Mailhilfe

<p>MH User Activity Monitor shows in real time which users, visitors, WooCommerce customers and bots are currently active on your WordPress website. The plugin helps administrators identify unusual activity, cart sessions, bot traffic and suspicious requests more quickly, with privacy options such as IP anonymization, data-saving mode and automatic cleanup.</p>
<h4>Live monitoring for WordPress websites</h4>
<p>MH User Activity Monitor displays active sessions directly in the WordPress admin area. Administrators can see which visitors are currently online, whether logged-in users are active, which page types are being viewed and when the last activity occurred.</p>
<p>The overview uses dashboard cards, filters, sorting and live refresh. This makes it easier to distinguish normal visitor activity from unusual access patterns.</p>
<h4>Keep an eye on WooCommerce carts</h4>
<p>When WooCommerce is active, the plugin can display active cart sessions. Depending on the selected setting, it stores and displays only the item count, item count and cart total, or detailed product information.</p>
<p>This can help shop owners see whether customers currently have products in their cart, whether carts are abandoned or whether unusual sessions appear in the checkout area.</p>
<h4>Detect bots and suspicious requests</h4>
<p>The plugin detects known bots, crawlers, SEO tools, AI crawlers, social media preview bots and suspicious request patterns. Examples include requests to login areas, XML-RPC, .env files, .git directories or other typical scanner targets.</p>
<p>The bot and risk indicators are not a firewall and do not replace a dedicated security plugin. They help make suspicious technical traffic more visible and easier to classify.</p>
<h4>Privacy-friendly settings</h4>
<p>Because the plugin processes technical visitor data, it includes several privacy options. New installations use anonymized IP addresses by default. Additional privacy modes such as None, Standard, Data-saving and Strict are available.</p>
<p>Stored URLs and referrers are saved without query parameters so sensitive values such as tokens, email addresses, search terms or tracking parameters are not stored unnecessarily. User-agent, URL and referrer values are also length-limited to reduce the amount of stored data.</p>
<p>Additional options include automatic cleanup via WordPress-Cron, ignored IP rules, CIDR support, WooCommerce cart modes and the ability to disable the frontend ping completely.</p>
<h4>Who is this plugin for?</h4>
<p>The plugin is suitable for operators of WordPress websites, WooCommerce shops, membership areas, booking sites and editorial websites who want a short-term view of what is happening on their website right now.</p>
<p>Typical use cases include:</p>
<ul>
<li>Shop owners want to monitor active carts and checkout sessions.</li>
<li>Administrators want to identify unusual bot traffic or scanners more quickly.</li>
<li>Website operators want to see which pages are currently being visited.</li>
<li>Support teams want to understand short-term technical visitor activity.</li>
<li>Operators of smaller websites want a simple live overview without external tracking services.</li>
</ul>
<p>The plugin is intended for short-term technical monitoring. Site operators should check which data they really need, how long it is stored and whether information must be added to their privacy policy.</p>
<h4>Stability note</h4>
<p>This version is marked as the current stable build. Translations, help texts, screenshots, version metadata and basic PHP/ZIP checks were reviewed again before release.</p>
<h3>Requirements</h3>
<ul>
<li>WordPress 6.2 or newer.</li>
<li>PHP 7.4 or newer.</li>
<li>Tested up to WordPress 7.0.</li>
<li>WooCommerce is optional and only required for cart monitoring.</li>
</ul>


MH User Activity Monitor

Live monitoring for WordPress visitors, users, WooCommerce carts, bots and suspicious requests with privacy-friendly options.

David Gewirtz

<p><strong>My Private Site</strong> makes your WordPress site private so only logged-in users can see your content. With one click, you can restrict access to all posts and pages, automatically redirect visitors to the login screen, and keep your site visible only to people you trust.</p>
<p>Unlike full membership or subscription systems, My Private Site focuses on strong privacy without unnecessary complexity. It is ideal for family sites, schools, clubs, client previews, or development environments where you want to share content with a trusted audience without managing payments, profiles, or custom roles.</p>
<h3>Ideal Use Cases</h3>
<ul>
<li><strong>Family sites and school projects</strong>: Share personal updates, photos, or assignments only with family members, classmates, or teachers you choose.</li>
<li><strong>Development and staging sites</strong>: Safely show work-in-progress to clients or teammates without exposing unfinished content or letting it be indexed by search engines.</li>
<li><strong>Clubs, groups, and internal blogs</strong>: Create a private online space for members or staff without the overhead of a complex membership system.</li>
</ul>
<h3>Digital Fortress protection</h3>
<p>My Private Site helps protect the “front door” of your private site with built-in safeguards for login and user registration, including registration spam protection and optional reCAPTCHA support. It also includes AI Crawler Defense to discourage automated collection of your site’s content.</p>
<h3>Key Features</h3>
<ul>
<li>Make your entire WordPress site private with a single setting  </li>
<li>Redirect logged-out visitors automatically to the login page  </li>
<li>Choose where users land after login (requested page, home, dashboard, or custom URL)  </li>
<li>Support user self-registration on private sites when enabled  </li>
<li>Protect registration with built-in spam controls and optional reCAPTCHA  </li>
<li>Optionally block unauthenticated access to the WordPress REST API  </li>
<li>Simple, no-code setup using standard WordPress settings </li>
<li>Privacy shortcode lets you selectively show or hide content within a page or post.</li>
</ul>
<h3>Built-in Registration Spam Guard</h3>
<p>Fake registrations can quickly fill your user list and trigger a flood of notification emails. My Private Site includes <strong>Registration Spam Guard</strong> controls that help block automated signups before they become user accounts:<br />
* <strong>Honeypot field</strong>: Adds an invisible registration field that normal visitors do not fill in, but many bots do.<br />
* <strong>Gibberish username detection</strong>: Blocks long, randomly mixed usernames often generated by registration bots.<br />
* <strong>URL-like username detection</strong>: Blocks usernames that look like domains or URLs, including phishing-style hosted page addresses.<br />
* <strong>Crypto scam phrase detection</strong>: Blocks usernames that carry common bait phrases such as balance checks, transfer notices, or withdrawal prompts.<br />
* <strong>Excessive email dots</strong>: Blocks email addresses with unusually dotted local parts commonly used in bulk fake accounts.<br />
* <strong>Missing MX records</strong>: Blocks registrations when the email domain is not configured to receive mail.<br />
* <strong>Disposable email domains</strong>: Blocks common throwaway email services, including matching subdomains.<br />
* <strong>StopForumSpam lookup</strong>: Checks registrants against the StopForumSpam database.</p>
<p>Each Registration Spam Guard option can be enabled separately, so you can choose the level of protection that fits your site. Blocked attempts are logged in the System Log area for quick review.</p>
<h3>Built-in AI Crawler Defense</h3>
<p>The internet is rapidly changing, with AI crawlers and bots harvesting content without consent. My Private Site helps you defend your work with integrated <strong>AI Crawler Defense</strong> features:<br />
* <strong>NoAI and NoImageAI tags</strong>: Automatically add meta tags and headers that signal compliant AI systems not to use your text or images for training.<br />
* <strong>Block GPTBot</strong>: Add a robots.txt rule to prevent OpenAI’s crawler from accessing your site.<br />
* <strong>Really Simple Licensing (RSL)</strong>: Publish a machine-readable license that explicitly prohibits AI training on your content.</p>
<p>These protections are included free in the core plugin, easy to enable with a checkbox, and designed to safeguard your site without affecting normal visitors or search engines. You can use them even if you’re not using any other site privacy features.</p>
<h3>Watch the Video Overview and Demo</h3>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/jry3DHD-OB8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>Premium Add-ons</h3>
<p>Premium add-ons turn My Private Site into a comprehensive privacy suite, giving you enterprise-style layered security defenses, smarter oversight, and flexible access, without the complexity or cost.</p>
<p>Advanced AI Crawler Defense, Visitor Intelligence, and Block IP provide protections regardless of whether you’re using any site privacy features.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/B6s8O9VZLc0?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<ul>
<li><a href="https://zatzlabs.com/project/my-private-site-public-pages/" rel="nofollow ugc"><strong>Public Pages 2.0</strong></a>: Allows site operators to designate certain specific pages, or pages with specified prefix, to be available to the public without login. Now also allows public site, private pages. <a href="https://youtu.be/u7BuYtzS_pI" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-advanced-ai-defense/" rel="nofollow ugc"><strong>Advanced AI Crawler Defense</strong></a>: Protect WordPress content from AI crawlers using licensing, opt-out tags, selective bot blocking, and firewall defenses to control and safeguard your data. <a href="https://youtu.be/Eb4qQDafaRk" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-visitor-intelligence/" rel="nofollow ugc"><strong>Visitor Intelligence</strong></a>: Track logins, logouts, failed attempts, and bot activity with a unified log, anomaly detection, and export tools for stronger site oversight and security. <a href="https://youtu.be/TTK8bGVD8pM" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-guest-access/" rel="nofollow ugc"><strong>Guest Access</strong></a>: Grant temporary, secure access to private WordPress content using unique shareable links with expiration, one-time use, and full admin-controlled invite management. <a href="https://youtu.be/j1vYV8lhqcc" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-block-ip/" rel="nofollow ugc"><strong>Block IP</strong></a>: Block unwanted visitors by IP address or range with full IPv4/IPv6 support, configurable scope, and fast enforcement to secure your WordPress site. <a href="https://youtu.be/vsxLqYXWITs" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-tags-and-categories/" rel="nofollow ugc"><strong>Tags & Categories</strong></a>: Allows you to make pages public or (with Public Pages 2.0) private based on tags and categories. <a href="https://youtu.be/dEv7lXxU5lo" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-selective-content/" rel="nofollow ugc"><strong>Selective Content</strong></a>: Allows hiding, showing, and obscurifying page content through the use of shortcodes. Can also selectively hide widgets and sidebars. <a href="https://youtu.be/exgJrJJSCNY" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-pricing/" rel="nofollow ugc"><strong>Digital Fortress Bundle</strong></a>: All add-ons are available in bundle form.  <a href="https://youtu.be/B6s8O9VZLc0" rel="nofollow ugc">Watch the video</a></li>
</ul>
<h3>Limits</h3>
<p>This plugin does not hide non-WordPress web pages, such as .html and .php files. It also won’t restrict images and other media and text files directly accessed by their URL. If your hosting provider’s filesystem protections haven’t been set up correctly, files may also be accessed by directory listing.</p>
<h3>Support Note</h3>
<p>Support has moved to the ZATZLabs site and is no longer provided on the WordPress.org forums. If you need a timely reply from the developer, please <a href="http://zatzlabs.com/submit-ticket/" rel="nofollow ugc">open a ticket</a>.</p>
<h3>Mailing List</h3>
<p>If you’d like to keep up with the latest updates to this plugin, please visit <a href="http://zatzlabs.com/lab-notes/" rel="nofollow ugc">David’s Lab Notes</a> and add yourself to the mailing list.</p>


My Private Site

Make your WordPress site private with one click for family, projects, or teams. Protection for content, login, and registration.

MH User Activity Monitor vs My Private Site