Eyesite Monitor
| 开发者 | bieleckiconsulting |
|---|---|
| 更新时间 | 2026年9月18日 20:18 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Eyesite Monitor is a health and performance monitoring plugin for your WordPress site and WooCommerce store. It is a complete solution for agencies, freelancers and e-commerce owners that detects problems before your customers do. The plugin works on its own locally, and can optionally connect to the EyeSite service (eyesite.pl) for external 24/7 uptime monitoring and e-mail alerts.
Key features
- Store monitoring: Tracks payment errors, the cart, shipping problems and sales silence (no orders for an unusual period).
- Order anomalies: Intelligent detection of irregularities in order statuses based on a 30-day rolling average.
- Server monitoring: Checks site availability, disk space usage, memory (RAM) and that WP-Cron is running correctly.
- Google and AI visibility: Indexing blocks, sitemap, schema.org data, and whether AI assistants (ChatGPT, Claude, Perplexity) are allowed to read the site.
- Security: Warns when your WordPress version has publicly known security holes, tests SSL certificate validity, Cloudflare protection and two-factor authentication (2FA).
- Error reporting (JS & PHP tracking): Captures and logs critical JavaScript (front-end) and PHP errors, including contact-form submission errors.
安装:
- Upload the plugin folder to the
/wp-content/plugins/directory, or install it from the WordPress admin under "Plugins" -> "Add New". - Activate the plugin from the "Plugins" menu in the admin panel.
- Open the
Eyesitemenu to view monitoring results and the API credentials.
屏幕截图:
常见问题:
Is this plugin free?
Yes. The plugin is a free part of the Eyesite ecosystem.
Does the plugin support multisite?
The plugin is designed for single-site installations. On multisite networks the error-tracking tables are only created for the site the plugin is activated on, activate it per site rather than network-wide.
The disk space check says everything is fine, but my hosting account is full
The check measures free space on the server volume. On shared hosting the account quota can be exhausted while the volume still has space, the check cannot see hosting quotas.
How do I enable SMS alerts?
Extended SMS notifications are part of the paid service - visit our website eyesite.pl.
更新日志:
7.4.7
- Changed: connect button wording and trust line.
- Changed: the connect call to action talks about tomorrow, not about the scan that just ran, and names a real risk from this site when there is one.
- Changed: until the site is connected, every detail section opens with a one-line reminder that the result is a one-off scan.
- Changed: no more em or en dashes anywhere in the plugin's text.
- Changed: the "connect" call to action is the primary button; before monitoring is on, the score card shows a quiet link instead of a second button.
- Changed: the feedback box is folded by default.
- Changed: the preview alert cards show this site's own top problems (no more "customers cannot pay" on a site that is not a shop) and animate in one after another.
- Changed: known vulnerabilities now appear in their own alert section at the top of the dashboard, above the to-do list, with a one-click "Update" button that runs the normal WordPress updater (when an update is available in the plugin's own update source).
- Changed: shorter AI visibility cards.
- Fixed: a short home page is no longer described as built with JavaScript. That wording now needs real evidence of a JavaScript application; otherwise the plugin only says there is little text.
- Added: AI visibility checks in the Google group: robots.txt rules for AI search bots (ChatGPT, Claude, Perplexity) versus training bots, whether the server turns an AI search bot away, schema.org data about the business, and whether the content is readable without JavaScript. Reads your own site only.
- Added: optional check for plugins and themes with publicly known security holes, with the version that fixes them. Off by default; data from Wordfence Intelligence.
- Added: warning when the installed WordPress version has publicly known security holes (WordPress.org marks it as "insecure"). Checked once a day against the public WordPress.org release list; nothing about your site is sent.
- Fixed: no more "problem fixed" e-mails about WP-Cron. On low-traffic sites background tasks pause between visits, which is normal and not worth a message.
- Fixed: the "problem fixed" e-mail says "site" instead of "store" when WooCommerce is not active.
- Docs: new Privacy section describing the visitor data stored locally (front-end errors, abandoned carts), the
eyesite_sessioncookie and retention. - Added: suggested privacy policy text in Settings -> Privacy -> Policy guide.
- Changed: all features are free. Google visibility checks and the real e-mail delivery test are available to every site (the delivery test requires a connection to EyeSite, as it uses the EyeSite mailbox).
- Removed: PRO licence key, licence verification requests and locked previews.
- Fixed: "problem fixed" e-mails were repeated every hour when a check flapped. A problem must now stay open for 2 hours, and the same problem is reported as fixed at most once every 7 days.
- Fixed: WP-Cron is reported as not working only when scheduled tasks are overdue by more than an hour (low-traffic sites no longer trigger false warnings).
- Fixed: mail configuration check now audits the domain e-mails are actually sent from (WooCommerce sender address, SMTP plugin sender, or the site domain) instead of the administrator's e-mail domain. Old results are re-checked automatically.
- Fixed: the PRO preview overlay no longer overlaps neighbouring check groups.
- Privacy: page-speed measurement is now opt-in and off by default (new setting); no measurement is scheduled on activation.
- Privacy: domain expiry check (RDAP) is now opt-in and off by default (new setting).
- Changed: admin CSS moved to assets/css/eyesite-admin.css (loaded only on EyeSite screens); all inline JavaScript is added with wp_add_inline_script().
- Docs: External services section now covers audit/repair requests, the connection notice, PRO licence check, e-mail delivery test and RDAP.
- Removed: unused warning e-mail helper, redundant core includes, "Tested up to" plugin header.
- Coding standards: Plugin Check 2.1 annotation for the read-only error_reporting() level check in the PHP error handler.
- Security: all queries on the plugin's own tables now pass the table name through $wpdb->prepare() with the %i identifier placeholder.
- Security: display-only URL flags are sanitized; every state-changing request remains capability- and nonce-checked.
- Changed: minimum WordPress version raised to 6.2 (required for %i).
- Coding standards: Plugin Check clean-up (same fixes as 6.7.2).
- Added: three hardening checks in "Bezpieczeństwo", checked from inside (no guessing): XML-RPC open, user logins exposed via the REST API, directory listing in uploads. Each with a plain explanation and a one-click fix request.
- Fixed: a corrupted character in the DMARC explanation.
- Changed: the visitor session cookie is no longer set by PHP on every page view. It is created in the browser only when there is something to report (a front-end error or an abandoned cart), so full-page caches (LiteSpeed, WP Rocket, Cloudflare APO, Varnish) keep serving cached pages to every visitor.
- Fixed: an uncaught front-end error on a page without a form was recorded twice (once without browser/session context).
- Changed: error tables, wider action column so the "Zleć naprawę" button is never cut off; the resolve button now reads "Oznacz jako naprawione".
- Added: score history (daily point, sparkline in the hero), a short "problem naprawiony" e-mail when a reported problem stops occurring (toggle in settings), and a "Naprawione w tym tygodniu" block in the weekly report.
- Added: PRO licence key field in settings (verified daily against the EyeSite backend, 14-day offline grace).
- Changed: returns check is one line inside "Reklamy i analityka"; server errors live only on their own page; the real-delivery mail test is a PRO feature.
- New dashboard for shop owners, not engineers: a "Zdrowie sklepu" score (0-100) with three plain sentences (can customers buy, do e-mails arrive, is the domain paid) and proof of work, checks run since install, problems found, problems fixed.
- First-run onboarding: the plugin runs its real checks once, shows the score and the first thing to fix, then offers 24/7 alerts. No tooltip tour.
- "Do zrobienia" is the one action list: every item explains what it means for sales and offers a single "Zleć naprawę, darmowa wycena" button (price shown only via the eyesite_fix_price filter).
- Detailed sections (checks grid, analytics, returns, carts, settings) are folded by default; they open when something needs attention.
- Weekly report opens with the score and the checks/problems counters.
- Fixed: when the shop was reported as down, the availability hero and KPI card jumped into the connection card (WordPress core relocates every
div.errorunder the first heading). - Changed: the purchase-path section is collapsible (open automatically when something is wrong); Google visibility is a PRO feature and shows as a locked preview on free sites.
- Added: purchase-path test for WooCommerce, once a day (and on demand) the plugin walks product → add to cart → cart → checkout over HTTP like a visitor and checks that a payment method is offered. No order is placed. Fails show up in "Do naprawienia" and the weekly report.
- Added: domain expiry check (RDAP), warning 30 days before, critical at 7 days or expired.
- Added: Google visibility check, "discourage search engines", noindex on the home/shop page (meta or X-Robots-Tag), robots.txt blocking everything, missing sitemap, canonical pointing at another host.
- Improved: mail deliverability section rewritten in plain language; the probe inbox no longer requires plus-addressing.
- Status endpoint: new aspects
checkout,seo,domain.
- Fixed: disconnecting now confirms the revocation with the EyeSite backend and retries from cron when the call fails, previously a lost request left the site monitored (and alerted on) after "Rozłącz".
- Added: real delivery test for the mail audit, once a day (and on demand, at most hourly) the plugin sends one minimal plain-text probe message to an EyeSite inbox and reads back how the receiver authenticated it: SPF/DKIM/DMARC results, whether the message actually carried a DKIM signature, sending IP and host, Return-Path/From alignment, blacklist hits and delivery time. Only a random token is sent, no site or customer data. Skipped automatically when the site is not connected or the DNS audit already reports a critical SPF/MX problem.
- Added: mail deliverability audit, daily DNS check of the sending domain (SPF record count and lookup limit,
allpolicy, DMARC policy, MX, common DKIM selectors) with a 0-100 score, plain-language fixes, a card in the checks grid and a section in the weekly report. Nothing is sent; only DNS is read. - Redesigned: calmer admin interface, single brand accent, monochrome SVG icons instead of emoji, flat hairline cards, tabular numerals.
- Fixed: error tables, the sticky header no longer covers the first row.
- Improved: error pages get severity chips, an empty state and an icon in the filter field.
- Added: weekly HTML report e-mail (Monday 08:00) with uptime, PageSpeed, 7-day errors, abandoned carts, SSL days left and bestseller availability. Can be disabled in settings.
- Added: daily SSL certificate expiry check, warning at 21 days, error at 7 days or expired.
- Added: bestseller stock watch, an out-of-stock top-5 product raises a dashboard warning and a one-time e-mail.
- Added: feedback form on the dashboard (rate-limited, nonce-protected).
- Added: KPI trend cards on the dashboard (availability, response time, speed, errors) with inline SVG sparklines built from real measurement history.
- Improved: speed and uptime history is stored (bounded) so trends accrue over time; all new data is removed on uninstall.
- Improved: calmer visual style, white cards, neutral borders, solid buttons.
- Improved: sticky top bar with live status and section quick-navigation, "Status systemu" moved above the checks grid, side-by-side error/cart bands, live filters on error pages, back-to-top button. No logic changes.
- Fixed: connect/disconnect notices were never displayed on the plugin pages.
- Fixed: downtime cost calculator now supports WooCommerce HPOS order storage (returned 0 on WooCommerce 8.2+).
- Security: cart dashboard widget restricted to shop managers/admins; user ID for JS error reports is taken server-side; session ID and cart values are validated and clamped; global rate limit on cart-abandonment reports; oversized payloads are truncated instead of dropped.
- Compatibility: XHR breadcrumb wrapper preserves the prototype chain and static constants used by third-party scripts.
- Redesigned admin interface: refreshed design system (typography, depth, color), refined status cards and availability sparkline, gradient action buttons, styled error tables, accessible focus states, and reduced-motion support. No functional changes.
- Fixed: HTTPS check now recognises TLS terminated at a proxy/CDN (X-Forwarded-Proto, Cloudflare), no more false "no HTTPS" alarms behind load balancers.
- Fixed: task-queue check counts only overdue actions, shops with subscriptions/automations (which always hold future-scheduled actions) no longer trigger false "queue overloaded" alerts.
- Fixed: "series of failed payments" counts only genuinely failed orders, batch auto-cancellations of unpaid orders no longer trigger it.
- Fixed: Contact Form 7 submission results are now detected via CF7's DOM events (the legacy CSS classes were removed in CF7 5.2), so successes are counted on modern installs.
- Fixed: the returns/withdrawal page scan reads all pages separately from blog posts, an active blog can no longer hide the returns page from detection.
- Improved: a single failed e-mail is a warning; the error-level alert requires repeated failures within 15 minutes.
- Improved: order-anomaly "critical" requires a minimum volume (3+ orders), so low-traffic shops aren't paged over a single refund.
- Improved: browser-extension errors and opaque cross-origin "Script error." events are filtered out of user error tracking.
- Improved: the status endpoint runs after WooCommerce initialises its cart, avoiding payment-gateway edge cases.
- Fixed: status endpoint could return a fatal error (HTTP 500) instead of a status when the API token option was missing; an empty stored token is now always rejected.
- Fixed: PHP error occurrence counts were inflated by repeated log scans, each log line is now ingested only once.
- Fixed: false "jQuery not loaded" reports on non-WooCommerce themes that ship without jQuery.
- Fixed: WooCommerce failed-payment window was widened by the site's UTC offset (timezone-safe date query).
- Fixed: leftover scheduled events and transients are now cleaned up on deactivation/uninstall.
- Fixed: PHP warning (and self-recorded error) when error_log points to a character device such as /dev/stderr (common in containers).
- Improved: uptime data is now fetched in the background (like the speed check), a slow status-page response can no longer delay the dashboard.
- Improved: Cloudflare loopback detection is cached for an hour instead of running on every status poll.
- Improved: the visitor session cookie is now set before output starts, so error reports correlate across pages.
- Hardened admin consent card against stale cached data from older versions.
- Added Consent Mode v2 and Meta Conversion API checks.
- Added detection of right-of-withdrawal (returns) signals.
- Added connection to the EyeSite service (connect / verify / disconnect handshake) and the required "External services" section.
- Connect form is served from eyesite.pl/connect; verify/disconnect run on the EyeSite automation backend (filterable via eyesite_connect_url / eyesite_verify_url / eyesite_disconnect_url).
- Status endpoint accepts an optional &aspect= parameter (cart, payments, forms, ssl, cron…) returning 200/503 for a single check, so each aspect can be monitored separately.
- Fixed a PHP "headers already sent" warning when generating the session id.
- Added intelligent order anomaly tracking.
- Refactored result tiles and dynamic titles.
- Added logging of form submission problems.
- Improved error tracking and Lighthouse metrics.
- First public release of the advanced Eyesite agent.