How does google-analytics guarantees that the tracking record is coming from the real site
Posted
by tuler
on Stack Overflow
See other posts from Stack Overflow
or by tuler
Published on 2010-04-22T10:51:01Z
Indexed on
2010/04/22
10:53 UTC
Read the original article
Hit count: 213
google-analytics
|google-analytics-api
When you sign up to google analytics it instructs you to use a javascript snippet on every page you want to track. This code includes an API key, which is visible to everyone who views your source code.
How does it guarantees that the request is coming from the real site, and not from a third-party who wants to mess with your statistics? Does it check the HTTP Referer header? Even that is not safe, as it can be forged.
© Stack Overflow or respective owner