Hi ! A little future request / bug depending of point of view. If I'm not set stats password after visiting http://mydomain/stats i see 500 internal server error. After setting password error changes from 500 to 403 Forbidden I'm understand this, but it looks unprofessional... perhaps if password is not set instead of error page 500 display page with info about necessary setting password ? And instead of 403 Forbidden in time of creation website place in stats directory page with info i.e. nothing collected yet or something else ? In my opinion this would be much better
or "stats disable" by default and to time proper password disable even create statistics. You will save server performace (in large hostings)
