內容簡介
Activity Track – User Activity Log 外掛可記錄 WordPress 的各種活動，幫助用戶調查帳號、內容及商店變更。其核心價值在於提供即時活動追蹤、AI 驅動分析及可自訂通知，讓用戶能快速調查問題、監控安全性並了解網站使用情況。
【主要功能】
• 即時活動記錄
• 自訂通知設定
• 報告與統計分析
• 支援多網站環境
• CSV 匯出功能
外掛標籤
開發者團隊
② 後台搜尋「Activity Track – User Activity Log」→ 直接安裝（推薦）
原文外掛簡介
Activity Track – User Activity Log – Record supported WordPress activity and investigate account, content, and store changes. Optional Pro features add AI log explanations and additional investigation tools.
It combines real-time activity tracking, AI-driven analysis, and customizable notifications to help you quickly investigate issues, monitor security, and understand what users do on your site.
What This Plugin Logs (at a glance)
User logins & logouts (success and failed attempts)
Post/page changes (create, update, delete, status changes)
Plugin & theme actions (activate, deactivate, install, update)
User & role changes (add, remove, capability/role updates)
Media & downloads (uploads, deletions)
Settings changes (options updated)
WooCommerce orders (new orders, status changes, refunds, trashed and deleted orders)
Who It’s For
Agencies managing multiple client sites
Security teams monitoring user actions
Content teams needing transparency and accountability
Site owners who want visibility into their site’s health
Why Choose This Activity Log Plugin
Accurate audit trail: designed for admins who need trustworthy logs.
Fast & lightweight: minimal overhead; indexed tables keep queries quick.
Actionable alerts: email/Slack rules so you know about critical events instantly.
Privacy controls: IP anonymization and hashing options (Pro) for GDPR/CCPA.
Core Features (Free)
🔍 Real-Time Activity Logging
Capture every key event (logins, content edits, downloads, failed attempts, etc.) as it happens.
🔔 Custom Notifications
Trigger alerts based on user roles, specific actions, IP ranges or threshold events via email or Slack.
📊 Reports & Statistics
View detailed dashboards and exportable reports on activity trends, top users, and security events.
🔒 Multisite Compatible
Single-site or network-wide deployment—centralized control for multisite installs.
📥 CSV Export
Download detailed activity reports for compliance, audit or sharing.
GET SUPPORT AND PRO FEATURES
Get professional support and more features with Activity Track PRO
WooCommerce Activity (Free)
Connect recorded account activity, checkout submissions, saved payment methods, and payment outcomes in one timeline. Includes customer/order summaries, grouped profile updates, outcome badges, and links to related timelines.
Enable WooCommerce under Activity Track → Settings → Enable Activity Types to show the WooCommerce Activity menu. Enable User to record registration, sign-ins, and profile changes.
Supported Stripe events are collected through the WooCommerce Stripe gateway. Live webhook recording is shown separately from WooCommerce payment completion; an unconfirmed webhook does not mean a payment failed.
Review notices highlight five or more recorded live Stripe payment/card-setup failures for the same linked user within ten minutes. Failures can be legitimate retries and do not prove fraud.
Profile changes store allowlisted categories, not field values. Older events may not contain changed-field details.
Summaries cover the events on the current page. Tracking starts when enabled; missing records do not prove no activity occurred.
Monitoring only: this feature does not block customers, validate cards, or replace WooCommerce order management or payment-provider fraud controls. No raw card details or payment payloads are stored by this recorder.
Free works independently. Pro is optional and requires the Free plugin to remain installed and active.
404 Errors (Free)
Review final front-end 404 responses in Activity Track → 404 Errors, with requested URLs, referrers, device information, and recorded visitor details.
Tracking is enabled by default. Turn it off under Activity Track → Settings → Enable 404 tracking.
Search recorded URLs, filter by date, export CSV, and delete selected records.
URL query values are redacted. Capture does not perform remote location lookups and respects the IP logging setting.
Recording is limited to 60 per minute and 5,000 per day. At 10,000 stored records, the oldest 1,000 are deleted in a batch before adding more. Age-based retention still applies (30 days by default).
Pause or resume recording directly on the 404 page. Existing records remain accessible while paused; automatic retention cleanup continues. Recording status shows active, paused, or capture-limit states. Skipped responses are not backfilled.
Bot labels use User-Agent automation signals. Unrecognized clients probing PHP files in common scanner targets are labeled Suspected bot. Labels apply to existing records and CSV exports; they do not verify identity or block requests.
Monitoring only: this feature does not redirect URLs or block requests. Earlier 404 responses are not backfilled.
External Services
For IP location labels in the main activity log, the plugin may send an IP address to one of the following HTTPS services when displaying the log and a cached location is unavailable. Requests also include the site’s WordPress version in the User-Agent header. Event recording uses cached locations only and does not perform remote location lookups. The 404 recorder does not make these requests either.
IP2Location.io: https://api.ip2location.io/ — Terms and Privacy.
IPinfo: https://ipinfo.io/ — Terms and Privacy.
Free works without the optional Pro service. Pro features are provided by a separate plugin; review its service disclosures before enabling them.
IP recording uses the connecting address (REMOTE_ADDR) by default. Forwarded IP headers are accepted only from proxy addresses explicitly configured through the atkai_trusted_proxies filter. Sites behind a proxy or CDN must configure trusted proxy addresses to retain forwarded visitor IPs in the main activity log.
Pro Features (Optional Upgrade)
🤖 AI-Driven Summaries
Request a structured explanation of a recorded log, with a summary, impact, suggested next steps, and limits of the available evidence.
🌐 VPN & Proxy Detection
Automatically flag or exclude traffic coming from known VPNs, proxies or TOR nodes.
🔒 IP Anonymization & Hashing
Meet GDPR/CCPA requirements by masking or hashing visitor IP addresses.
🗂️ Grouped Activity Logs
Consolidate repeated events into single entries with frequency counts for cleaner analysis.
⏱ Advanced Time Filters
See data for the last 24 hours, 7 days, 30 days or any custom interval.
🚨 Unlimited Notification Rules
Create as many email notifications as you need—no caps.
🛠 Priority Email Support
Get fast, expert help whenever you need it.
Source Code & Human-Readable Files
We include both the original (human-readable) and the minified assets in this ZIP so you can review or fork them directly.
— JavaScript sources (in assets/admin/js/):
• flowbite.js
– original Flowbite source (upstream: https://github.com/themesberg/flowbite)
• flowbite.min.js
– minified Flowbite
• atk.notifications.js
– our plugin’s notifications logic (un-minified)
• atk.settings.js
– our plugin’s settings page logic (un-minified)
— CSS sources (in assets/admin/css/):
• tailwind-admin.css
– compiled Tailwind CSS for admin pages (un-minified)
• atk.custom.css
– plugin custom overrides (un-minified)
• atk.notifications.css
– notification panel styles (un-minified)
• atk.settings.css
– settings page styles (un-minified)
— Production assets enqueued by the plugin:
• all .min.js files from assets/admin/js/
• all .css files from assets/admin/css/
Updating Flowbite
When you want to bump to the latest Flowbite:
Install or update Flowbite
From your plugin root, run:
npm install flowbite
Copy the JS files
Overwrite the ones in your plugin:
cp node_modules/flowbite/dist/flowbite.js assets/admin/js/flowbite.js
cp node_modules/flowbite/dist/flowbite.min.js assets/admin/js/flowbite.min.js
Verify & Commit
flowbite.js is the human-readable source.
flowbite.min.js is the minified, production file.
Load your plugin in WP Admin and confirm all interactions still work.
License
This plugin is released under the GPLv2 (or later). Free to use, modify, and redistribute.
