SFR Analytics
| 开发者 | supportfromrichard |
|---|---|
| 更新时间 | 2026年5月5日 01:22 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
SFR Analytics is a self-hosted analytics plugin for WordPress. All visitor data is stored in your own database — nothing is sent to third-party services. No cookies, no external scripts, no tracking pixels.
Get a clear picture of your site's traffic without compromising your visitors' privacy.
Need a central multi-site dashboard? Use the free SFR Analytics Hub plugin to aggregate analytics from multiple WordPress sites.
Dashboard at a Glance
- Views, Visitors, Sessions — core metrics with period-over-period comparison
- Bounce Rate & Pages per Session — engagement indicators
- Traffic Over Time — interactive line chart with date range presets
- Top Content — your most viewed posts and pages
- Traffic Sources — where your visitors are coming from
- Top Referring Sites — individual domains sending you traffic
- Entry & Exit Pages — first and last pages in each visit
- Device Types — desktop, mobile and tablet breakdown
- Browsers & Operating Systems — which browsers and OS your visitors use
- Geographic Distribution — visitor countries (only available if using a CDN like Cloudflare that provides country headers; all other tracking works without a CDN)
- Campaign Performance — UTM campaign results with source/medium drill-down
- Online Now — on-demand live visitor count with optional online-only auto-refresh in the dashboard
- Create campaigns with notes and track their performance over time
- Build UTM links with a visual tool — pick a page, choose source/medium/campaign, and get a ready-to-use URL
- Smart page picker — search across all your content types with post type and category filtering
- Preset sources and mediums — common options (Facebook, Google, newsletter, etc.) with clear descriptions
- Save generated links for quick reference and reuse
- Custom sources and mediums — add your own and they're saved for next time
- Auto-lowercase campaign names to prevent data fragmentation
- 200+ known bot patterns — search engines, AI crawlers, SEO tools, monitoring bots, headless browsers, security scanners and more
- JavaScript verification — a lightweight inline script confirms real browser execution, so bots that don't run JavaScript are never counted
- Missing header detection — flags requests without User-Agent or Accept-Language headers
- Filterable patterns — add your own via the
sfran_bot_patternsfilter
- No cookies — visitor identification uses anonymous hashed fingerprints
- No PII stored — IP addresses are hashed (SHA-256), never stored in plain text
- Optional IP anonymisation — strip the last octet before hashing
- Do Not Track support — respects the browser DNT header when enabled
- Local storage only — your data never leaves your server
- Configurable retention — automatically delete data after 30 to 3,650 days
- GDPR-ready privacy text — copy-paste paragraph for your privacy policy
- Exclude specific IP addresses or CIDR ranges (e.g.
192.168.1.0/24) - One-click "Ignore My IP" button
- Exclude entire countries by country code
- Exclude logged-in users by role (administrators, editors, etc.)
/sfran/v1/summary— overview stats with optional comparison/sfran/v1/top-content— most viewed content with pagination/sfran/v1/traffic-sources— referrer breakdown/sfran/v1/time-series— daily views/visitors/sessions/sfran/v1/campaigns— campaign performance/sfran/v1/entry-pagesand/sfran/v1/exit-pages/sfran/v1/referrers— top referring domains/sfran/v1/devices,/sfran/v1/browsers,/sfran/v1/geographic/sfran/v1/online-now— current active visitor count for the last N minutes (default 5)
manage_options capability. Use these to build custom dashboards, export data, or integrate with other tools.
Performance
- Batch processing — pageviews are buffered and written in batches, reducing database load
- Indexed tables — optimised queries for fast dashboard rendering
- Lightweight frontend — a single inline verification script, no external files loaded for visitors
- No impact on page speed — tracking uses
navigator.sendBeacon(non-blocking)
安装:
- Upload the
sfr-analyticsfolder to/wp-content/plugins/, or install directly from the WordPress plugin screen. - Activate the plugin through the Plugins screen.
- Database tables are created automatically on activation.
- Visit Analytics → Dashboard to see your data.
- If you manage multiple websites, install SFR Analytics Hub to view aggregated reporting in one dashboard.
屏幕截图:
常见问题:
Does this plugin send data to external services?
No. All data is stored locally in your WordPress database. No external API calls are made for tracking.
Is this GDPR compliant?
Yes. The plugin stores only anonymous hashed identifiers — no IP addresses, names, emails or any personally identifiable information. It also supports Do Not Track headers and provides ready-made privacy policy text.
Does it use cookies?
No. Visitor and session identification is based on anonymised hashing of request headers, not cookies.
How does bot detection work?
Two layers: first, the User-Agent string is checked against 200+ known bot patterns. Second, a lightweight inline JavaScript verification confirms that the visitor is a real browser. Only verified pageviews appear in your dashboard stats.
Can I exclude my own visits?
Yes. Go to Analytics → Settings and click the "Ignore My IP" button, or manually add IP addresses and CIDR ranges.
What is the Campaign Manager?
A built-in tool to plan marketing campaigns and generate UTM-tagged URLs. When visitors arrive via those links, the campaign performance is tracked automatically and shown on your dashboard.
How does country detection work?
Country detection relies on CDN headers (e.g. Cloudflare's CF-IPCountry). If your site is not behind a CDN that provides country headers, the geographic section will show no data — but all other tracking works normally.
Can I control how long data is kept?
Yes. In Analytics → Settings, set the retention period from 30 days to 10 years. Old data is cleaned up automatically via a daily scheduled task, or you can trigger cleanup manually.
Does it work with caching plugins?
Yes. The tracking script runs client-side after the page loads, so it works correctly with page caching, CDN caching and server-side caching.
Does it slow down my site?
No. The only frontend output is a small inline JavaScript snippet (no external files). It uses navigator.sendBeacon for non-blocking requests and does not affect page load time.
Can I access analytics data programmatically?
Yes. The plugin provides a full REST API with 11 endpoints. Authenticate with WordPress Application Passwords (or any REST API authentication method) and you can retrieve any data shown on the dashboard. Ideal for custom dashboards, reporting tools, or external integrations.
Can I combine data from multiple sites?
Yes. Install SFR Analytics Hub on a central WordPress site, then connect each site running SFR Analytics using WordPress Application Passwords (administrator account required on each feeder site).
更新日志:
0.7.2
- Fixed: Geographic country flags no longer require PHP mbstring (
mb_chr) — avoids fatal errors on hosts without that extension
- Fixed: Top Referring Sites % now correctly represents % of referral visitors (not views)
- Updated: Hub-aligned Online Now + UI wording and review prompt improvements for admins
- Updated: Referral and traffic-source percentage labels for clarity
- Added: Online Now panel on the SFR Analytics dashboard with one-click live visitor checks
- Added: Online-only auto-refresh toggle (off by default) with 15s/30s/60s interval options
- Improved: Online controls moved to a dedicated row so date-range refresh and live checks are clearly separated
- Improved: Companion workflow with SFR Analytics Hub for cross-site live visibility
- Added: Companion links for the free SFR Analytics Hub plugin in readme and admin UI
- Added: Plugin row meta links for Hub (free) and Hub Pro (more than 3 sites)
- Added referral spam filtering — built-in blocklist of 30+ known ghost referrer domains, auto-cleanup on upgrade
- Added manual referrer domain blocking via Settings with one-click add/remove
- Added IP address tracking with anonymisation support (respects existing anonymize-IP setting)
- Added IP address column to database schema with automatic migration
- Added self-referral filtering — own domain no longer appears in Top Referring Sites
- Added "Last 24 Hours" date preset button on the dashboard
- Added country flag emoji and full country names in the Geographic Distribution table
- Added icons for traffic source types (Direct, Search Engines, Social Media, Referral Sites)
- Added recognisable icons for popular referring domains (Google, Facebook, Twitter/X, YouTube, LinkedIn, Reddit, Pinterest, Bing, etc.)
- Added REST API
/bulkendpoint — returns all data types in a single request - Added REST API
/dailyendpoint — returns per-day snapshots for external integrations - Added human traffic percentage to summary stats API response
- Improved referral percentage display to 1 decimal place
- Improved Top Referring Sites description text
- Improved page picker filtering for UTM Link Builder — excludes password-protected pages, functional pages, and non-content post types
- Updated readme for WordPress.org submission
- Code quality and compatibility improvements
- Added Campaign Manager for creating and tracking marketing campaigns
- Added UTM Link Builder with smart page picker, preset sources/mediums, and saved links
- Added Campaign Performance dashboard section with source/medium drill-down
- Added Top Referring Sites dashboard section (individual domains)
- Added Entry Pages and Exit Pages dashboard sections
- Added REST API endpoints for campaigns, entry/exit pages, referrers, devices, browsers, and geographic data
- Added smart page picker with AJAX search, post type filtering, and category filtering
- Added content-based filtering to exclude functional pages from the page picker
- Improved bot detection patterns
- Improved PHPCS compliance and security hardening
- Added IP address exclusion with CIDR range support
- Added one-click "Ignore My IP" button
- Added country exclusion for geographic filtering
- Added settings help documentation
- Added JavaScript verification for human traffic confirmation
- Added Device Types, Browser, OS, and Geographic dashboard sections
- Added Traffic Over Time chart
- Added Bounce Rate and Pages per Session metrics
- Improved bot detection with 200+ patterns including AI crawlers
- Added collapsible dashboard sections with persistent preferences
- Added Traffic Sources chart and table
- Added data retention settings and manual cleanup
- Added user role exclusion from tracking
- Added Do Not Track header support
- Added IP anonymisation option
- Added privacy policy text generator
- Performance improvements with batch processing and buffer system
- Initial release
- Pageview tracking with visitor and session identification
- Admin dashboard with overview statistics
- Top Content report
- REST API endpoints (summary, top-content, traffic-sources, time-series)
- Bot detection and filtering
- Session tracking with configurable timeout
- GDPR-compliant privacy handling
- Data stored locally — no external services