matomo-org / matomo-org/plugin-TrackingSpamPrevention
When max actions feature enabled and limit reached, delete the current visit
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 18
- Forks
- 10
- Avg merge
- 20h 11m
- Merged PRs (30d)
- 1
Description
Say someone configures max 100 actions per visit to be allowed, and the current visit reached > 100 actions, then we block this IP for future tracking requests for up to 24 hours.
We could also directly delete this visit (and potentially delete all visits from that IP from the same day). It be easy to develop but not doing it for now as you could misuse it potentially to delete visits if eg HTTP headers are used to detect IP etc. It may be fine though maybe when no proxy headers are used or so.
Depending how often this happens could also include a link in the email to the visitor profile or so and then user could decide to delete that visit once this feature is available. Requires manual work though.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or entry points are named. Clarify whether the change should delete only the current visit or all visits from the IP, and how proxy headers and user confirmation should affect the behavior. Define the approved deletion scope and safety conditions before implementation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100