain urls [by @sgiehl]
- #12 Added 4 swedish search engines [by @MartinSund, @sgiehl]
piwik/piwik-log-analytics
- #46 Improve README for use case of real time piping of apache logs to Piwik [by @mattab]
- #131 Support for importing AWS ELB access logs analytics
- #140 Adds support for AWS ELB log files [by @sgiehl, @mattab]
- #141 Log Analytics and piwik on different machines -> must use a token_auth with admin permission or super user
- #142 Live log analytics from Apache – format error [by @mattab]
- #143 Fix IOError: [Errno 29] Illegal seek [by @mattab]
piwik/piwik-php-tracker
- #19 setter functions changed as fluent. [by @shibby, @tsteur]
- #20 Let users track ecommerce orders with the same SKU multiple times [by @mattab]
piwik/tracker-proxy
- #1 Ability to force using a user-agent when fetching piwik.js, useful to avoid some firewalls blocking the requests [by @mattab]
piwik/piwik-package
piwik/component-decompress
- #4 PHP 7 compatibility [by @tsteur, @mattab]
piwik/component-network
- #3 Support wildcards in IPv6 address ranges [by @kevinoid, @mattab]
piwik/component-cache
- #11 Return true when cache file does not exist [by @mattab]
piwik/referrer-spam-blacklist
- #250 Add myplaycity.com [by @mnapoli]
- #276 Add domain-tracker.com [by @spmedia, @mnapoli]
- #287 Add dogsrun.net [by @spmedia, @mnapoli]
- #291 Adding getrichquick.ml [by @timetolive, @mnapoli]
- #295 Adding free-video-tool.com [by @jloh, @mnapoli]
- #297 Add keywords-monitoring-your-success.com [by @mnapoli]
- #301 Add boostmyppc.com [by @spmedia, @mnapoli]
- #302 Add 6hopping.com [by @spmedia, @mnapoli]
- #303 Add getrichquickly.info [by @spmedia, @mnapoli]
- #304 Add makeprogress.ga [by @spmedia, @mnapoli]
- #308 Add social-traffic-1.xyz [by @Xcrucifier, @mnapoli]
- #309 Add social-traffic-7.xyz [by @Xcrucifier, @mnapoli]
- #310 Add smartphonediscount.info [by @kkkrist, @mnapoli]
- #311 Add hdmoviecams.com [by @spmedia, @mnapoli]
- #313 Add marketland.ml [by @spmedia, @mnapoli]
- #314 Add increasewwwtraffic.info [by @spmedia, @mnapoli]
- #315 Add social-button.xyz [by @Xcrucifier, @mnapoli]
- #316 Add socialbuttons.xyz [by @Xcrucifier, @mnapoli]
- #317 Add topquality.cf [by @spmedia, @mnapoli]
- #318 Add social-traffic-3.xyz [by @spmedia, @mnapoli]
- #319 Add social-traffic-4.xyz [by @lembitk, @mnapoli]
- #320 Add social-traffic-5.xyz [by @lembitk, @mnapoli]
- #179 Adds pornogig.com [by @zodthepossum, @mnapoli]
- #179 Adds pornogig.com [by @zodthepossum, @mnapoli]
- #321 Add free-social-buttons7.xyz [by @lembitk, @mnapoli]
- #322 Add social-traffic-2.xyz [by @spmedia, @mnapoli]
- #323 Add dominateforex.ml [by @spmedia, @mnapoli]
- #324 Add getlamborghini.ga [by @spmedia, @mnapoli]
- #325 Add easycommerce.cf [by @spmedia, @mnapoli]
- #326 Add keywords-monitoring-success.com [by @mouse-reeve, @mnapoli]
- #328 Add supervesti.ru [by @ericguirbal, @mnapoli]
- #329 Add sad-torg.com.ua [by @ericguirbal, @mnapoli]
- #330 Add varikozok.ru [by @ericguirbal, @mnapoli]
- #331 Add mosrif.ru [by @ericguirbal, @mnapoli]
- #332 Add meds-online24.com [by @ericguirbal, @mnapoli]
- #333 Add pornoklad.ru [by @ericguirbal, @mnapoli]
- #334 Add sexsaoy.com [by @ericguirbal, @mnapoli]
- #335 Add woman-orgasm.ru [by @ericguirbal, @mnapoli]
- #336 Add ghostvisitor.com [by @spmedia, @mnapoli]
- #337 Add magicdiet.gq [by @spmedia, @mnapoli]
- #338 Add burn-fat.ga [by @spmedia, @mnapoli]
- #339 Add cookie-law-enforcement-dd.xyz [by @spmedia, @mnapoli]
- #340 Add eu-cookie-law-enforcement2.xyz [by @spmedia, @mnapoli]
- #341 Add ownshop.cf [by @spmedia, @mnapoli]
- #342 Add unpredictable.ga [by @spmedia, @mnapoli]
- #343 Add popads.net [by @spmedia, @mnapoli]
- #344 Add monetizationking.net [by @spmedia, @mnapoli]
- #346 Add online-templatestore.com [by @spmedia, @mnapoli]
- #347 Add zoominfo.com [by @spmedia, @mnapoli]
- #354 Putting a stop to the ‘Cookie Law' domain referrer spam wave [by @mnapoli]
- #355 Add azlex.uz [by @ericguirbal, @mnapoli]
- #362 Add havepussy.com [by @ericguirbal, @mnapoli]
- #368 Add moneytop.ru [by @ericguirbal, @mnapoli]
- #383 Add zvetki.ru [by @ericguirbal, @mnapoli]
- #384 Add freenode.info [by @ericguirbal, @mnapoli]
- #385 Add solitaire-game.ru [by @ericguirbal, @mnapoli]
- #387 Add call-of-duty.info [by @ericguirbal, @mnapoli]
- #409 Add replica-watch.ru [by @ericguirbal, @mnapoli]
- #412 Add buy-cheap-pills-order-online.com [by @ericguirbal, @mnapoli]
- #435 Add djonwatch.ru [by @ericguirbal, @mnapoli]
- #444 Add vesnatehno.com [by @ericguirbal, @mnapoli]
- #445 Add fix-website-errors.com [by @spmedia, @mnapoli]
- #446 Add law-enforcement-bot-ff.xyz [by @spmedia, @mnapoli]
- #455 Add law-enforcement-ee.xyz [by @spmedia, @mnapoli]
- #461 Add wallpaperdesk.info [by @ericguirbal, @mnapoli]
- #464 Add legalrc.biz [by @ericguirbal, @mnapoli]
- #467 Add site-auditor.online [by @spmedia, @mnapoli]
- #476 add slow-website.xyz [by @Ccantey, @mnapoli]
- #478 Add pron.pro [by @ericguirbal, @mnapoli]
- #480 Add ilovevitaly.xyz [by @spmedia, @mnapoli]
- #481 Add social-buttons-ii.xyz [by @spmedia, @mnapoli]
- #484 Add law-six.xyz [by @ricvelozo, @mnapoli]
- #486 Add works.if.ua [by @spmedia]
- #493 Add rumamba.com [by @ericguirbal, @mnapoli]
- #501 Added seo-2-0.com [by @bjarnoldus, @mnapoli]
- #503 Add law-enforcement-check-three.xyz [by @JSilverthorne, @mnapoli]
- #505 New maintainer