Linux 软件免费装
Banner图

Frenemy

开发者 frenemydev
更新时间 2026年7月18日 08:29
PHP版本: 7.4 及以上
WordPress版本: 7.0
版权: GPLv2 or later
版权网址: 版权信息

标签

analytics ai bots crawlers bot-detection

下载

0.1.0

详情介绍:

AI agents, search crawlers, SEO tools, scrapers, and impostors pretending to be all of the above now make up a large share of most sites' traffic — and standard analytics are built to ignore them. Frenemy watches that traffic instead. For every request that reaches WordPress, the plugin: Observe-only, by design. The plugin never blocks, slows, challenges, or alters a request — there is no blocking code in it at all. It is also fail-open at every joint: classification runs after your page has already been sent, and any Frenemy failure means "no data," never a broken or slower site. Honest about what it sees. Frenemy observes every request that reaches WordPress itself. Cached pages and static files are served before WordPress runs and are not observed — that trade-off is stated in the plugin, on your dashboard, and here, rather than papered over. The requests page caches never serve (cache misses, searches, POSTs, login, REST, and XML-RPC traffic) are exactly where bot and impostor signal concentrates. Account required. The plugin needs a site key from a Frenemy account (free trial — no card required to start). All plugin code is fully functional and GPL; the key connects it to your dashboard, which is where the analytics live. There are no charts inside wp-admin and no duplicate analytics UI — one settings screen, one key, one link to your dashboard.

安装:

  1. Install and activate the plugin from the WordPress.org directory.
  2. Create a site at app.frenemy.dev (free trial) — the setup wizard shows your site key once.
  3. In WordPress, go to Settings → Frenemy, paste the key, and save.
  4. Answer the one topology question on the same screen ("How does traffic reach this server?") — it controls whether Frenemy can verify crawler IPs. Not sure? The default is safe.
  5. Open https://your-site.com/?frenemy=check in a private window; your Frenemy wizard flips to Connected within a minute.

常见问题:

Does this slow my site down?

No. Classification and reporting run on PHP's shutdown hook, after your page has been sent (and on most hosts, after the connection to the visitor is already closed). The classify step itself is local — no network calls in the request path, ever.

Can it block bad bots?

Not in this version — Frenemy for WordPress is deliberately observe-only, and there is no enforcement code in the plugin. See first, then decide: your dashboard shows exactly who visits and what they claim to be.

Why don't I see all my traffic?

Page caches and static files are served before WordPress (and therefore Frenemy) runs. Frenemy sees every request that reaches WordPress itself: cache misses, searches, POSTs, logins, REST and XML-RPC traffic — which is where bot activity concentrates. We state this honestly rather than estimate numbers we can't measure.

What data do you collect about my visitors?

Per PHP-reaching request: the classification, method and path, status, duration, and the visitor IP (processed transiently on our side — hashed with a rotating salt, raw value never stored). The user-agent string is transmitted only for unrecognized bot-like requests, never for humans. Presumed-human traffic is sampled at a low rate; exact totals are kept via counters, not tracking. No cookies are set, no fingerprinting is done, and no visitor profile is built. See https://frenemy.dev/privacy.

How do I turn it off?

Three ways, strongest first: define FRENEMY_DISABLED as true in wp-config.php (host-level), deactivate the plugin, or use the "Pause observation" toggle in Settings → Frenemy. Uninstalling removes every option the plugin created.

Does it work with multisite?

Not yet — single-site installs only in this version.

更新日志:

0.1.0