Piyush Asthana

<p>ActivityPilot is an activity log and audit-trail plugin for developers, agencies, and security-conscious site owners. Meaningful changes on your site — logins, content edits, plugin and theme operations, role changes, high-impact options, integrations, and more — are stored in a dedicated database table and shown in a modern admin timeline.</p>
<h4>Privacy defaults</h4>
<ul>
<li>External-service features are <strong>opt-in</strong>.</li>
<li>Geolocation (<code>ip-api.com</code>) is <strong>disabled by default</strong> (<code>enable_geo = 0</code>).</li>
<li>Outbound webhooks (Slack/Discord/Teams/custom URL) are <strong>disabled by default</strong> until you enable them and provide destination URLs.</li>
<li>The plugin does not send data to third-party services unless you explicitly enable and configure those features.</li>
</ul>
<h4>Why use this plugin?</h4>
<ul>
<li><strong>Custom tables</strong> — logs live in <code>{prefix}apwpm_activity_logs</code> (not post meta) with indexes for fast queries.</li>
<li><strong>Modern admin UI</strong> — dashboard, timeline, filters, search, pagination, exports, dark mode, and keyboard shortcuts.</li>
<li><strong>Security-first</strong> — capability checks, REST nonces, prepared SQL, output escaping, and optional sudo mode for destructive actions.</li>
<li><strong>Break detection</strong> — spots error spikes and surfaces recent risky changes.</li>
<li><strong>Extensible</strong> — REST API (<code>activitypilot/v1</code>), hooks, custom event registry, and PSR-3 adapter.</li>
</ul>
<h4>Core features</h4>
<ul>
<li>Activity logging for logins, posts, plugins, themes, users, roles, and important site options</li>
<li>Timeline view with avatars, severity colors, and structured context</li>
<li>Filters by user, action, object type, severity, date range, status, assignee, and search</li>
<li>CSV and JSON exports; daily retention pruning via cron</li>
<li>Email alerts when break detection finds unusual error activity</li>
<li>Workflow: acknowledge, resolve, snooze, assign, and comment on events</li>
<li>Smart insights: bursts, off-hours access, role escalation, and statistical spikes</li>
<li>Optional rollback for supported change types (sudo-gated)</li>
<li>Analytics heatmap, hour-of-day chart, and top users</li>
<li>Scheduled HTML digest reports (daily, weekly, monthly)</li>
<li>Multisite support with per-site tagging and network overview</li>
<li>Hash-chain integrity verification (optional)</li>
<li>File integrity monitoring, IP throttle, PII redaction, GDPR export/erase helpers</li>
<li>Integrations: WooCommerce, ACF, popular form builders, SEO plugins, page builders</li>
<li>Optional outbound webhooks (Slack, Discord, Microsoft Teams, generic URL)</li>
<li>WP-CLI: <code>wp apwpm list|count|verify|prune|purge|export|digest|scan-files</code></li>
</ul>
<h4>For developers</h4>
<p>Log custom events from your code:</p>
<pre><code>APWPM_Logger::log( array( 'action_type' => 'my_event', 'description' => 'Something happened' ) );
</code></pre>
<p>Filter hooks include <code>apwpm_skip_log</code>, <code>apwpm_pre_insert_row</code>, and <code>apwpm_register_event_types</code>. The shorter <code>ap_*</code> hook names from earlier builds are still fired for backward compatibility.</p>
<h3>External services</h3>
<p>This plugin can connect to third-party services <strong>only when you enable the related feature</strong> and, for webhooks, when you provide URLs.</p>
<h4>IP geolocation (optional)</h4>
<p>When <strong>Enable geolocation</strong> is on, the plugin may send the visitor IP address to <a href="http://ip-api.com/" rel="nofollow ugc">ip-api.com</a> to resolve country and city. No API key is required. Results are cached in WordPress transients (about 24 hours). See the <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">ip-api privacy policy</a> for their terms.</p>
<ul>
<li>Data sent: IP address (in the request URL).</li>
<li>When: On log insert for events that include an IP, if geo is enabled and not already set.</li>
<li>Purpose: Display country/city on timeline rows and detect logins from new countries.</li>
</ul>
<h4>Outbound webhooks (optional)</h4>
<p>When webhooks are enabled and URLs are saved in settings, the plugin sends HTTP POST requests to <strong>your</strong> endpoints (for example Slack, Discord, Microsoft Teams, or a custom URL) when qualifying events occur.</p>
<ul>
<li>Data sent: Event title, description, severity, site name, and related metadata you configure to receive.</li>
<li>When: After an event is logged that meets your minimum severity threshold.</li>
<li>Purpose: Notify external chat or monitoring systems.</li>
<li>Services/endpoints: Slack, Discord, Microsoft Teams, or any custom HTTPS endpoint that you explicitly configure.</li>
<li>Terms/privacy (when using those services):<br />
Slack: https://slack.com/terms-of-service , https://slack.com/privacy-policy<br />
Discord: https://discord.com/terms , https://discord.com/privacy<br />
Microsoft Teams (Microsoft): https://www.microsoft.com/servicesagreement , https://privacy.microsoft.com/privacystatement</li>
</ul>
<p>Webhook delivery is fully optional and disabled by default. No webhook requests are sent until you enable webhooks and provide at least one destination URL.</p>
<p>The plugin does not include bundled third-party API keys. Geolocation and webhooks are optional and disabled by default until configured by a site administrator.</p>


ActivityPilot

Track, visualize, and analyze admin and user activity in a timeline UI with break detection, workflows, REST API, and exportable audit logs.

Fazle Bari

<p>FBS Activity Tracker is a powerful, modern WordPress plugin that provides comprehensive user activity monitoring and audit logging capabilities. Built with a completely custom-designed dashboard interface, it offers real-time insights into user actions and system changes without relying on default WordPress admin styles.</p>
<h4>Key Features</h4>
<p><strong>🔍 Comprehensive Activity Tracking</strong><br />
* User login/logout (successful and failed attempts)<br />
* Post and page creation, editing, deletion, and trashing<br />
* Media upload/deletion and comment lifecycle events<br />
* User role changes and password reset events<br />
* Plugin activation and deactivation<br />
* Theme switching<br />
* User profile updates and registrations<br />
* WordPress settings changes<br />
* Custom event logging API for themes/plugins</p>
<p><strong>📊 Modern Dashboard Interface</strong><br />
* Completely custom-designed interface (no WordPress admin styles)<br />
* Real-time activity feed with live updates<br />
* Card-based statistics overview<br />
* Advanced filtering and search capabilities<br />
* Responsive design for all devices</p>
<p><strong>⚡ Advanced Filtering System</strong><br />
* Filter by user, action type, object type<br />
* Date range filtering (preset and custom ranges)<br />
* Full-text search across log details<br />
* Bulk actions for selected logs</p>
<p><strong>🛡️ Security & Performance</strong><br />
* Custom database table for optimal performance<br />
* Automatic cleanup of old logs (configurable retention)<br />
* Noise reduction for volatile option updates (locks/cache/transients)<br />
* SQL injection protection with prepared statements<br />
* Nonce verification for all AJAX requests<br />
* User capability checks for admin access</p>
<p><strong>📈 Data Management</strong><br />
* Export logs in JSON format<br />
* Bulk delete functionality<br />
* Configurable log retention period<br />
* Automatic daily cleanup<br />
* Infinite scroll for large datasets</p>
<p><strong>🎨 Modern Design System</strong><br />
* CSS Grid and Flexbox layouts<br />
* CSS custom properties for easy theming<br />
* Smooth animations and transitions<br />
* Dark mode support<br />
* Accessibility features (ARIA, keyboard navigation)</p>
<h4>Free Version Includes</h4>
<ul>
<li>Core activity tracking for essential user actions</li>
<li>Modern dashboard with real-time activity feed</li>
<li>Advanced filtering and search capabilities</li>
<li>Basic statistics (today’s activity, active users, total logs)</li>
<li>Bulk actions (delete, export selected logs)</li>
<li>Automatic log cleanup (30-day retention)</li>
<li>Responsive design for all devices</li>
<li>Export functionality (JSON format)</li>
</ul>
<h4>Perfect For</h4>
<ul>
<li><strong>Website Administrators</strong> – Monitor user activities and system changes</li>
<li><strong>Security Professionals</strong> – Track login attempts and suspicious activities</li>
<li><strong>Content Managers</strong> – Keep track of content changes and updates</li>
<li><strong>Developers</strong> – Debug issues and monitor plugin/theme changes</li>
<li><strong>Business Owners</strong> – Ensure compliance and audit requirements</li>
</ul>
<h4>Technical Specifications</h4>
<ul>
<li><strong>Database</strong>: Custom table <code>wp_fbs_activity_logs</code> for optimal performance</li>
<li><strong>Security</strong>: All data sanitized, validated, and escaped</li>
<li><strong>Performance</strong>: Indexed database queries, AJAX loading, infinite scroll</li>
<li><strong>Compatibility</strong>: WordPress 5.0+, PHP 7.4+, MySQL 5.6+</li>
<li><strong>Standards</strong>: Follows WordPress coding standards and best practices</li>
</ul>
<h4>Installation</h4>
<ol>
<li>Upload the plugin files to <code>/wp-content/plugins/fbs-activity-tracker/</code> directory</li>
<li>Activate the plugin through the ‘Plugins’ screen in WordPress</li>
<li>Navigate to ‘Activity Tracker’ in the admin menu to access the dashboard</li>
<li>Start monitoring user activities immediately</li>
</ol>
<h4>Frequently Asked Questions</h4>
<h4>Does this plugin affect site performance?</h4>
<p>No, FBS Activity Tracker is designed for optimal performance. It uses a custom database table with proper indexing, AJAX-based loading, and automatic cleanup of old logs to ensure minimal impact on your site’s performance.</p>
<h4>How long are logs kept?</h4>
<p>By default, logs are kept for 30 days and automatically cleaned up daily. This retention period is configurable in the plugin settings.</p>
<h4>Can I export the activity logs?</h4>
<p>Yes, you can export logs in JSON format. The plugin supports both bulk export of selected logs and full export with applied filters.</p>
<h4>Is the plugin secure?</h4>
<p>Absolutely. The plugin follows WordPress security best practices including data sanitization, validation, nonce verification, capability checks, and SQL injection protection with prepared statements.</p>
<h4>Does it work with multisite?</h4>
<p>Yes, FBS Activity Tracker is fully compatible with WordPress multisite installations and will track activities across all sites in the network.</p>
<h4>Can I customize the dashboard appearance?</h4>
<p>Yes, the plugin uses CSS custom properties (variables) for easy theming. You can customize colors, spacing, and other design elements through CSS.</p>
<h3>Support</h3>
<p>For support, feature requests, or bug reports, please visit our support page or contact us directly.</p>
<h3>Privacy Policy</h3>
<p>FBS Activity Tracker collects and stores user activity data locally on your WordPress installation. No data is sent to external servers. All data is stored in your database and can be exported or deleted at any time. The plugin respects user privacy and only tracks activities that are necessary for security and audit purposes.</p>
<h3>Credits</h3>
<p>Developed by Fazle Bari with modern web technologies and WordPress best practices.</p>
<h3>Donate</h3>
<p>If you find this plugin useful, please consider making a donation to support continued development and improvements.</p>


FBS Activity Tracker

A modern, granular user activity and audit log WordPress plugin with a custom-designed dashboard interface for comprehensive site monitoring.

ActivityPilot vs FBS Activity Tracker