Matomo 4.2.0 - Analytics Platform

We are proud to announce Matomo 4.2.0: a new release of Matomo Analytics.

What’s new?

This release focuses on stability and reliability and security.

A new ? (question mark) icon is now visible next to report names in the left menu. Clicking on this icon will display a helpful text explaining « Why » this particular report is useful.

A major security issue (but not critical) has already been fixed (see details below).

Several bugs and regressions were also fixed.

We are grateful for all community members who reported feedback and suggestions, our awesome team of translators for their work, and our Premium features customers and Matomo Cloud hosting customers for their amazing support.

137 tickets have been closed by more than 16 contributors!

After You Update

Please help us spread the word! Maybe you can write about the project on your blog, website, twitter, talk at conferences or let your friends and colleagues know what is Matomo. Already 1,000,000+ websites are keeping full control of their web analytics with Matomo!
Use the forums if you have any question or feedback (free support),
or purchase a Support Plan to get professional support and guidance.
To improve Matomo in your language consider contributing to translations.
You can also support our efforts by purchasing valuable Premium Features for Matomo or try our Matomo Cloud solution.

Security release

This is a minor security release.

We fixed an issue where a Super User (and only a Super User) may have been able to get a remote code execution on the Matomo server. Since this was only exploitable by Super Users (who are considered trusted), we consider it a minor issue.

It is also recommended to follow best practises in the guide: « How to configure Matomo for security ».

This issue was responsibly disclosed to our Security team. Our security bug bounty program welcomes & rewards researchers who discover and responsibly report to us any security issues found in Matomo or any of the plugins created by Matomo/InnoCraft.

Database upgrade

This release does not contain any major database upgrade.

Platform Changes

Matomo is an open analytics platform. In an effort to help Matomo developers learn about improvements and changes in the core APIs, we document the changes since the last release.

In this 4.2.0 release there is a new INI setting. Read more in Platform Changelog for Developers to see all changes to the platform and APIs.

Note: the Marketplace showcases more than 90 plugins already compatible with Matomo and this is just the beginning. Matomo is your universal data analytics platform!

New and updated SDKs (Tracking API Clients)

The Matomo team offers official SDKs (Tracking API Clients) for measuring your mobile apps and any other kind of apps.

iOS SDK [by @brototyp]
Android SDK [by @d4rken]

New and updated guides and FAQs

New:

New plugins

By third party developers:

SMS 77

List of 137 tickets closed in Matomo 4.2.0

matomo-org/matomo

#13716 Show a message in each most valuable pages in Matomo to explain why it’s important [by @diosmosis]
#17159 Tracking requests might not be loaded because of CORB [by @sgiehl]
#17102 PerformanceTiming API used by Matomo is deprecated, use PerformanceNavigationTiming if available [by @sgiehl]
#17079 Editing Users screen is partially broken [by @diosmosis]
#9947 Open Row Evolution icon invisible on mobile screens < 617 px
#17183 What happens when a user denies consent and grants it later in the same session?
#17223 Create new Dashboard popup does not show radio button to select options (empty, default) [by @sgiehl]
#17097 Limit GeoIP downloads to certain hosts only [by @sgiehl, @diosmosis]
#17213 Don’t deactivate a core plugin during update [by @tsteur, @diosmosis]
#17029 properly encode segment definitions from table so the hash will be the same as from query params [by @diosmosis]
#17077 Anonymous user settings not working after v4 upgrade [by @sgiehl]
#17095 Widget is showing wrong data from yesterday instead of today [by @sgiehl]
#17099 Real-Time Map description switches to « There is no data for this report. » [by @sgiehl]
#17123 Graph of returning visitors doesn’t show returning visitors [by @diosmosis]
#17148 use Rules method instead of getting stored segments directly to pre-archive extra segments [by @diosmosis]
#17217 Fix jquery location in page overlay [by @sgiehl, @diosmosis]
#17236 Fix force-report parameter for core:archive [by @sgiehl, @diosmosis]
#16789 If only one website exists, remove the site selector from reporting page [by @sgiehl]
#10881 Error page served with HTTP 200 status
#16918 Call to a member function getDateStart() on boolean DataTable/Renderer/Rss.php [by @sgiehl]
#17023 Starting with php 7.3 on windows OS the geoip2php Update procedure is not working anymore. [by @sgiehl]
#17106 enable_auto_update=0 doesn’t remove update check in the UI
#17127 Custom tracking timestamp should return an integer to prevent HTTP 500 tracking error [by @tsteur, @diosmosis]
#17136 Error in console when trying to communicate with service worker in Firefox with persistant cookies disabled [by @tsteur]
#17152 SMS evolution metrics might be formatted incorrectly on PHP 8 [by @sgiehl, @diosmosis]
#17153 Tracking requests on PHP 8 might fail if an invalid encoding is sent [by @sgiehl, @diosmosis]
#17171 Issues on map naming
#17192 Include report column in duplicate check when inserting archive invalidations. [by @diosmosis]
#17205 CustomLogo upload not working with PHP8 [by @gecon, @sgiehl]
#17212 Error when using comparison feature: Argument 4 passed to Piwik\\Plugins\\API\\Filter\\DataComparisonFilter\\ComparisonRowGenerator::compareTable() must be an instance of Piwik\\DataTable or null, bool given [by @sgiehl]
#17215 Archiver: do not create done flags like « done. » [by @diosmosis]
#17216 fix a couple bugs in archive querying when browser archiving is disabled [by @diosmosis]
#17218 Fix warning when memory_limit = -1 [by @okom3pom, @sgiehl]
#17103 [automatic translation update] Updated 440 strings in 48 languages (ru de eu et es da ka pt-br el ro ko bg be zh-cn pt cs vi id is ca pl ja it ar uk nn nl nb hr es-ar hu hi he am fr sk sl zh-tw tr tl lt lv fa th sq sr fi sv) [by @github-actions[bot], @sgiehl]
#17137 [automatic translation update] Updated 433 strings in 10 languages (de es zh-cn cs it nl fr zh-tw tr sq) [by @github-actions[bot], @sgiehl]
#17166 [automatic translation update] Updated 2 strings in 1 languages (de) [by @github-actions[bot], @sgiehl]
#17197 [automatic translation update] Updated 33 strings in 2 languages (zh-cn sv) [by @github-actions[bot], @sgiehl]
#17220 [automatic translation update] Updated 406 strings in 48 languages (ru de et es da eo pt-br el ro ko cy bg be zh-cn pt cs vi id bs ca pl ja it ar uk nn nl nb hr es-ar hu hi he fr sk sl zh-tw tr tl lt lv fa th sq sr fi ta sv) [by @github-actions[bot], @sgiehl]
#17239 [automatic translation update] Updated 509 strings in 8 languages (el zh-cn it uk nl tr sq sv) [by @github-actions[bot], @sgiehl]
#17187 Creates issue templates [by @sgiehl, @tsteur]
#16755 Introduce PHP CS to improve code quality [by @sgiehl]
#16991 core:archive command new parameter –force-report to only process invalidations for a specific report in a specific plugin. [by @diosmosis]
#17005 Refactor segment re-archiving in past behavior to be on demand [by @diosmosis]
#17062 Display help icons for categories/subcategories [by @diosmosis]
#17101 allow multiple calls to enableLinkTracking [by @Findus23, @tsteur]
#17115 Display the name of the user being edited [by @luggesexe, @diosmosis]
#17121 Improve compatibility with jQuery 3 [by @tsteur, @sgiehl]
#17132 Add more information to system check information [by @tsteur, @diosmosis]
#17161 Graphical bug when viewing drop down menu for users permissions
#17172 fix map names in Switzerland [by @Findus23, @diosmosis]
#17185 archiving job runs forever due to MultiChannelConversionAttribution
#17206 dieWithHtmlErrorPage() should default to http 500 [by @andyjdavis, @diosmosis]
#17214 Update SECURITY.md – Security Bug Bounty Program description [by @mattab, @diosmosis]
#17226 Update .gitignore to exclude misc/user/.htaccess [by @flamisz, @diosmosis]
#17228 Allow nonce checks to provide custom required referrer URL. [by @diosmosis]
#17233 Prevent possible error when accessing an index [by @tsteur, @diosmosis]

matomo-org/referrer-spam-list

#1252 Add maofengjx.com [by @ericguirbal, @spmedia]
#1253 Add 0-0.fr [by @ericguirbal, @spmedia]
#1254 Add semxiu.com [by @ericguirbal, @spmedia]
#1255 Add bavsac.com [by @ericguirbal, @spmedia]
#1256 Add rrutw.com [by @ericguirbal, @spmedia]
#1257 added bottraffic.live [by @apptaro, @spmedia]
#1258 added bot-traffic.icu [by @apptaro, @spmedia]
#1259 added bot-traffic.xyz & trafficbot.life [by @virtualize, @spmedia]

matomo-org/matomo-log-analytics

#244 Added new command line option ‘–php-binary’ [by @domsson, @diosmosis]
#306 Error query: Mysqli statement execute error : Out of range value for column ‘time_transfer’ at row 1 In query

matomo-org/tag-manager

#290 Preview does not work when # is in the URL
#295 Prevent possible circular reference in preview mode in addDebugValues [by @nova-os, @tsteur]
#301 Typo in tracking type [by @tsteur]
#287 Add consent methods to Matomo Tag Manager [by @tsteur, @diosmosis]
#293 Detect when variable references itself [by @tsteur, @diosmosis]
#296 Minify tag manager JS [by @tsteur]

matomo-org/device-detector

#6467 Adds detection for Flow browser engine and for Flow browser [by @liviuconcioiu, @sgiehl]
#6575 Detect new brands: CG Mobile, OKWU, ZH&K, IUNI and Detect devices for existing brands: Hotwav, Oukitel, Cherry Mobile, VGO TEL, NUU Mobile, Mito, Avvio, Senwa, QMobile, Ordissimo, Leagoo, Logicom, Explay, Logicom, LAIQ, NEC, Lanix, JVC, Doogee, Vivax, Mediacom [by @sanchezzzhak, @sgiehl]
#6578 Detect new brands: AfriOne, Connex, Einstein, Cell-C, Myros, Connectce, Clementoni, Necnot, Ruio, Eagle, Invens, VC and Detect devices for existing brands: Allwinner, Alcatel, Highscreen, Multilaser, Sky, Navon, Onda, Overmax, Q-Touch, Qilive, Q.Bell, Symphony, Fero, MyPhone, Mobicel, Changhong, CG Mobile, Casper, FiGO, Digma [by @sanchezzzhak, @sgiehl]
#6579 Detect new brands: IKI Mobile, Bellphone, Camfone, CellAllure, Chico Mobile, Claresta, Gini, MIVO, EXCEED and Detect devices for existing brands: Advance, Accent, Amoi, Digma, Hurricane, Colors, Vivax, ConCorde, Clarmin, Sico, CUBOT, Navon, Voyo, MyPhone, Sony, iTel, Chuwi, Lumus, Mpman, SWISSMOBILITY, Walton, Reeder [by @sanchezzzhak, @sgiehl]
#6580 Detect new brands: EWIS, Cavion, Leader Phone, GLX, WE, Hyve, Seeken, Jivi and Detect devices for existing brands: Sharp, Fujitsu, LG, Kyocera, AMGOO, Extrem, Polytron, Azumi Mobile, Karbonn, Denver, FireFly Mobile, Vonino, Xtouch [by @sanchezzzhak, @sgiehl]
#6582 Improves detection for Samsung devices [by @liviuconcioiu, @sgiehl]
#6586 Adds detection for Mageia operating system [by @liviuconcioiu, @sanchezzzhak]
#6588 Improves x64 platform detection [by @liviuconcioiu, @sanchezzzhak]
#6589 Adds detection for Zetakey browser [by @liviuconcioiu, @sanchezzzhak]
#6590 Improves detection for Oregano browser [by @liviuconcioiu, @sanchezzzhak]
#6591 Adds detection for AwoX browser [by @liviuconcioiu, @sanchezzzhak]
#6592 Improves iOS version detection and adds detection for Facebook Messeneger Lite [by @liviuconcioiu, @sanchezzzhak]
#6593 Adds detection for Phantom Browser [by @liviuconcioiu, @sanchezzzhak]
#6594 Adds detection for MacBook Air, MacBook Pro devices [by @liviuconcioiu, @sanchezzzhak]
#6595 Adds detection for Perfect Browser [by @liviuconcioiu, @sanchezzzhak]
#6596 Adds detection for Fenix operating system and Biyubi browser [by @liviuconcioiu, @sanchezzzhak]
#6597 Wrong regex for « Pingdom » agent
#6599 Improved detection Pingdom Bot [by @sanchezzzhak, @sgiehl]
#6600 Detect new brands: Innos, Trio, Winnovo and Detect devices for existing brands: LG, Lumus, Allview, Lenovo, Kodak, Klipad, Teclast, Hometech, iBall, RCA Tablets, Condor, Concord, Xiaomi, Soyes, Samsung, iPro, Lava, Motorola, Essentielb, Doogee, Chico Mobile [by @sanchezzzhak, @sgiehl]
#6601 Update README.md [by @github-actions[bot], @sgiehl]
#6605 Adds detection for xStand browser [by @liviuconcioiu, @sanchezzzhak]
#6606 Detect new brands: Beyond, Centric, CHIA, Seuic, TWZ, Kata and Detect devices for existing brands: Asus, ZTE, CG Mobile, Blu, Blaupunkt, Primux, Starmobile, LG, Sky, Energizer, Geotel, Intex, iLife. iBall, Casper, Inoi, Lava, iVooMi, Thomson, FORME, Advance, IKI Mobile, i-Cherry, Cavion, Camfone, Centric, Accent, Owwo, Hotwav, Digma [by @sanchezzzhak, @sgiehl]
#6608 Adds detection for QQ Browser Lite browser [by @liviuconcioiu, @sanchezzzhak]
#6609 Adds detection for UC Browser HD browser [by @liviuconcioiu, @sanchezzzhak]
#6610 Improves detection for Maxthon browser [by @liviuconcioiu, @sanchezzzhak]
#6613 Detect browsers: SP Browser, Opera Mini iOS and Detect apps: TikTok, RoboForm, Naver, Papers, Pinterest, Copied, Pic Collage, Slack [by @sanchezzzhak, @sgiehl]
#6617 Adds detection for Caixa Mágica operating system [by @liviuconcioiu, @sgiehl]
#6619 Does not work on IPad 5,3
#6620 Detect devices for exist brands: Zuum, Onix, Siemens, CHIA [by @sanchezzzhak, @sgiehl]
#6621 Adds detection for Acteck, EKT, S-TELL, Wintouch and improves detection for Datawind, ECS, Haier, MyPhone, ONN, RIM/BlackBerry [by @liviuconcioiu, @sanchezzzhak]
#6623 Adds detection for various mobile apps and improves detection for iOS [by @liviuconcioiu, @sanchezzzhak]
#6625 Adds detection for Orca browser [by @liviuconcioiu, @sanchezzzhak]
#6628 Improves detection for iPad and Macbook Pro [by @liviuconcioiu, @sanchezzzhak]
#6631 Adds detection for CORN, Cosmote, Gol Mobile, MDC Store, Spark and improves detection for Advance, Blu, Colors, Hisense, Huawei, iHunt, Kalley, Kempler & Strauss, KRONO, OnePlus, Siragon, Sonim, STF Mobile, Vivo, Zuum [by @liviuconcioiu, @sanchezzzhak]
#6632 Adds detection for Cornowser browser [by @liviuconcioiu, @sanchezzzhak]
#6633 Added SONOS to Mediaplayers [by @chrecht, @sgiehl]
#6634 Matomo Tracking Edge accesses as Chrome [by @Findus23]
#6635 Improves detection for Samsung and ZTE [by @liviuconcioiu, @sanchezzzhak]
#6638 Improved OS/Devices detect for Sonos client and detect new brand: Sonos [by @sanchezzzhak, @sgiehl]
#6639 Improves detection for Samsung [by @liviuconcioiu, @sgiehl]
#6640 Correct a few text issues [by @liviuconcioiu, @sgiehl]
#6642 Improves detection for Super Fast Browser [by @liviuconcioiu, @sanchezzzhak]
#6643 Adds detection for Venus Browser [by @liviuconcioiu, @sanchezzzhak]
#6644 Adds detection for GinxDroid Browser [by @liviuconcioiu, @sanchezzzhak]
#6645 Improves detection for Baidu Browser [by @liviuconcioiu, @sgiehl]
#6646 Adds detection for DeskBrowse [by @liviuconcioiu, @sanchezzzhak]
#6648 Adds detection for CGN mobile app [by @liviuconcioiu, @sanchezzzhak]
#6649 Adds detection for Avira Scout browser [by @liviuconcioiu, @sanchezzzhak]
#6650 Adds detection for Dot Browser [by @liviuconcioiu, @sanchezzzhak]
#6651 Improves detection for Yandex Browser [by @liviuconcioiu, @sgiehl]
#6652 Improves detection for Otter browser [by @liviuconcioiu, @sanchezzzhak]
#6653 Improves detection for Deepin operating system [by @liviuconcioiu, @sgiehl]
#6654 Adds detection for Thunder app [by @liviuconcioiu, @sgiehl]
#6657 Adds detection for Smooz browser [by @liviuconcioiu, @sanchezzzhak]
#6660 Adds detection for GridOS [by @liviuconcioiu, @sanchezzzhak]
#6661 Improves detection for Briskbard browser [by @liviuconcioiu, @sanchezzzhak]
#6663 Improves detection for Jio Browser [by @liviuconcioiu, @sanchezzzhak]
#6664 Adds detection for Craving Explorer browser [by @liviuconcioiu, @sanchezzzhak]
#6667 Adds detection for PCLinuxOS [by @liviuconcioiu, @sanchezzzhak]
#6668 Improves detection for Coc Coc browser [by @liviuconcioiu, @sanchezzzhak]
#6669 Adds detection for PolyBrowser [by @liviuconcioiu, @sanchezzzhak]
#6670 Adds detection for Lolifox browser [by @liviuconcioiu, @sgiehl]
#6672 Adds detection for Flast browser [by @liviuconcioiu, @sanchezzzhak]
#6673 Improves detection for qutebrowser [by @liviuconcioiu, @sanchezzzhak]

matomo-org/component-cache

#29 Updates composer dependencies [by @sgiehl, @diosmosis]

We are together creating the best open analytics platform in the world. You can help make Matomo even more awesome by getting involved in Matomo!