I'm fully aware of the recent AWStats exploits and I'm not sure if it's been 100% addressed or not, but being as there are no other stats programs that give as much info for the price, i'm inclined to offer it server-wide.
My concerns is the CGI issue. I know that you can disable the option and not allow web-based updating, but if I install it server level, will that prevent the clients from overriding it?
I'd LOVE to use Urchin, but the cost is prohibative at the moment.
