edward_plainview

Activity Monitor tracks all user activity on your blog or network. The activities can be viewed in global table showing activities on the whole network, or locally for just the blog you are currently viewing. The activites can be filtered so that only specific blogs / hooks / IPs / users are displayed.
Monitored actions include (not exhaustive):
<ul>
<li>Comments: approve, held, spam, delete</li>
<li>Custom Post Types: draft, publish, update, trash, delete</li>
<li>Logins: login, login failed, logout</li>
<li>Pageviews: admin, front-end</li>
<li>Passwords: reset, retrieve</li>
<li>Plugins: activate, deactivate</li>
<li>Pages: draft, publish, update, trash, delete</li>
<li>Posts: draft, publish, update, trash, delete, password</li>
<li>Taxonomies: create, edit, delete</li>
<li>Themes: switched</li>
<li>Updates: WordPress core, plugins, themes</li>
<li>Users: register, delete, profile changes</li>
<li>And more….</li>
</ul>
The logged information consists of:
<ul>
<li>A description of what was logged</li>
<li>Blog</li>
<li>Timestamp</li>
<li>Hook that was triggered</li>
<li>User ID</li>
</ul>
<h4>git</h4>
The <a href="https://bitbucket.org/edward_electric/activity-monitor" rel="nofollow ugc">Activity Monitor has a git repository</a>.
<h4>Security tips</h4>
There are several ways for people to break in to your WordPress installation, or cause trouble by DDOS. Here are some tips on how to use the Activity Monitor and its plugins to help detect problems:
<ul>
<li>Get a DDOS protection service with an API. There is a plugin to ban IPs via CloudFlare (Send To CloudFlare). Other APIs could be supported as the need arises.</li>
<li>If you have another DDOS service, write a script that can ban visitors by IP. Use this script with the Send To Exec plugin.</li>
<li>If you can’t ban users using a script, at least set up the Send To E-mail plugin to inform you of suspicious activity.</li>
<li>Use the Bruteforce Detect plugin to detect when an IP or IPs are trying to guess the admin’s password. Ban the IPs automatically using Send To Exec.</li>
<li>Do not use admin as the username for your administrator account. Instead, use some else and add the admin username to the list of banned usernames in the Login Failed Username plugin. Ban the IPs that cause the plugin to react.</li>
</ul>
<h4>Custom hooks</h4>
See the <a href="https://pvactivitymonitor.com/doc/dev/" rel="nofollow ugc">developer documentation</a> for relevant info on how to create custom hooks.

Plainview Activity Monitor

Real-time monitoring of users, content, functionality, appearance, security, and updates.

mirceatm

NMR Strava activities imports athlete activities into your WordPress site as soon as Strava records them—no slow polling. Data is stored locally; developers can react with actions and filters for custom workflows, leaderboards, or integrations.
Why webhooks? Strava can <a href="https://developers.strava.com/docs/webhooks/" rel="nofollow ugc">notify your site</a> when an activity is created or deleted. This plugin subscribes to those events, then fetches full activity details with OAuth and saves them to custom database tables.
You will need:
<ul>
<li>A <a href="https://www.strava.com/settings/api" rel="nofollow ugc">Strava API application</a> (Client ID and Client Secret)</li>
<li>A page or post containing the [strava_nmr] shortcode; its URL must match Redirect URI in both Strava and this plugin’s settings</li>
</ul>
Configure the plugin: WordPress admin → Settings → Strava NMR
<ul>
<li>Strava client id — from your Strava API application</li>
<li>Strava client secret — from your Strava API application</li>
<li>Redirect URI — full URL of the page/post where [strava_nmr] appears (must match Strava’s Authorization Callback Domain / redirect settings)</li>
<li>Webhook callback url — filled automatically; should look like <code>https://yoursite.com/wp-admin/admin-ajax.php?action=nmr-strava-callback&</code> (keep the trailing <code>&</code> if your copy includes it)</li>
<li>Verify token — a secret string you choose; used when Strava validates your webhook subscription</li>
</ul>
After saving, use Activate Strava Webhook. On success, Plugin status shows something like: <code>Strava webhook subscription id = 109463</code>.
Data and privacy
Activities and tokens are stored in your WordPress database. See Privacy Notices below. For GDPR or similar obligations, ensure your site policy explains this processing.
Developer hooks
When an activity is saved or removed, other code can listen:
<pre><code>do_action('strava_nmr_activity_changed', 'update', $activity_data);

do_action('strava_nmr_activity_changed', 'delete', $payload);
</code></pre>
Filter which activities are saved using the activity type (single string, e.g. <code>Run</code>):
<pre><code>function nmr_example_save_only_runs( $activity_type ) {
 if ( strcasecmp( 'Run', $activity_type ) === 0 || strcasecmp( 'VirtualRun', $activity_type ) === 0 ) {
 return $activity_type;
 }
 return false;
}
add_filter( 'nmr_strava_save_activity', 'nmr_example_save_only_runs' );
</code></pre>
Filter using the full Strava activity array (return <code>false</code> to skip import):
<pre><code>add_filter( 'nmr_strava_save_activity_full', function ( $activity ) {
 if ( ! empty( $activity['manual'] ) ) {
 return false;
 }
 return $activity;
} );
</code></pre>
Supported Strava activity types include: AlpineSki, BackcountrySki, Canoeing, Crossfit, EBikeRide, Elliptical, Golf, Handcycle, Hike, IceSkate, InlineSkate, Kayaking, Kitesurf, NordicSki, Ride, RockClimbing, RollerSki, Rowing, Run, Sail, Skateboard, Snowboard, Snowshoe, Soccer, StairStepper, StandUpPaddling, Surfing, Swim, Velomobile, VirtualRide, VirtualRun, Walk, WeightTraining, Wheelchair, Windsurf, Workout, Yoga.
Shortcodes
<ul>
<li><code>[strava_nmr]</code> — OAuth connect flow (optional attributes for labels and <code>require_login</code>)</li>
<li><code>[strava_nmr_connect]</code> / <code>[strava_nmr_disconnect]</code> — logged-in connect/disconnect UI</li>
<li><code>[strava_nmr_table top="100"]</code> — simple HTML table of stored activities (default limit 100)</li>
</ul>
Official listing
Install from <a href="https://wordpress.org/plugins/nmr-strava-activities/" rel="ugc">WordPress.org/plugins/nmr-strava-activities</a>. More info: <a href="https://namir.ro/strava-activities/" rel="nofollow ugc">Plugin URI</a>.
If this plugin saves you time, consider <a href="https://paypal.me/mirceatm" rel="nofollow ugc">making a donation</a>.
<h4>Privacy Notices</h4>
This plugin stores data received from Strava—which may include personal information—in your site’s database. You are responsible for describing this in your privacy policy and for any consent or legal basis required in your jurisdiction.

NMR Strava activities

Sync Strava to WordPress in real time via webhooks. Local storage and developer hooks. Requires a Strava API app.

Plainview Activity Monitor vs NMR Strava activities