Re: WOStats -- How to block

[Tomi Engel <tomi@objectfarm.org>]

Hi,

Aspinall, David wrote
>whole world to connect to my Monitor and get my stats.  Is there an  
easy was

...the Monitor does not hand out the WOStats...you app does. You  
should really protect your Monitor (fireWall and all)

David Neuman worte
>statisticsStore().setPassword("foobar");

we use an IP based approach. If a request comes from a privileged IP  
we will show the WOStats and otherwise the entry page. The WO stats  
page is not so much of a "security hole" so this is secure enough in  
most cases. But if you like you can combine the password and IP  
approach.

Aloha
	Tomi