Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use pre-existing session ID to track users #3195

Closed
anonymous-matomo-user opened this issue Jun 5, 2012 · 5 comments
Closed

Use pre-existing session ID to track users #3195

anonymous-matomo-user opened this issue Jun 5, 2012 · 5 comments
Labels
Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it.

Comments

@anonymous-matomo-user
Copy link

With the new cookie laws in the EU, it's getting a lot harder to track users. There have been changes already, but what I'm proposing will effectively make sure piwik can almost always be used.

One of the parts of the new law is that so called essential cookies don't need permission. Every site with a login system will be able to use a session cookie, since it's essential to the functionality of the site. If piwik were to use that session cookie, it wouldn't need to set its own. At the moment multiple cookies are set, but having something is a lot better than nothing. Of course people can still opt out.

I don't know if this is even possible, but it would be a big plus for piwik.
@mattab
Copy link
Member

mattab commented Jun 6, 2012

Sorry I didn't understand the idea of using session cookie to replace piwik cookies?

@julienmoumne
Copy link
Member

If I understand well, the idea is to use http://en.wikipedia.org/wiki/Session_ID.

However, session IDs have short TTL and/or are invalidated and therefore do not span visits.

Please elaborate if you think we are missing something.

@anonymous-matomo-user
Copy link
Author

Replying to JulienM:

If I understand well, the idea is to use http://en.wikipedia.org/wiki/Session_ID.

Correct

However, session IDs have short TTL and/or are invalidated and therefore do not span visits.

The system you are running has control over how long the cookie lives and whether or not you invalidate the ID. With PHP the lifetime is set to 0 by default, which means it's valid for the session. But you can change that to something else.

@julienmoumne
Copy link
Member

I do not think many users would go down that road as increasing lifetime of session cookies is insecure.

Should this ticket become a feature request ?

@anonymous-matomo-user
Copy link
Author

It was filed as one.

Do whatever you want, it was just an idea :)

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc. wontfix If you can reproduce this issue, please reopen the issue or create a new one describing it.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@mattab @julienmoumne @anonymous-matomo-user