Matomo 4.3.1

4 June 2021

Matomo version 4.3.1 is now available (major release).

Upgrading to Matomo 4.3.1

What's New in Matomo 4.3.1

• Banner to ask to refer users can be annoying
  
• Uploading logo logs out users
  
• Creating/updating segments w/ values w/ encoded chars does not auto schedule rearchiving
  
• Rename dimension called “Measurable” to “Website name”
  
• report information: “Report generated” without time unit (seconds?)
  
• Alexa.php(40): Warning – DOMDocument::loadHTML(): Unexpected end tag
  
• Visitor Map shows no visits for all regions of Greece (matomo 4.2.1/geoip2 lite)
  
• Improves Geolocation diagnostics
  
• Ignore performance metrics that are obviously too high
  
• HeatmapSessionRecording.addHeatmap failed
  
• Improve required private directories check
  
• Licence Mismatch
  
• Improves detection for LinkedIn app
  
• New device for existing brands: Vivo, Huawei, Oppo
  
• New device for existing brands: Realme, Vivo, OPPO, Huawei, Xiaomi, Xiaolajiao, Smartisan
  

• Matomo Analytics
  

• Display Inline help icon linking to User Guide, for all features with a user guide
  
• When accessing UI with unsupported browser throw error and suggest to use other browser
  
• Remove the “Visitor ID” segment when the “Visitor profile” feature has been disabled
  
• Setting process_new_segments_from not respected when archiving bigger periods
  
• Performance report table not displayed properly
  
• Show periods labels in the evolution graphs to make it easier to change period
  
• Store the segment hash in the DB table
  
• Invalidate segment data on update only if the definition changes
  
• Display the “oops” red error message, only when there was an error, do not show it when user clicks away to load another menu or page
  
• Allow selecting password_hash algorithm
  
• Performance metrics issues after 4.2 update
  
• Row evolution on subtables can cause errors randomly
  
• Marketplace: “more” link does not work
  
• Ask for password confirmation before installing all plugins
  
• vendor/composer/installed.json is exposed publicly
  
• Escape URL in geolocation admin error message
  
• detect brute force login attempts from different ip addresses
  
• Ensure redirects in HTTP class are only done to allowed protocols (for cURL)
  
• Use Common::safe_unserialize for session data
  
• Add plugin name as comment to SQL query
  
• Email export as TSV format
  
• Error Message notification is not hidden when navigating to a new page
  
• JS Error tracking should record the same error only once per page view
  
• Improve tracker performance when using custom dimensions (one less update query per tracking request)
  
• Don’t load review logos if they are not shown
  
• Unwanted date filter automatically added to Live.getLastVisitsDetails
  
• Initiate range archiving if an archive is invalidated, the request is from the browser, and browser archiving is authorized
  
• Exporting “Visitor Profile” data results in “Your session has expired due to inactivity. Please log in to continue.”
  
• Re-allow tracking bots
  
• Allow invalidating empty site
  
• Improve no data tracked yet please set up tracking code screen
  
• When a period has no data, but raw data, show a message
  
• In “Help” screen, show first the section “How can we help?”
  
• the “Compare to” button design has slightly regressed on firefox only
  
• icon for informational system check
  
• better systemcheck error boxes
  
• replace generate:plugin warning with pointer to guide
  
• When showing the Export URL, clarify that users must use their app token (instead of displaying a token_auth that only works in their session)
  
• rename testcookie to make it clear it is created by Matomo
  
• Don’t allow enforcing 2FA unless the superuser has set it up already
  
• French Guiana shows up as France in maps and reports
  
• France regions are not up-to-date
  
• Ask users to refer us to other friends
  
• Translation missed on “Create a new user”
  
• Improve configuration of rearchive_reports_in_past_last_n_months setting
  
• more markdown friendly system checks
  
• Run Javascript tests with node/puppeteer as well as Phantomjs
  
• Add date period to segment archive queries
  
• Avoid double HTML entities / special characters encoding
  
• Hide Unique Visitors from email reports when the metric is not activated for this period
  
• Site Search hover help bug
  
• core/Cookie.php:Cookie->delete() don’t set secure and SameSite.
  
• Prevent new username from using existing user email address
  
• Matomo comparing month report with same month when clicking on the last day of the month
  
• fatal error: Modulo by zero: method=imageGraph while widht = 0
  
• CSV reports can fail because HTTP Content-Disposition header has invalid characters in the filename field
  
• trackPageView still sends page performance report after disablePerformanceTracking
  
• archiving: look for all usable done flag types when checking for existing child periods
  
• Widgetize request with token_auth param fails if superuser session exists
  
• Installer starts over after asking super user details
  
• Ensure correct no access message is shown
  
• work around group_concat max len being too small in ArchiveSelector.getArchiveIds
  
• Our work process when changing or removing a public API from the Matomo platform
  
• Making it easier to know when a code review is required
  
• Developer Changelog and documenting changes in the Matomo Platform
  
• In core:invalidate-report-data match segments by ID, name or definition …
  
• Add informational diagnostic for archive invalidations table.
  
• Use https for urls in visitor details if host is defined with https in site
  
• Do not append performance metrics to page view log if performance tracking disabled
  
• Fix Marketplace falsely thinks a plugin is installed when it is not
  
• remove dangling invalidation check (no longer needed)
  
• Prevent possible warning during GeoIP2 update if providers aren’t initialised
  
• remove deletion of old archives in CronArchive since we do this in ArchiveWriter, and it is buggy here
  
• Make sure not to clear the tracker cache so often when invalidating in core:archive
  
• Allow configuring segments to not be rearchived when rearchiving reports in the past.
  
• Add –skip-cache-clear option to core:update command …
  
• allow forcing Archive to not initiate archiving for child archives
  
• Add extra core:archive log for initiation of logging
  
• Add event tags to top and bottom of body
  
• Require password confirmation for more plugin operations.
  
• Ensure login allow list is not checked for authenticated tracking requests
  
• check for openssl extension
  
• Warning in 2fa setting: gmdate() expects parameter 2 to be int
  
• Apache 2.4+ compatibility for misc/cron/.htaccess
  
• Use ranking query in custom dimensions archiver
  
• Disallow enable 2FA requirement when user doesn’t have 2FA enabled
  
• fix ScheduledReports.sendReport API
  
• Do not allow setting partial archives to DONE_INVALIDATED
  
• [automatic submodule updates]
  
• INI process_new_segments_from: allow processing segments X days before last edit day
  
• Workaround error in Overlay when site has no URLs
  
• Add get-segment-sql development command for debugging
  
• Add comment about using shop@innocraft.com for premium features
  
• Add diagnostic that checks if server directories that should be private are accessible
  
• no links in copy-paste system check
  
• Do not confuse normal rows with the label “-1” w/ the summary row
  
• require password confirmation when resetting 2fa
  
• add new ini config to enable/disable the php profiler feature
  
• Add option to skip log purging check when invalidating archives in the rare cases it is needed.
  
• more neutral wording and other style improvements
  
• If no archives names are requested when querying archive data, do not initiate archiving.
  
• Make sure summary row subtables are included in the serialized representaion of a datatable tree.
  
• iOS/macOS apps not detected correctly
  
• Adds detection for Lumin OS and Helio browser
  
• Adds detection for DVKBuntu operating system
  
• Detect new brands: Seatel, 3GNET, IT, Jiake, Malata, Ditecma, Datamini, Newsday and Detect devices for existing brands: Leotec, Navon, Evolveo, Cherry Mobile, iPro, Odys, Iris, Maxwest, iTel
  
• Detect new brands: iQ&T, Pixela, Datalogic, Navitel, Naomi Phone, Mantra, Maximus, Navcity, Linnex and Detect devices for existing brands: Inco, MicroMax, IMO Mobile, Blu, Kzen, Cherry Mobile, Altron, Evercoss, Leagoo, Leader Phone, Lava
  
• Fixes detection for Aloha browser
  
• Detect library: Embarcadero URI Client and app: Rucket Chat and bots: Ryowl, Sputnik Favicon Bot, Sputnik Image Bot, Hatena Favicon
  
• Detect new brands: Suzuki, Nabi, Gresso, G-Touch, FaRao Pro, StrawBerry, Smartab, Subor, SuperTab, Pendoo, Engel and Detect devices for existing brands: Sugar, TrekStor, Ghia, Lenovo, Freetel, Lark, Zidoo, Sony, Siragon, SPC, Karbonn, Bitel, Cloudfone, Navon, Ritmix, Starlight, Zuum, Blu, Dune HD, Philco
  
• Detect new brands: Genesis, InfoKit, Bllocm, Huskee, SKG, SOLE, SOLO, OINOM and Detect devices for existing brands: Xiaomi, Beelink, Meizu, NOA, HTC, Azumi, Motorola, iRulu, Multilaser, Hotwav, Condor, ProScan, Philco, iBall, Q-Touch, QMobile, Kempler & Strauss, Danew, Qilive, Solone, Accent, True, Chuwi
  
• Detect new brand INCAR
  
• Detect apps: Pandora, NPR One, Wirtschafts Woche, Microsoft Outlook, TVirl, ChMate, 2tch, Ciisaa, BB2C, twinkle, JaneStyle, JaneView, BathyScaphe, Live5ch
  
• Detect new brands: Singtech, Maze Speed, Sunny, True Slim, OASYS, TEENO, v-mobile, Aspera, Vision Touch, NOBUX, Hitech and Detect devices for existing brands: MSI, Siragon, FireFly, Blu, SFR, Starmobile, Starlight, iBrit, Sico, Casper, Lenovo, Maxwest, STF Mobile, Karbonn, Evercoss, ZTE, Sky, Alba, Azumi, Hisense, Inco, Lava, Alcatel, öwn, Videocon, EXO, Forstar, iBall, Wink
  
• Detect lib: Mikrotik Fetch and Detect bots: Odnoklassniki Bot, Mediatoolkit Bot, ZoominfoBot, WeViKaBot, SEOkicks, Plukkie, Comscore
  
• Add detect bots: SurdotlyBot, Gowikibot, SabsimBot, LumtelBot, PiplBot, WooRank
  
• Detect new brand: F150 and Detect devices for existing brands: Archos, OnePlus, Alcatel, POCO, Oppo, BQ, Doogee, Samsung, Huawei, Vivo, Xiaomi, CUBOT, Blackview, Realme, General Mobile, Teclast
  
• feat(bots): Detects AppSignal bot
  
• Missing LG WebOS SmartTV
  
• Detect version webos and detect brand LG
  
• Detect devices for existing brands: Xiaomi, TCL, Alcatel, Hisense, Huawei, Digma, Irbis, Cricket, Hyundai, Apple, Lenovo, AT&T, LG, Motorola, Kyocera, Lanix, OnePlus, iPro, Dell, Zuum, Polaroid, CHIA and Detect library Akka HTTP
  
• Adds detection for GRequests library and fix PHPCS
  
• Detect new brands: BilimLand and Detect devices for existing brands: Motorola, TCL, AllDocube, Highscreen, Tecno Mobile, Huawei, 3Q, Meizu, Xiaomi, Microsoft, Realme, Black Fox, POCO, BQ, Telefunken, Fly, DEXP, Digma, Oukitel, Explay, Torex, Chuwi, Ulefone, Doogee, iTel, Allview, Advan, Gionee
  
• Detect browser OceanHero
  
• Detect new brands: GFive, Greentel, Kyowon, LT, ONYX BOOX, Topway, MAC AUDIO, BrightSign and Detect devices for existing brands: Alcatel, Asus, Samsung, POCO, Realme, Xiaomi, OnePlus, Sony, Allwinner, ZTE, TCL, Vivo, Huawei, Artel, HP, Blu, CUBOT, Ravoz, LG, T-Mobile, Lava, iBall, Touchmate, Mito, Karbonn, Tecno Mobile, QMobile, Videocon, Essentielb, Mobiistar, Yes, LG, Yezz, Logic, Kyocera
  
• Device BookReader. What type of device should I specify in the definition?
  
• Improves detect desktop and detect devices for brand: Dell
  
• Adds detection bot Yahoo! Mail Proxy
  
• Improved version detection for Midori Browser
  
• Detect new brands: KINGZONE, Fourel, M-Tech, Fantec, 2F Mobile, AURIS, YUHO and Detect devices for existing brands: Meizu, Microsoft, HP, Twoe, Huawei, Konrow, Acer, Centric, Asus, Dell, Xolo, InFocus, iBall, IKU Mobile, Venso, DEXP, IUNI, Keneksi, Medion, Advan, Contixo, Iris, Digma, Ziox, HTC, Leagoo, Oysters, Oukitel, Beelink, QMobile, Energy Sistem, Artel, MyPhone, Vivax, Xiaomi, Cherry Mobile, Krüger&Matz, Blaupunkt, GOCLEVER, S-TELL, Qumo, Karbonn, Condor, Torex, Savio, Yu
  
• Adds detection for Binance mobile app
  
• Using special characters in variable name results in errors in trigger configuration
  
• Changing MTM Container Name or Description leads to HTTP 414 URI Too Long when many container versions
  
• Improve gzip detection (or allow override) for rotated files
  
• Remove colons from timezone
  
• Add doreenblog.online
  
• Add vanessablog.online
  
• Add wandamary.online
  
• Add eets.net
  
• write multi dim array to valid ini
  
• apply more encoding w/ tests