bitcoinapi

<p>PermaLogger is a comprehensive WordPress activity logging plugin that tracks user actions and system events in your WordPress admin area. All events are logged locally and can be synced to the PermaLogger external service for immutable storage and analysis using blockchain technology.</p>
<h4>Features</h4>
<ul>
<li><strong>User Login Tracking</strong> – Monitor successful and failed login attempts</li>
<li><strong>Profile Updates</strong> – Track changes to user profiles including password changes</li>
<li><strong>Email Changes</strong> – Log when users update their email addresses</li>
<li><strong>Dashboard Movement</strong> – Track page navigation within the WordPress admin</li>
<li><strong>Post & Page Tracking</strong> – Monitor creation, updates, deletions, and status changes</li>
<li><strong>Content Diff Tracking</strong> – Optional git-style diffs showing exact content changes</li>
<li><strong>Admin Hooks</strong> – Comprehensive tracking of all WordPress admin hooks (optional)</li>
<li><strong>Local Database Storage</strong> – All logs stored in your WordPress database</li>
<li><strong>API Sync</strong> – Automatic syncing to external PermaLogger service</li>
<li><strong>Log Viewer</strong> – Built-in interface to view and filter logs</li>
<li><strong>Pagination & Filtering</strong> – Easy navigation through your activity logs</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Security auditing and compliance</li>
<li>Debugging user-reported issues</li>
<li>Monitoring content changes</li>
<li>Tracking admin activity</li>
<li>Compliance with data regulations</li>
</ul>
<h4>Privacy & Data</h4>
<p>PermaLogger logs user actions including usernames, IP addresses, and timestamps. The plugin can sync this data to an external service (PermaLogger.com) if you provide an API key. You should inform your users about this tracking in your privacy policy.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.0 or higher</li>
<li>bitcoinapi.io API key (get one at https://bitcoinapi.io)</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to the BitcoinAPI external service to sync and store WordPress activity logs. This connection is required for the plugin’s core functionality of providing immutable, blockchain-based log storage.</p>
<p><strong>What is sent:</strong><br />
* User activity data including usernames, user IDs, email addresses, IP addresses<br />
* Timestamps of actions performed<br />
* Details of WordPress actions (login attempts, profile updates, email changes, page/post modifications, admin navigation, etc.)<br />
* Request data associated with tracked events</p>
<p><strong>When is data sent:</strong><br />
* Data is sent automatically when the temporary log file reaches 100KB in size<br />
* Each batch contains all logged events since the last sync<br />
* Syncing only occurs if you have provided a valid API key</p>
<p><strong>Service Information:</strong><br />
* Service Provider: BitcoinAPI<br />
* Service Used: Log Storage and Blockchain Timestamping<br />
* API Endpoint: https://bitcoinapi.io/api/<br />
* Terms of Service: https://bitcoinapi.io/terms<br />
* Privacy Policy: https://bitcoinapi.io/privacy</p>
<p><strong>Important Notes:</strong><br />
* All logs are stored locally in your WordPress database regardless of API sync status<br />
* You must provide a valid API key from https://bitcoinapi.io for external syncing to occur<br />
* Without an API key, the plugin will still log events locally but will not sync externally<br />
* Users should be informed about this data transmission in your site’s privacy policy</p>
<h3>Privacy Policy</h3>
<p>PermaLogger logs user activity on your WordPress site. The following data is collected:</p>
<ul>
<li>Username and user ID</li>
<li>Email address</li>
<li>IP address</li>
<li>Timestamp of actions</li>
<li>Details of actions performed (page visits, content changes, etc.)</li>
</ul>
<p>If you provide an API key, this data is transmitted to BitcoinAPI external service via HTTPS (bitcoinapi.io). Make sure to disclose this data collection in your site’s privacy policy and obtain necessary user consent.</p>
<h3>Support</h3>
<p>For support, feature requests, or bug reports, please visit:<br />
* Plugin Support Forum: (will be available after plugin approval)<br />
* Documentation: https://bitcoinapi.io/docs<br />
* Website: https://bitcoinapi.io<br />
* Contact: support@bitcoinapi.io</p>
<h3>Credits</h3>
<p>Developed by BitcoinAPI<br />
https://bitcoinapi.io</p>


PermaLogger

Track all hookable actions in the WP-Admin area and log them to PermaLogger's external service for comprehensive activity monitoring.

edward_plainview

<p>Activity Monitor tracks all user activity on your blog or network. The activities can be viewed in global table showing activities on the whole network, or locally for just the blog you are currently viewing. The activites can be filtered so that only specific blogs / hooks / IPs / users are displayed.</p>
<p>Monitored actions include (not exhaustive):</p>
<ul>
<li>Comments: approve, held, spam, delete</li>
<li>Custom Post Types:  draft, publish, update, trash, delete</li>
<li>Logins: login, login failed, logout</li>
<li>Pageviews: admin, front-end</li>
<li>Passwords: reset, retrieve</li>
<li>Plugins: activate, deactivate</li>
<li>Pages: draft, publish, update, trash, delete</li>
<li>Posts: draft, publish, update, trash, delete, password</li>
<li>Taxonomies: create, edit, delete</li>
<li>Themes: switched</li>
<li>Updates: WordPress core, plugins, themes</li>
<li>Users: register, delete, profile changes</li>
<li>And more….</li>
</ul>
<p>The logged information consists of:</p>
<ul>
<li>A description of what was logged</li>
<li>Blog</li>
<li>Timestamp</li>
<li>Hook that was triggered</li>
<li>User ID</li>
</ul>
<h4>git</h4>
<p>The <a href="https://bitbucket.org/edward_electric/activity-monitor" rel="nofollow ugc">Activity Monitor has a git repository</a>.</p>
<h4>Security tips</h4>
<p>There are several ways for people to break in to your WordPress installation, or cause trouble by DDOS. Here are some tips on how to use the Activity Monitor and its plugins to help detect problems:</p>
<ul>
<li>Get a DDOS protection service with an API. There is a plugin to ban IPs via CloudFlare (<em>Send To CloudFlare</em>). Other APIs could be supported as the need arises.</li>
<li>If you have another DDOS service, write a script that can ban visitors by IP. Use this script with the <em>Send To Exec</em> plugin.</li>
<li>If you can’t ban users using a script, at least set up the <em>Send To E-mail</em> plugin to inform you of suspicious activity.</li>
<li>Use the Bruteforce Detect plugin to detect when an IP or IPs are trying to guess the admin’s password. Ban the IPs automatically using <em>Send To Exec</em>.</li>
<li>Do not use admin as the username for your administrator account. Instead, use some else and add the admin username to the list of banned usernames in the <em>Login Failed Username</em> plugin. Ban the IPs that cause the plugin to react.</li>
</ul>
<h4>Custom hooks</h4>
<p>See the <a href="https://pvactivitymonitor.com/doc/dev/" rel="nofollow ugc">developer documentation</a> for relevant info on how to create custom hooks.</p>


Plainview Activity Monitor

Real-time monitoring of users, content, functionality, appearance, security, and updates.

PermaLogger vs Plainview Activity Monitor