Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

SML Sentinel

开发者 scarlettmedialab
更新时间 2026年10月7日 20:00
PHP版本: 7.4 及以上
WordPress版本: 7.1
版权: GPLv2 or later
版权网址: 版权信息

标签

security logging monitoring audit activity-log

下载

1.2.2 1.2.0 1.2.1

详情介绍:

SML Sentinel is an activity log from Scarlett Media Lab. It does not only watch what users click. It records the lifetime of an area of a WordPress site — sign-ins, content, plugins, files, errors, and housekeeping — in one place, written so both non-technical site owners and developers can use it. You get four screens: Overview, Activity Logs, Event Registry, and Settings. Administrators also get a first-run Quick Setup wizard. Editors who can edit published posts can open Overview and Activity Logs; Event Registry and Settings stay with administrators. What it records Built-in events cover: If WooCommerce, Contact Form 7, WPForms, or Yoast SEO is active, Sentinel records a small set of those plugin’s events as well (order and payment changes, form submissions without message text, SEO updates). Gravity Forms is not recorded. You can pause individual event types in Event Registry. You can also skip everyday actions from chosen user roles; critical system errors are still stored. By default, administrator everyday actions are not recorded. Role changes are still recorded, including when an administrator makes them. This is a log, not a firewall. It does not block brute-force logins or scan for malware. Admin screens Email Mail uses WordPress’s mailer. If the site cannot send email, these switches will not fix delivery. There is no per-event email filter maze. Retention, privacy, and export Files and performance Optional daily check of wp-config.php and .htaccess. That is a scheduled hash check, not live file watching. Optional batch writes, a cap on how many events are stored per minute or hour (this protects the database; it is not login protection), and optional memory-pressure handling. Most sites can leave these as they are. Bundled libraries

安装:

  1. Upload the sml-sentinel folder to /wp-content/plugins/.
  2. Activate SML Sentinel from the Plugins screen.
  3. Administrators see Quick Setup on first run (monitoring and privacy presets, a preview, then apply or skip). You can reopen it from Settings.
  4. Open Sentinel in the admin menu: Overview, Activity Logs, Event Registry, and Settings.

屏幕截图:

  • Activity Logs — filters and the event detail drawer
  • Event Registry — catalogue of event types, including pause
  • Settings — retention, privacy, notifications, and export
  • Email — urgent alert and daily briefing

升级注意事项:

1.2.2 Records role changes, and records single and automatic plugin and theme updates. No settings change. 1.2.1 Adds the companion API and tightens a few log and REST details. No settings change. 1.2.0 First public release. After activate, complete Quick Setup or review Settings → Notifications.

常见问题:

What events does Sentinel log by default?

Sign-ins and failed sign-ins, content and comment changes, Media Library uploads and deletions, plugin and theme changes, WordPress upgrades, PHP and WordPress errors, and Sentinel privacy or housekeeping events. WooCommerce, Contact Form 7, WPForms, and Yoast SEO add their own types when those plugins are active. You can pause types in Event Registry.

Does it email me for every failed login?

No. Failed sign-ins are counted in the daily summary. Urgent mail is only for critical events, and the same type will not email again until the next day.

Can I add custom events?

Not from the Event Registry screen. Built-in types can be paused. Integrations register their own keys when those plugins are active. Companion plugins can register extra types through the public hooks described under Developer.

Can I watch every file on the site?

This plugin watches wp-config.php and .htaccess once a day when that switch is on. Other plugins may register extra paths through sentinel_monitored_files. There is no custom-path form in SML Sentinel.

Is Sentinel compatible with multisite?

Sentinel is built for a single site. It is not tested as a network-activated plugin.

Does Sentinel block attacks?

No. It records activity and can email you. Rate limiting in Settings caps how many log writes Sentinel will store, not visitor logins.

How do deletion requests work?

Turn on the deletion-request shortcode in Settings → Privacy & access, then put [sentinel_data_deletion_request] on a page. A logged-in user can submit a request. An administrator must approve it. It does not delete the WordPress user account.

Will logging slow the site down?

Writes go into Sentinel’s own tables. If volume is a problem, Settings → Performance can queue writes in batches and cap how many events are stored per minute.

Is there a REST API?

Yes, read-only, off by default. Enable it in Settings → Export & API, generate a key, and send X-Sentinel-API-Key. Query-string keys are not accepted. Endpoints: /wp-json/sentinel-plugin/v1/logs, /stats, and /events/types. /stats returns summary counts only.

更新日志:

1.2.2 1.2.1 1.2.0