Updated documentation.

diff --git a/docs/awstats_security.html b/docs/awstats_security.html
index 2e42536d2b1195a3dde58dc5bc7267191a7b1df7..fae1145cef03345895151622bfc7c94cf9e665ae 100644 (file)
--- a/docs/awstats_security.html
+++ b/docs/awstats_security.html
@@ -40,7 +40,7 @@ statistics of user yyy (having a site www.yyy.com).<br>
 This is example of possible way of working:<br>
 <br><br>
 
-<br><a name="1"><H2 style="font: 22px Times; color: #606060"><u>1) VERY HIGHLY SECURED POLICY</u></H2></a><br>
+<br><a name="1"><H2 style="font: 22px Times; color: #606060"><u>1) HIGHLY SECURED POLICY</u></H2></a><br>
 <font color=blue><b>Policy</b></font>:<br>
 You have several different config/domains owned by different users and you want to build statistics for each
 of them. You don't need that your customer have "real-time" statistics.<br>
@@ -61,6 +61,7 @@ If AWStats database files for config/domain1 are read protected, only allowed us
 If AWStats database files for config/domain1 are write protected, only allowed users can update statistics for config/domain1.<br>
 <br><br>
 
+<!--
 <br><a name="2"><H2 style="font: 22px Times; color: #606060"><u>2) HIGHLY SECURED POLICY</u></H2></a><br>
 <font color=blue><b>Policy</b></font>:<br>
 You have several different domains owned by different users and you want each owner of a domain
@@ -73,7 +74,7 @@ be made (if allowed) on-line.<br>
 No way to have 2 configurations files for 1 particular domain.<br>
 <font color=blue><b>How</b></font>:<br>
 First, AWStats must be placed in its own cgi-bin-awstats directory with no way for users to
-put in it a hacked version of AWStats (a not writable directory).<br>
+put in it a hacked version of AWStats (an unwritable directory).<br>
 Then, you must add an environment variable called <b>AWSTATS_CONFIG</b> in the web server environment
 for each domain to say which config file to use for a particular domain.<br>
 <u>With Apache web server, you must use the '<i>SetEnv</i>' directive. This is an example:</u><br><i>
@@ -89,8 +90,9 @@ When using AWStats as a CGI with the following URL '<i>http://mydomain.com/cgi-b
 will use the config file called <i>awstats.myconfigvalueformydomain.conf</i> to choose which statistics used,
 even if a visitor try to force the config/domain file with the URL '<i>http://mydomain.com/cgi-bin-awstats/awstats.pl?config=xxx</i>'.<br>
 <br><br>
+-->
 
-<br><a name="3"><H2 style="font: 22px Times; color: #606060"><u>3) MEDIUM SECURED POLICY</u></H2></a><br>
+<br><a name="2"><H2 style="font: 22px Times; color: #606060"><u>2) MEDIUM SECURED POLICY</u></H2></a><br>
 <font color=blue><b>Policy</b></font>:<br>
 You have several config/domain and several users. You want to specify which user can see or update dynamically
 statistics for each config/domain.<br>
@@ -117,7 +119,7 @@ Then edit each config/domain file you want to be protected to set <b>AllowAccess
 You can also edit list of authorized users in the <b>AllowAccessFromWebToFollowingAuthenticatedUsers</b> parameter.<br>
 <br><br>
 
-<br><a name="4"><H2 style="font: 22px Times; color: #606060"><u>4) NO SECURITY POLICY</u></H2></a><br>
+<br><a name="3"><H2 style="font: 22px Times; color: #606060"><u>3) NO SECURITY POLICY</u></H2></a><br>
 <font color=blue><b>Policy</b></font>:<br>
 You have only one hosts or several hosts or users but you don't need to manage particular permissions
 for your different config/domain statistics.<br>
@@ -129,6 +131,12 @@ config/domain name and the url syntax to see stats of a particular config/domain
 <font color=blue><b>How</b></font>:<br>
 No particular things to do.<br>
 <br>
+<br>
+<br>
+
+There is a lot of possible use for AWStats combining all its options/parameter with all web servers options/parameters.
+Just use the one you need...<br>
+<br>
 
 
 <br>

diff --git a/wwwroot/cgi-bin/awstats.model.conf b/wwwroot/cgi-bin/awstats.model.conf
index 9d9eb1f9645e34700ea33967ba9f24600e9ac948..3cf5d6c8b1acab7a7e45b83ecbd71893e859e215 100644 (file)
--- a/wwwroot/cgi-bin/awstats.model.conf
+++ b/wwwroot/cgi-bin/awstats.model.conf
@@ -175,6 +175,7 @@ AllowAccessFromWebToAuthenticatedUsersOnly=0
 # statistics for this domain/config file. This parameter is used only if
 # AllowAccessToAuthenticatedUsersOnly is set to 1.
 # Example: "user1 user2"
+# Example: "__REMOTE_USER__"
 # Default: ""
 #
 AllowAccessFromWebToFollowingAuthenticatedUsers=""