Orbilog Activity Monitor
| 开发者 | yeasinarafathridoy |
|---|---|
| 更新时间 | 2026年9月17日 15:09 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
John Smith (Editor) updated the page "About Us" — 8 September 2026 at 10:30, from 203.0.113.0What it records
- Logins — successful sign-ins, failed attempts, sign-outs, password changes, password reset requests
- Users — accounts created, edited, deleted, and every role change, with new administrators flagged as critical
- Content — posts, pages, and custom post types created, updated, published, scheduled, trashed, restored, or deleted, including which fields changed
- Media — uploads, edits, attachments, and deletions
- Comments — approvals, edits, spam, trash, and deletions
- Plugins and themes — installs, activations, deactivations, updates, deletions, theme switches, and built-in file-editor changes
- WordPress core — version updates
- Settings — site title, addresses, administration email, registration, default role, permalinks, reading and discussion settings, menus, and widgets
- Everything stays on your site. No external requests, no telemetry, no account required.
- Passwords are never recorded — not in plain text, not as hashes. Neither are reset links, cookies, tokens, or payment details.
- IP addresses are anonymised by default. 203.0.113.42 is stored as 203.0.113.0. You can switch to full addresses or turn IP recording off completely.
- Logging never breaks your site. If an entry cannot be written, the action still goes through.
- Deletion leaves a trace. Clearing the log is itself recorded, and that record cannot be switched off.
安装:
- Upload the
orbilog-activity-monitorfolder to/wp-content/plugins/, or install it through Plugins → Add New. - Activate the plugin through the Plugins screen.
- Open Orbilog in the admin menu. Recording starts immediately.
- Visit Orbilog → Settings to choose a retention period and how IP addresses are handled.
常见问题:
Does this send my data anywhere?
No. Orbilog makes no outbound requests. Everything is stored in a table in your own database.
Are passwords ever stored?
No. Password changes are recorded as events, but no password — plain or hashed — is ever written to the log. Reset links, activation keys, cookies, session tokens, and API keys are stripped as well.
Will it slow my site down?
Entries are written only when something actually changes, which in practice means admin requests rather than visitor page views. The log table is indexed on every column you can filter by.
What happens if logging fails?
Nothing visible. Every write is wrapped so that a database problem cannot stop someone signing in, publishing a post, or updating a plugin.
Is my log deleted when I remove the plugin?
Only if you ask for it. Deactivating never deletes anything. Uninstalling deletes data only when you have turned that on under Privacy and tools.
Why is an action missing from the log?
Check whether that activity type is switched off in Settings, whether the user, role, or IP is on an exclusion list, and whether the entry is older than your retention period. Changes made directly in the database are invisible to any activity log.
Does it work on multisite?
Each site keeps its own log. A network-wide view is planned for a future release.
更新日志:
- Initial release.
- Activity log for logins, users, content, media, comments, plugins, themes, core updates, and settings.
- Search and filtering by user, role, activity type, severity, date range, IP address, and event ID.
- CSV export with formula injection protection.
- Configurable retention from 30 days to forever, with automatic daily cleanup.
- IP handling: full, anonymised, or off. Anonymised by default.
- Exclusions by user, role, or IP address.
- Four separate permissions, assignable per role.
- Integration with the WordPress personal data export and erase tools.