=== ecSTATic ===
Contributors: Mike Soja
Donate link: http://www.kayak2u.com/
Tags: statistics, stats, visitors, visits, search engine tracker, visitor log, page views, block IPs, graphs, browsers, referrers, login tracker, widget, geoip
Requires at least: 2.7
Tested up to: 3.5.1
Stable tag: 0.987
Faster, Smaller, Non-Ecological Visitor Stats and Management for your Wordpress Blog.
== Description ==
EcSTATic is a fast, flexible, and feature packed visitor logger with a small footprint, for tracking visitors, monitoring the multitudes of bots and spiders, and blocking annoying trackback spammers. It even squirts out a graph or two, if needed.
== Features ==
* Code in two main sections: A small portion that quickly and efficiently records visitors, and a larger suite of files to provide the administrator views.
* More than sixty settings, including when to purge old data, how many hours of most recent visitors to display, ordering of graph displays, whether to log logged-in users or not, how long to wait before counting returning visitor as a *new* hit, whether to send periodic eMails of accumulated stats and in what format, and more.
* Categorizes and tracks Visitors, Feed Reads, and Spider/Bots, and keeps cumulative total of same, both as unique hits and clustered page views (settable) that are permanent (while purging old data from the live tables per your settings).
* Blocks failed login attempts after a certain number that you set.
* Sends daily, weekly, or you set it customizable eMails of the ecSTATic visitor log.
* Shows visitors by IP, User Agent, Referrer, Requested URI, and Domain, in great detail.
* Allows user to classify visitors as Spider/Bot by IP, IP range, User Agent token, or Referrer token, with a few easy clicks. Existing entries are just as easily edited or removed. No need to rely on Updates to categorize your own entries. Comes with a full list of known Spider/Bots.
* Likewise, NoLog, WhiteList, KILL, and XWhiteList flags can be set with simple tokens all in one place, and are easily editable or deleted.
* Export and import your Spider/Bot, KILL, NoLog, WhiteList, and XWhiteList settings for backup and restore.
* The WNKSX table tracks "last seen" activity for all your flags, with cumulative totals in a sortable table.
* A customizable scoring system blocks visitors based on a combination of IP, User Agent, Referrer, Requested URI, Domain Response, and five default items with user-settable thresholds.
* Automatically block unknown visitors who grab a hundred pages in a few seconds with the WFT (Way Too Fast) option.
* Automatically block unknown bots. Unblock them with a couple clicks.
* View stats for Browsers, Operating Systems, Spiders/Bots, Referrers, Search Engine Referrers, Search Phrases, Pages, Categories, and Feed Reads.
* Widgetized! Uses the WordPress widget class (introduced in WordPress version 2.8). Currently displayable stats are "Visitors", "All Pages", "Feed Reeds", "Spider/Bots", "This Page", "Viz Today", "Pages Today", "RSS Today", "Bots Today", and "Visitors Online." All labels are customizable. The display order can be overridden. Style-able via CSS (with included CSS file to get things started.)
* Search the database (now with AJAX, returning results without a full page reload!)
* WHOIS and reverse IP lookup functions are built in, with hooks to Maxmind's geolocation database, with customized links to Google Maps, Project Honeypot, and the RobTex blacklist lookup.
* Comes with a rudimentary Help! file.
* Options data validated and kept within bounds.
* Extensive use of WordPress's wpdb->prepare functions for safe database ins and outs.
* Removes itself completely if you decide to uninstall it. Does NOT make entries in the default Wordpress tables.
* Many other features!
== Installation ==
1. Create a folder/directory named "ecstatic" in your "/wp-content/plugins/" folder/directory
2. Upload the ecSTATic files to the newly created ecstatic folder/directory
3. Activate the plugin through the 'Plugins' menu in WordPress
4. ecSTATic picks it up from there. Look for a new button at the lower end of the dashboard menu buttons. Allow a little time for visitors stats to accrue. Visit the Settings page. Enjoy.
== Screenshots ==
1. Main Page `screenshot-1.png`
2. Options Page `screenshot-2.png`
3. Details Page `screenshot-3.png`
== Changelog ==
= 0.987 =
* April 1, 2013
* Added "Load Latest" and "Load All" buttons to the top of the Main Panels and Sequential View pages. "Load Latest" retrieves all hits since the last *manual* ecSTATic refresh. Using your browser's F5 refresh button, or setting an automatic refresh on the page after a "Load Latest" press will continue to use the previous "Load Latest" time value. It's a feature! Use "Load All" to break out of the "Load Latest" loop, or use "Load Latest" again to set a new value.
* More tweaks and code cleanup related to the CIDR preference.
* Tweaks to the Permalinks URI parsing.
= 0.986 =
* March 3, 2013
* Changed the "Options" menu name in the WordPress dashboard ecSTATic menu to "Settings".
* Updated column displays to remove duplicate columns for those using the new raw Requested URI Setting.
* Opened the door to IPv6 addresses. A user reported all IPv6 visitors were being blocked. They are now allowed through, unless the filter_var() function (only available with PHP 5.2 and above) flags them as invalid. For those not running PHP 5.2 or above, a possibly dodgy regex expression test is given. ---*** Attempting to use ecSTATic to block IPv6 addresses will NOT work. ***---
* Added the option to roll your own .CSS file that won't be overwritten with plugin upgrades. The program checks "../wp-content/ecstatic/" for the file "my_ecstatic.css", and if found, loads it, *after* loading ecstatic.css from the ecstatic plugin directory. Create a new folder "ecstatic" in the "wp-content" folder. Copy your tweaked "my_ecstatic.css" file into that folder, and keep your personal settings there. Do NOT just copy "ecstatic.css" to the "wp-content/ecstatic/my_ecstatic.css", as you'll be loading all the settings twice. Use "my_ecstatic.css" to overwrite a subset of individual styles, and when I add new styles with upgrades, they'll still show up.
* By popular request: Added a Manual Purge Setting. There is a new Manual Purge menu option in the WordPress dashboard ecSTATic menu, whether or not the Manual Purge Option is enabled. If the Setting is enabled, automatic purging is turned off, and buttons magically appear at the top of the Main and Sequential pages. Non-automatic purging can take some time, depending on the number of items to be deleted from the database.
* By popular request: The purge routine no longer combines purges of regular visitors, RSS feeds, and Spider/Bots if their values are equal to each other. It gives more detailed feedback, at some slight loss in speed.
* By popular request: Added a Setting to prefer CIDR notation in the WNKS table, over ecSTATic's DOS-like IP range descriptors. Visitor IPs will be compared to the CIDR entries for blocking, etc. The "Near IPs" tab in the Details pages will NOT find nearby CIDR entries in its little search.
= 0.9841 =
* February 28, 2013
* More tweaking of Permalinks URI parsing.
* Added Option to Miscellaneous Settings to show raw Requested URIs in all the listings, instead of parsed, abbreviated ones.
* Other tweaks geared toward simplicity, reducing db calls, and increasing speed.
= 0.983 =
* February 27, 2013
* Rewrote the URI parsing for Permalinks. I think I got it this time. Simpler. More complete.
= 0.982 =
* January 27, 2013 one bug
* An inappropriate semicolon had the process_login_fails() function hooked, even when disabled.
= 0.981 =
* January 26, 2013 Small changes
* Changed the failed Login option parameters from TINYINT to SMALLINT to allow greater ranges.
* In the "Login Locker" option block, setting the third paramater (blocking minutes) to zero forces the program to calculate an appropriate blocking time on a sliding scale based on the number of minutes a visitor took to execute X number of failed Logins. See Options page for details.
* Added code to prevent Administrators from being locked out accidentally. A couple of people wrote about that.
= 0.98 =
* December 13, 2012
* Added new routines to track attempted Logins, both those that come in through the front Login door, and those that take the form of forged Cookies. The user (that's you) specifies the number of attempted logins allowed over a designated period, and how long the IP is banned for exceeding that limit. The old Anti-Maleagent Scoring Option -- Req. URI with 'login.php' -- is kaput. Rather than scoring every instance of wp-login.php, which was problematic, at best, a hard limit (or no limit) is applied to the number of failed attempts.
* Added [logins] tag and logins tally to the Sequential Log eMail. See the Options page for more.
* Added an X-ecSTATic header to the Sequential Log eMail options. Provides a user settable x-header that some eMail clients can use for filtering or classification.
* Squashed bugs in the Sequential Log eMail suite related to the (now not so) recent switch to Daylight Saving Time.
* Fixed a bug where an unresolved Domain in the Main or Sequential pages was then resolved in the Details page, but with criss-crossed variables leaving a blank Domain tab.
* Tweaked the new "Near IPs" tab some more. Added another small table, populated with IPs and Domains similar to the current visitor that have been previously scored, drawn from the main IP Table, representing Scored entities NOT in the WNKS Table. Non-editable.
* The new tables in the "Near IPs" tab are sorted by IP, for which PHP's natsort() function is very handy. That started me thinking about the other ecSTATic tables, which are sorted with Michael Leigeber's TinyTable javascript sorting routine, which does a great job, but doesn't handle natural sorts. Javascript, surprisingly, offers no function comparable to PHP's natsort(), but after a little searching, I found Jim Palmer's Javascript Natural Sort Algorithm With Unicode Support. After that, it only took about six hours to splice the two routines together. In the end, it amounted to about 70 characters of new code, or two lines, plus the new natsort function. Sweet. So, now, to invoke the Natural Sort in your own projects, burnish the appropriate | tag with "class='natsort'" (the other available tag is "class='nosort'"). All the ecSTATic IP lists are now NatSorted, which is mo better than plain ASCII sorting.
* Re-re-re-refined the Referrer strings in all pages to improve sort results and general appearance.
* Semi-major change: After being schooled in this thread, I opted to move the Maxmind Geolocation files to wp-content/ecstatic, as Ipstenu suggested. If you choose to download the Maxmind databases (instead of relying on the default, but external third party geoPlugin which act as a middleman between you and the Maxmind databases), see the Help file for which files to download, then stick them in wp-content/ecstatic (which you'll have to create), rather than in the ecstatic plugin folder as you used to. In the new location they won't be deleted on every ecSTATic upgrade.
* Thanks to user Alex, I found an unused ".boti" in ecstatic.css, which coincidentally matched an undefined "class='botp'" in ecstatic_interface.php. The CSS definition now reads ".botp" in ecstatic.css.
* Option maxtoshow (max number of entries to show in Details pages was never upgraded from TINYINT to SMALLINT across some versions.
* Fixed sloppy MySQL query string feeding the "Near IPs" tab in the Details pages. That showed up in the new WordPress 3.5.
= 0.972 =
* February 17, 2012 Tweaks.
* Added "Seen X times" to Details report at top of page. Saves scrolling through the WNKS table.
* Fine tuned the new "Near IPs" tab to better highlight overlapping and contained ranges.
= 0.971 =
* February 16, 2012 Bug fix.
* eMail time setting routine was wrong.
= 0.97 =
* February 15, 2012 Late Valentines Edition
* Referrer entries in the SomeStats small graphs page are now clickable, and zoom you away to the referring party's website.
* Cleaned up the Widget code and added a "Visitors Online" variable, ie. a count of unique IPs from the previous hour, for possible Widget output. Visit your Admin Widget page to fidget with the Widget, and don't forget the Widget must also be enabled in ecSTATic Options.
* Added a new tab to the Details page: Near IPs. The new routine takes the current visitor IP and pulls nearby Ranges from the WNKS table. Helps eliminate near duplicate or overlapping range entries, and can help with consolidating adjacent ranges, thereby reducing unnecessary WNKS entries. As with the WNKS table, entries may be edited in place, thanks to the magic of jQuery.
* Added a big new Option, to facilitate a daily, weekly, or any other regularly periodic eMailing of ecSTATic visitor logs to the address of your choice. The body of the eMail resembles the Sequential page output, complete with clickable referrers and whatnot. Numerous options abound. Thanks to user Robert for this and other ideas.
|