WordPress.org

Ready to get started?Download WordPress

Forums

WordPress SEO by Yoast
Is WordPress SEO spying on us all? (2 posts)

  1. Phill Brown
    Member
    Posted 1 year ago #

    Having conducted tests on several websites and server environments, it looks like WordPress SEO is tracking private data regardless of whether we want it to or not.

    The allow tracking field in General Setting controls whether we want to send data to Yoast, and by default this is unchecked. Instead it appears that the yoast_tracking action is being scheduled every time the plugin loaded.

    This is giving Yoast access to:

    • Site URLs and names regardless of privacy settings
    • Post and comment counts
    • Custom post types
    • Plugin installations
    • Theme installations

    To fix, open up <plugins>/wordpress-seo/wp-seo.php and replace lines 101-103 with:

    if ( isset( $options['yoast_tracking'] ) && $options['yoast_tracking'] == 'yes' ) {
        require WPSEO_PATH.'admin/class-tracking.php';
    } else {
        wp_clear_scheduled_hook( 'yoast_tracking' );
    }

    Please could someone else verify this?

    http://wordpress.org/extend/plugins/wordpress-seo/

  2. It's not.

    The code is clearly checking to see if you've allowed tracking. YES, it checks on every load, but that's how it's supposed to work. Every load it checks, sees a no, and moves on.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic