=== WP Activity Log ===
Contributors: Melapress
Plugin URI: https://melapress.com/wordpress-activity-log/
License: GPLv3
License URI: https://www.gnu.org/licenses/gpl.html
Tags:  activity log, security audit log, user tracking, security event log, audit trail, user activity, changelog, history, log, website changes
Requires at least: 5.0
Tested up to: 6.5.3
Stable tag: 5.0
Requires PHP: 7.2

Keep a comprehensive log of user and system changes that take place on your WordPress website with the the #1 user-rated activity log plugin.

== Description ==

### WP Activity Log is the most comprehensive activity log plugin for logging user and system changes.

Keep an [activity log](https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) of everything that happens on your WordPress sites and multisite networks with the WP Activity Log plugin to:

* Ensure user productivity
* Improve user accountability
* Ease troubleshooting
* Know exactly what all your users are doing
* Better manage & organize your WordPress site & users
* Easily spot suspicious behavior before there are security problems.

[WP Activity Log](https://melapress.com/wordpress-activity-log/features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) is the most comprehensive real-ime user activity and monitoring log plugin. It helps hundreds of thousands of WordPress administrators and security professionals keep an eye on what is happening on their websites and is the most highly-ated activity log plugin for WordPress.

[youtube https://www.youtube.com/watch?v=pgFEMIvKFTA]

[Features](https://melapress.com/wordpress-activity-log/features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) | [Get WP Activity Log Premium](https://melapress.com/wordpress-activity-log/pricing/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) | [Getting Started](https://melapress.com/support/kb/wp-activity-log-getting-started/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)

WP Activity Log has been featured on the websites of some of the most popular and leading businesses in the WordPress ecosystem, such as WPBeginner, GoDaddy, and Kinsta.

#### MAINTAINED & SUPPORTED BY MELAPRESS

Melapress develops high-quality WordPress management and security plugins such as [Melapress Login Security](https://melapress.com/wordpress-login-security/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal), [CAPTCHA 4WP](https://melapress.com/wordpress-captcha/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal), and [WP 2FA](https://melapress.com/wordpress-2fa/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal), the #1 user-rated activity log plugin for WordPress.

Browse our list of [WordPress security and administration plugins](https://melapress.com/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) to see how our plugins can help you better manage and improve the security and administration of your WordPress websites and users.
  
### WordPress changes and details the WP Activity Log keeps a log of
As a comprehensive and thorough activity log solution for WordPress, WP Activity Log not only tells you that a post, a user profile, or an object was updated, it also lets you know exactly what was changed within the post, the user profile, or the object.

Below is a summary of the changes that the plugin can keep a record of:

- **Post, page and custom post type changes** such as status, [content changes](https://melapress.com/support/kb/wp-activity-log-how-keep-record-of-content-changes/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal), title, URL, custom field, and other metadata changes

- **Tags and categories changes** such as creating, modifying or deleting them, and adding or removing them from posts

- **Widgets and menus changes** such as creating, modifying, or deleting them

- **User changes** such as user created or registered, deleted, or added to a site on multisite network

- **User profile changes** such as password, email, display name, and role changes

- **User activity** such as login, logout, failed logins, and terminating other sessions

- **WordPress core and settings changes** such as installed updates, permalinks, default role, URL, and other site-wide changes

- **WordPress multisite network changes** such as adding, deleting or archiving sites, adding or removing users from sites etc ([activity logs for multisite networks](https://melapress.com/support/kb/wp-activity-log-multisite-network-features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)).

- **Plugins and Themes changes** such as installing, activating, deactivating, uninstalling, and updating

- **WordPress database changes** such as when a plugin adds or removes a table

- Changes on **WooCommerce Stores & products**, **Yoast SEO**, **WPForms**, **Gravity Forms**, **Advanced Custom Fields (ACF)**, **MainWP** and other popular WordPress plugins.

- **[WordPress site file changes](https://melapress.com/support/kb/wp-activity-log-wordpress-files-changes-warning-activity-logs/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)** such as new files are added, or existing ones are modified or deleted.

For every event that the plugin records it also reports the:

* Date & time (and milliseconds) of when it happened
* User & role of the user who did the change
* Source IP address from where the change happened
* The object on which the change has taken place

Refer to [WordPress activity log event IDs](https://melapress.com/support/kb/wp-activity-log-list-event-ids/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) for a complete list of all the changes WP Activity Log can keep a record of and a detailed explanation of what change every event ID represents.

### Upgrade to WP Activity Log Premium and get even more

The premium version of WP Activity Log comes bundled with even more features to take your WordPress website administration and security to the next level.

With the premium edition of WP Activity Log, you get:

### Premium features list

- See who is logged to your website in real-time,
- See what everyone is doing in real-time,
- Log off any user with just a click,
- Generate HTML and CSV reports,
- Get notified via email of important changes,
- Get instant SMS message alerts of critical site changes,
- Search filters to fine tune the search results and find what you need in seconds,
- Store activity log in an external database to improve security and scalability,
- Mirror the activity log to logs management systems such as AWS CloudWatch, Loggly and Papertrail in real-time,
- Easily mirror the logs in real-time to business communication systems such as Slack,
- Send a copy of your websites' activity log to a log file on your web server in real-time,
- Archive old activity log data to another database for better storage and log management.

Refer to the [WP Activity Log plugin features and benefits page](https://melapress.com/wordpress-activity-log/features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) to learn more about the benefits of upgrading to WP Activity Log Premium.

#### WP Activity Log third-party plugin support

WP Activity Log can keep also a detailed log of changes that happen on third-party plugins, including:

- <strong>WooCommerce</strong>: Keep a log of changes you and your team do in the WooCommerce store settings, orders, products, coupons, and much more.
- <strong>Yoast SEO</strong>: Keep a log of the Yoast SEO plugin settings changes, and also of the on-page SEO changes you and your team make in the Yoast SEO meta box.
- <strong>WPForms</strong>: Keep a log of the changes your team does in the WPForms plugin settings, forms, form files, entries (leads) and more.
- <strong>Gravity Forms</strong>: Keep a log of the changes your team does in the Gravity Forms plugin settings, forms, forms settings, entries (leads) and more.
- <strong>MemberPress</strong>: Keep a log of the changes in your MemberPress powered website, including plugin settings changes, memberships, payments, subscriptions and other changes that your team does on your website.
- <strong>bbPress</strong>: Keep a log of changes in bbPress forums, topics, bbPress settings and more.
- <strong>MainWP</strong>: Keep a log of the MainWP network changes and can see the activity logs of all child sites from one central location - the MainWP dashboard.

Refer to [activity logs for third party WordPress plugins](https://melapress.com/wordpress-activity-log/third-party-plugins/) for a complete list of all the plugins WP Activity Log can keep a log of.

#### Other Noteworthy Features
On top of the comprehensive activity log, WP Activity Log also has a number of non-logging specific features that make it a complete WordPress logging solution, such as:

- Full [WordPress multisite support](https://melapress.com/support/kb/wp-activity-log-multisite-network-features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- Easily [create your custom alerts & notifications](https://melapress.com/support/kb/wp-activity-log-create-custom-events/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) to monitor additional functionality
- Built-in [support for reverse proxies and web application firewalls](https://melapress.com/support/kb/wp-activity-log-support-reverse-proxies-web-application-firewalls/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- Integration with WhatIsMyIpAddress.com allow you to get all information about an IP address with just a mouse click.
- Limit who can view the WordPress activity log by users or roles
- Settings to [toggle (enable/disable) individual event IDs from the activity log](https://melapress.com/support/kb/exclude-logging-specific-change-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- Configurable dashboard widget highlighting the most recent critical activity
- Configurable [WordPress activity log retention policies](https://melapress.com/support/kb/wp-activity-log-retention-policies/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- User avatar is displayed in the events for better recognizability
- and much more...
    
## Free and premium support

Premium world-class support for WP Activity Log is free via email or through the WordPress support forums.

Note: Paid customer support is given priority and is provided via one-to-one email. Upgrade to Premium to benefit from priority support.

For any other queries, feedback, or if you simply want to get in touch with us, please use our [contact form](https://melapress.com/contact/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal).

### As featured on:

- [Kinsta](https://kinsta.com/blog/wordpress-activity-log/)
- [Pagely](https://pagely.com/blog/2015/01/log-wordpress-dashboard-activity-improved-security-auditing/)
- [Shout Me Loud](https://www.shoutmeloud.com/wordpress-security-audit-log.html)
- [The Dev Couple](https://thedevcouple.com/wp-security-audit-log-review/)
- [WPKube](http://www.wpkube.com/improve-wordpress-security-wp-security-audit-log/)
- [Techwibe](https://www.techwibe.com/wp-security-audit-log-wordpress-plugin/)
- [Tidy Repo](https://tidyrepo.com/wp-security-audit-log-wordpress-activity-log/)
- [KitPloit](http://www.kitploit.com/2016/10/wp-security-audit-log-ultimate.html)
- and many others.

## Related links and documentation:

You can find more detailed information about WP Activity Log and its benefits in the links below

- [The WP Activity Log plugin website](https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- [List of WordPress activity log event IDs](https://melapress.com/support/kb/wp-activity-log-list-event-ids/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- [WP Activity Log benefits and features](https://melapress.com/wordpress-activity-log/features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- [WordPress Multisite Features](https://melapress.com/support/kb/wp-activity-log-multisite-network-features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
- [The definitive WordPress security guide](https://melapress.com/wordpress-security/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)

== Installing WP Activity Log ==

=== Install WP Activity Log from within WordPress ===

1. Visit 'Plugins > Add New'
1. Search for 'WP Activity Log'
1. Install and activate the WP Activity Log plugin
1. Allow or skip diagnostic tracking

=== Install WP Activity Log manually ===

1. Extract the plugin ZIP file and upload it to the `/wp-content/plugins/` directory
1. Activate the WP Activity Log plugin from the 'Plugins' menu in WordPress
1. Allow or skip diagnostic tracking

== Frequently Asked Questions ==

= Does the free version of WP Activity Log limit the data it collects? =
No, the free version does not limit the data the plugin collects. The preium version adds additional features such as extensive log filtering options, external database/log management service integration, user session management, and much more.

= How long can I keep the log data for? =
You can keep the log data for as long as you want to, with no limits whatsoever placed on data retention. You can keep the log data forever if you want to.

= Does the plugin send any log data to Melapress? =
No, the plugin does not send any log data to us whatsoever. The only data we recieve is license data from the premium edition of the plugin.

= Does the plugin receive updates? =
We update the plugin fairly regularly to ensure the plugin continues to run in tip-top shape while adding new features from time to time.

= Will WP Activity Log slow down my website? =
[WP Activity Log will not slow down your website](https://melapress.com/support/kb/wp-activity-log-slow-down-website/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal). Each release is tested before release to ensure it works in the best way possible. Having said that, you need to make sure your WordPress web server has adequate resources to manage the load of your website.

= Support and Documentation =
Please refer to our [support pages](https://melapress.com/support/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) for all the technical and product documentation.

== Screenshots ==

1. The WordPress activity logs from where the site administrator can see all the user and site changes.
2. See who is logged in to your WordPress and manage users sessions with Users Sessions Management.
3. The plugin settings from where site administrator can configure generic plugin settings such as [reverse proxy support](https://melapress.com/support/kb/wp-activity-log-support-reverse-proxies-web-application-firewalls/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal), who can manage the plugin etc.
4. The WordPress audit trail settings from where you can configure automatic pruning of alerts, which timestamp should be used and more.
5. Configuring WordPress email and SMS alerts with the Email & SMS Notifications module.
6. Search in the WordPress activity log with the use filters to fine tune the search results.
7. The Enable/Disable events section from where Administrators can disable or enable activity log events.
8. The Log Viewer of a Super Admin in a WordPress multisite network installation with the Site selection drop down menu.
9. WP Activity Log is integrated with the built-in revision system of WordPress, thus allowing you to see what content changes users make on your WordPress posts, pages and custom post types. For more information read [Keep Record of All WordPress Content Changes](https://melapress.com/support/kb/wp-activity-log-how-keep-record-of-content-changes/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal)
10. Mirror the WordPress activity log to an external solution such as Syslog or Papertrail to centralize logging, ensure logs are always available and cannot be tampered with in the unfortunate case of a hack attack.

== Changelog ==

= 5.0.0 (2024-05-22) =

 * **New Activity Log event IDs**
 
The below event IDs are to keep log of changes in the Advanced Custom Field (ACF) plugin activity:
	* Event ID 10000 - A post type was created
	* Event ID 10001 - A post type was activated/deactivated
	* Event ID 10002 - A post type was renamed
	* Event ID 10003 - A post-type singular name was renamed
	* Event ID 10004 - A post-type key was modified
	* Event ID 10005 - A post types Taxonomies was modified
	* Event ID 10007 - A post type was moved to trash
	* Event ID 10008 - A post type was restored from trash
	* Event ID 10010 - A Taxonomy was created
	* Event ID 10011 - A Taxonomy was activated / deactivated
	* Event ID 10012 - A Taxonomy was renamed
	* Event ID 10013 - A Taxonomy singular label was renamed
	* Event ID 10014 - A Taxonomy key was modified
	* Event ID 10015 - A Taxonomies post type was modified
	* Event ID 10017 - A Taxonomy was moved to trash
	* Event ID 10018 - A Taxonomy was restored from trash
	* Event ID 10019 - A Taxonomy was deleted
	* Event ID 10020 - A Taxonomy term was created
	* Event ID 10021 - A Taxonomy term was renamed
	* Event ID 10022 - A Taxonomy term was deleted
	* Event ID 10023 - A Taxonomy terms slug was modified
	* Event ID 10024 - A posts taxonomy terms were modified 
 
Also in this update, we have added a number of event IDs to keep a log of changes in the WP 2FA plugin and changes in the users' 2FA setup:
	* Event ID 7800 - WP 2FA Enforcement policy updated
	* Event ID 7801 - WP 2FA enforcement policies have been disabled
	* Event ID 7802 - WP 2FA enforcement list was modified
	* Event ID 7803 - WP 2FA exclusion list was modified
	* Event ID 7804 - WP 2FA Enforcement policy updated
	* Event ID 7805 - WP 2FA Trusted device was enabled / disabled
	* Event ID 7806 - WP 2FA trusted device remember length modified
	* Event ID 7807 - WP 2FA require password resets on unblock was enabled / disabled
	* Event ID 7808 - A user configured 2FA
	* Event ID 7809 - A WP 2FA user policy was enabled / disabled a method
	* Event ID 7810 - A user removed the 2FA setup
	* Event ID 7811 - A user has been locked for not configuring 2FA
	* Event ID 7812	- A blocked user has been unblocked

* **New features**
	* Added bulk action options in the Activity Log viewer, allowing admins to disable specific event IDs, or exclude users and IP addresses from the logs using bulk actions.
	* Setting to exclude posts by Post Status in the activity log.

* **Improvements**
	* Integrated the Activity Log extension for MainWP into the core plugin.
	* Resolved multiple MainWP-related issues, improved log extraction, report generation, and overall performance.
	* Improved metadata layout for Event ID 2016, which is reported when a user changes categories on a post.
	* The plugin now stores both user_id and username in the database for all alerts.
	* Every failed login attempt is logged as an individual event in the activity log.
	* Default 'From' email address matches the user's site domain to improve email deliverability.
	* The version of both the previous and new plugin version is now logged in event ID 5004, which is used to keep a log of plugin updates.
	* Fixed a number broken URLs in the free edition of the plugin.
	* Updated and optimized imagery in the free edition for better size and quality.
	* Replaced outdated branding references throughout the plugin.
	* Updated the logo for the Melapress File Monitor plugin in the Settings page.
	* Applied several minor UI and UX tweaks inside the activity log viewer - adjusted width / hight and alignment of some elements.
	* Improved the logic of retrieving user's data from database for better performance.
	* Implemented various minor code tweaks to improve overall plugin speed, performance, and stability.

* **Bug fixes**
	* Corrected the logic and info messages when disabling Event IDs directly from the Activity Log viewer.
	* Resolved an edge case where WP Engine Smart Plugin Manager was returning random usernames as actors when updating plugins on the site.
	* Addressed missing metadata for 'username' in the Custom Email Notification template triggered by failed login attempts.
	* Fixed a bug causing the system info file to display the same title for both Free and Premium editions when both were installed.
	* Resolved an issue where WooCommerce Event ID 9105 was not captured if the user placing the order was not logged in.
	* Corrected class references within the plugin's core (widget sensor).
	* Fixed the built-in notification for failed login attempts to properly show the user's IP address (there were edge cases in which it wasn't).
	* Resolved a bug with the 'hide plugin from other admins' setting that allowed some users to still see the plugin as installed.
	* Fixed numerous PHP warnings generated by the WooCommerce sensor.
	* Resolved an issue causing some Event IDs not to trigger custom notifications if the activity occurred on the site frontend.
	* Corrected the year not being replaced correctly in the main plugin PHP file.
	* Fixed a number of PHP warnings that could be generated by the plugin when WooCommerce orders were placed.
	* Addressed PHP warnings generated by the GravityForms built-in sensor.
	* Fixed a bug which was causing wsal_cleanup cron to not be fired correctly therefore old logs and expired sessions could not have been removed properly.

Refer to the complete [plugin changelog](https://melapress.com/support/kb/wp-activity-log-plugin-changelog/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal) for more detailed information about what was new, improved and fixed in previous version updates of WP Activity Log.
