In an attempt to stop the SPAM getting hold of the UA- number i have used the unicode instead so that if bots scrape the page it’s more difficult to spot the UA- code..
google-analytics-dashboard-for-wp/front/tracking/code-universal.php
ga(‘\u0063\u0072\u0065\u0061\u0074\u0065’, ‘\u0055\u0041’+'<?php echo esc_html(str_replace(‘UA’,”,$profile[2])); ?>’,
and
window.google_analytics_uacct = “‘\u0055\u0041’+'<?php echo esc_html(str_replace(‘UA’,”,$profile[2])); ?>'”;
It’s a great plugin, analytics is being trashed by spammers getting the UA details, a slightly more convoluted way would be to use a javascript function to decrypt the UA code (just multiply the number by for example the time stamp in php and then divide it by that number in javascript) so it’s not actually visible on the page for people to scrape the function can reside on a different ga line also to make even harder for bots to scrape.
I have kept my current version simple, as i will have to re-implement the change each time you update the plugin.