no GDPR compliant IP storage about wp-statistics HOT 5 CLOSED

Hi @DanielRuf,

Have you an alternative the functions?

from wp-statistics.

https://www.php.net/manual/en/function.sha1.php
https://www.php.net/manual/en/function.hash.php
use sha256...

from wp-statistics.

sha256 can be used but requires bigger fields. What do we have from hashing the IP and useragent? In general the useragent will be frozen in the near future and there may be cases when different users in the same building have the same IP and useragent (for example at work).

Serverside sessions can be used too.
At least ip + useragent is not a unique enough identifier.

NinjaFirewall for example removes the last 3 characters and replaces each of them with a x.

from wp-statistics.

Then shorten them, and allow to shorten them to /24 and /16 (so 123.231.222.xxx or 123.231.xxx.xxx) and be done with it. I think the redirection plugin does that too. See https://redirection.me/support/privacy-gdpr/ and https://redirection.me/support/options/ ... he just masks the last octet.
I would do that and close this issue. Or make the field bigger, shouldn't be that much more IP address data... 30% or so?

from wp-statistics.

Exactly. IPv6 notation is normally not that long as parts can be compressed with ::.

from wp-statistics.