WP Security Audit Log - Version 1.2.9

Version Description

(2014-10-21) = * Bug Fix * Fixed an issue with the queries used for the alerts pruning as reported in this support ticket.

Download this release

Release Info

Developer WPWhiteSecurity
Plugin Icon 128x128 WP Security Audit Log
Version 1.2.9
Comparing to
See all releases

Code changes from version 1.2.8 to 1.2.9

Files changed (5) hide show
  1. classes/DB/OccurrenceQuery.php +16 -10
  2. classes/Loggers/Database.php +3 -0
  3. classes/Sensors/PhpErrors.php +2 -0
  4. readme.txt +9 -3
  5. wp-security-audit-log.php +1 -1
classes/DB/OccurrenceQuery.php CHANGED
@@ -72,17 +72,23 @@ class WSAL_DB_OccurrenceQuery extends WSAL_DB_Query {
72
  }
73
 
74
  public function Delete(){
75
- // delete meta data: back up columns, remove them for DELETE and generate sql
76
- $cols = $this->columns;
77
- $this->columns = array('occurrence_id');
78
- $tmp = new WSAL_DB_Meta();
79
- $sql = 'DELETE FROM ' . $tmp->GetTable() . ' WHERE occurrence_id IN (' . $this->GetSql('select') . ')';
80
 
81
- // restore columns
82
- $this->columns = $cols;
83
-
84
- // execute query
85
- call_user_func(array($this->ar_cls, 'DeleteQuery'), $sql, $this->GetArgs());
 
 
 
 
 
 
 
 
86
 
87
  // delete occurrences
88
  parent::Delete();
72
  }
73
 
74
  public function Delete(){
75
+ global $wpdb;
76
+ // get relevant occurrence ids
77
+ $occids = $wpdb->get_col($this->GetSql('select'));
 
 
78
 
79
+ if (count($occids)) {
80
+ // delete meta data: back up columns, remove them for DELETE and generate sql
81
+ $cols = $this->columns;
82
+ $this->columns = array('occurrence_id');
83
+ $tmp = new WSAL_DB_Meta();
84
+ $sql = 'DELETE FROM ' . $tmp->GetTable() . ' WHERE occurrence_id IN (' . implode(',', $occids) . ')';
85
+
86
+ // restore columns
87
+ $this->columns = $cols;
88
+
89
+ // execute query
90
+ call_user_func(array($this->ar_cls, 'DeleteQuery'), $sql, $this->GetArgs());
91
+ }
92
 
93
  // delete occurrences
94
  parent::Delete();
classes/Loggers/Database.php CHANGED
@@ -8,6 +8,9 @@ class WSAL_Loggers_Database extends WSAL_AbstractLogger {
8
  }
9
 
10
  public function Log($type, $data = array(), $date = null, $siteid = null, $migrated = false) {
 
 
 
11
  // create new occurrence
12
  $occ = new WSAL_DB_Occurrence();
13
  $occ->is_migrated = $migrated;
8
  }
9
 
10
  public function Log($type, $data = array(), $date = null, $siteid = null, $migrated = false) {
11
+ // is this a php alert, and if so, are we logging such alerts?
12
+ if ($type < 0010 && !$this->plugin->settings->IsPhpErrorLoggingEnabled()) return;
13
+
14
  // create new occurrence
15
  $occ = new WSAL_DB_Occurrence();
16
  $occ->is_migrated = $migrated;
classes/Sensors/PhpErrors.php CHANGED
@@ -8,6 +8,8 @@ class WSAL_Sensors_PhpErrors extends WSAL_AbstractSensor {
8
  0001 => array(1,4,16,64,256,4096), // errors
9
  0002 => array(2,32,128,512), // warnings
10
  0003 => array(8,1024,2048,8192,16384), // notices
 
 
11
  );
12
 
13
  protected $_maybe_last_error = null;
8
  0001 => array(1,4,16,64,256,4096), // errors
9
  0002 => array(2,32,128,512), // warnings
10
  0003 => array(8,1024,2048,8192,16384), // notices
11
+ 0004 => array(), // exceptions
12
+ 0005 => array(), // shutdown
13
  );
14
 
15
  protected $_maybe_last_error = null;
readme.txt CHANGED
@@ -4,10 +4,10 @@ Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=payme
4
  Plugin URI: http://www.wpwhitesecurity.com/wordpress-security-plugins/wp-security-audit-log/
5
  License: GPLv3
6
  License URI: http://www.gnu.org/licenses/gpl.html
7
- Tags: wordpress security plugin, wordpress security audit log, audit log, wordpress log, event log wordpress, wordpress user tracking, wordpress activity log, wordpress audit, security event log, audit trail, security audit trail, wordpress security alerts, wordpress monitor, wordpress security monitor, wordpress admin, wordpress admin monitoring, analytics, activity, admin, multisite, wordpress multisite, actions, dashboard, log, notification, wordpress monitoring
8
  Requires at least: 3.6
9
  Tested up to: 4.0
10
- Stable tag: 1.2.8
11
 
12
  Identify WordPress issues before they become a security problem by keeping an audit log of users and all of the under the hood WordPress activity.
13
 
@@ -122,7 +122,7 @@ To keep yourself updated with what is new and updated in our WordPress security
122
 
123
  = How can I prune WordPress security events? =
124
 
125
- By default the plugin will keep 5,000 events. When this limit is reached, older events are deleted to make place for the new ones. You can configure the plugin to keep more events from the settings page. You can also configure the plugin to delete events which are older than a number of days.
126
 
127
  = Is there a complete list of all WordPress security audit events? =
128
  Yes. A complete list can be found [here](http://www.wpwhitesecurity.com/wordpress-security-plugins/wp-security-audit-log/security-audit-alerts-logs/)
@@ -134,6 +134,8 @@ Yes it is possible to disable (and re-enable) specific WordPress security alerts
134
  = Can WP Security Audit Log plugin work and monitor activity on WodPress Multisite? =
135
  Yes, WP Security Audit Log works on WordPress Multisite networks, i.e. it can monitor user and under the hood WordPress activity on WordPress multisite installations. For more information refer to the post [WP Security Audit Log Features for WordPress Multisite installation](http://www.wpwhitesecurity.com/wordpress-plugins/wp-security-audit-log-plugin-features-wordpress-multisite/).
136
 
 
 
137
  == Screenshots ==
138
 
139
  1. The Audit Log Viewer from where the WordPress administrator can see all the security events generated by WP Security Audit Log WordPress plugin.
@@ -144,6 +146,10 @@ Yes, WP Security Audit Log works on WordPress Multisite networks, i.e. it can mo
144
 
145
  == Changelog ==
146
 
 
 
 
 
147
  = 1.2.8 (2014-10-14) =
148
  * New Feature
149
  * Added new Extensions page to allow users to see which extensions they can use to increase the functionality of the plugin
4
  Plugin URI: http://www.wpwhitesecurity.com/wordpress-security-plugins/wp-security-audit-log/
5
  License: GPLv3
6
  License URI: http://www.gnu.org/licenses/gpl.html
7
+ Tags: wordpress security plugin, wordpress security audit log, audit log, wordpress log, event log wordpress, wordpress user tracking, wordpress activity log, wordpress audit, security event log, audit trail, security audit trail, wordpress security alerts, wordpress monitor, wordpress security monitor, wordpress admin, wordpress admin monitoring, analytics, activity, admin, multisite, wordpress multisite, actions, dashboard, log, notification, wordpress monitoring, email notification, wordpress email alerts
8
  Requires at least: 3.6
9
  Tested up to: 4.0
10
+ Stable tag: 1.2.9
11
 
12
  Identify WordPress issues before they become a security problem by keeping an audit log of users and all of the under the hood WordPress activity.
13
 
122
 
123
  = How can I prune WordPress security events? =
124
 
125
+ By default the plugin will keep 5,000 WordPress Security Alerts. When this limit is reached, older alerts are deleted to make place for the new ones. You can configure the plugin to keep more alerts from the settings page. You can also configure the plugin to delete alerts which are older than a number of days.
126
 
127
  = Is there a complete list of all WordPress security audit events? =
128
  Yes. A complete list can be found [here](http://www.wpwhitesecurity.com/wordpress-security-plugins/wp-security-audit-log/security-audit-alerts-logs/)
134
  = Can WP Security Audit Log plugin work and monitor activity on WodPress Multisite? =
135
  Yes, WP Security Audit Log works on WordPress Multisite networks, i.e. it can monitor user and under the hood WordPress activity on WordPress multisite installations. For more information refer to the post [WP Security Audit Log Features for WordPress Multisite installation](http://www.wpwhitesecurity.com/wordpress-plugins/wp-security-audit-log-plugin-features-wordpress-multisite/).
136
 
137
+ = Can I receive an email notification when a specific change happens on WordPress? =
138
+ Yes it is possible to do so with the [WSAL Notifications Extension](http://www.wpwhitesecurity.com/plugins-premium-extensions/email-notifications-wordpress/). This plugin extension enables you to configure triggers to monitor for specific changes and when such changes take place an email is automatically sent to your email address of choice with all the details of such change such as the Alert ID, user, user role, date, time, details about the actual change and more.
139
  == Screenshots ==
140
 
141
  1. The Audit Log Viewer from where the WordPress administrator can see all the security events generated by WP Security Audit Log WordPress plugin.
146
 
147
  == Changelog ==
148
 
149
+ = 1.2.9 (2014-10-21) =
150
+ * Bug Fix
151
+ * Fixed an issue with the queries used for the alerts pruning as reported in this [support ticket](https://wordpress.org/support/topic/this-version-of-mysql-doesnt-yet-support).
152
+
153
  = 1.2.8 (2014-10-14) =
154
  * New Feature
155
  * Added new Extensions page to allow users to see which extensions they can use to increase the functionality of the plugin
wp-security-audit-log.php CHANGED
@@ -4,7 +4,7 @@ Plugin Name: WP Security Audit Log
4
  Plugin URI: http://www.wpwhitesecurity.com/wordpress-security-plugins/wp-security-audit-log/
5
  Description: Identify WordPress security issues before they become a problem and keep track of everything happening on your WordPress, including WordPress users activity. Similar to Windows Event Log and Linux Syslog, WP Security Audit Log will generate a security alert for everything that happens on your WordPress blog or website. Use the Audit Log Viewer included in the plugin to see all the security alerts.
6
  Author: WP White Security
7
- Version: 1.2.8
8
  Text Domain: wp-security-audit-log
9
  Author URI: http://www.wpwhitesecurity.com/
10
  License: GPL2
4
  Plugin URI: http://www.wpwhitesecurity.com/wordpress-security-plugins/wp-security-audit-log/
5
  Description: Identify WordPress security issues before they become a problem and keep track of everything happening on your WordPress, including WordPress users activity. Similar to Windows Event Log and Linux Syslog, WP Security Audit Log will generate a security alert for everything that happens on your WordPress blog or website. Use the Audit Log Viewer included in the plugin to see all the security alerts.
6
  Author: WP White Security
7
+ Version: 1.2.9
8
  Text Domain: wp-security-audit-log
9
  Author URI: http://www.wpwhitesecurity.com/
10
  License: GPL2