Lançamento: WhatsApp API Confira agora
Lançamento: WhatsApp API. Gerenciamento completo com estabilidade.
Confira agora
521 produtos atualizados nos últimos 7 dias Todos os sistemas operacionais
Fornecendo atualizações automáticas para 1.329 sites
Painel
521 produtos atualizados nos últimos 7 dias

Changelog do Visitor Traffic Real Time Statistics Pro

O que mudou em cada versão, da mais recente para a mais antiga. As notas são as publicadas pelo desenvolvedor, no idioma original.

  • Mais recente 11.26
  • 137 versões

Sem data

137 versões

Versão 11.26

Mais recente
8 melhorias 1 correção 1 reforço de segurança Assinar para baixar a versão 11.26

Melhoria

  • Stronger bot filtering: crawlers and automated browsers that run JavaScript but do not call themselves "bot" (GoogleOther, Google-InspectionTool, Chrome-Lighthouse, HeadlessChrome, Puppeteer/Playwright/Selenium, uptime monitors, HTTP libraries, AI crawlers...) are no longer counted. Both the real request User-Agent and the one reported by the page are checked, and automated browsers (navigator.webdriver) are ignored. Real visitors on CUBOT phones are counted again.
  • Pages prerendered by the browser are only counted when the visitor actually opens them. Chrome prerenders top Google results, which was inflating "search engine visits".
  • Accurate time on site: engaged time is measured in the browser (visible tab + recent interaction) and reported per page view. It replaces the Heartbeat-based duration, which kept counting for idle/background tabs and measured the first-to-last request of an IP over the whole day. Single-page visits are part of the average. Visits recorded before 11.26 show "-" instead of an invented value. The "Engaged" journey filter and the duration sort use the new value.
  • "Online now" is kept up to date by a lightweight report every 60 seconds while the visitor's tab is visible (background tabs no longer count as online).
  • Clearer traffic sources: each visit is counted once, under the source of its first page (Organic Search, Direct, Referral, Social Media, UTM Traffic). Google visits now appear under Organic Search, and Gmail, Google Docs, Translate and similar links are no longer counted as search engine visits.
  • More accurate countries: the visitor IP is taken from Cloudflare/CDN headers first, internal proxy addresses are skipped, "IP:port" values are understood, the city is no longer borrowed from a different country, and the location cache now expires after 30 days.
  • Visitors whose IP cannot be determined are no longer counted as a new visitor on every page view.
  • Database schema checks (including ALTER TABLE statements) no longer run on every request, only once after an update. The front end no longer loads jQuery and WordPress Heartbeat for visitors, and the visitor IP is no longer printed into the page HTML.

Correção

  • Search engine and referral visits were counted twice for every new visit, and once more on every reload of an already-recorded page. Each visit is now counted once.

Segurança

  • The visitor IP is now strictly validated before it is stored (forged X-Real-IP / X-Forwarded-For headers could store arbitrary text). The Heartbeat receiver that trusted an IP sent by the browser was removed.

Versão 11.25

5 novidades 4 melhorias 2 correções

Novidade

  • "Visitors by Country" map - countries are shaded by their number of visitors, with a ranked list (flag, visitors, share and change vs. the previous period), a hover card per country and a range switcher (today, 7 days, 30 days, all time, online now). Borders ship with the plugin, so the map no longer loads tiles from OpenStreetMap.
  • The [ahcpro_show_google_map] shortcode shows the new map and now honours its map_status attribute; new show_list and height attributes. Older map_status values keep working.
  • "First-time visitors" in the Traffic Report - the new-visitor part of each day's column is shown in orange, with a total in the legend and the share in the hover card. Visitors from before this version are taken from the stored visits, so they are not counted as new.
  • Dashboard header with the new plugin logo, the site name and a live clock in the site's time zone (it showed the browser's time before).
  • "Default Traffic Report Range" setting (7 / 14 / 30 days, this month, last month, 12 months) replaces the free day count, and the report opens on it.

Melhoria

  • "Visits by Time of Day" summary cards redesigned (icons, clearer "Right now" card).
  • Dashboard layout on phones and tablets - the summary boxes fill the width (4 / 2 / 1 per row), equal side margins, and tables such as "Traffic Sources" fit small screens.
  • Statistics are kept for at least 90 days (default 90; the 30-day option was removed, an existing 30-day setting now keeps 90 days).
  • The "Search Engine Statistics" table was removed from the dashboard (the all-time total stays in the top box).

Correção

  • The Traffic Report legend could be hidden behind the comparison cards when the range buttons wrapped onto two lines.
  • The Traffic Report showed a duplicate range button when the day count was set to 7 or 30.

Versão 11.24

6 novidades 3 melhorias 5 correções

Novidade

  • Traffic Report redesign - range buttons (14 / 7 / 30 days, this month, last month, 12 months, custom), visitor columns with a page-views line, and comparison cards (visitors, page views, pages per visitor, best day) against the previous period.
  • "This month" forecast - the rest of the month is estimated from the same weekdays over the last 4 weeks, with an expected month total. Today's still-running day is marked as "Today so far".
  • "Visits by Time of Day" redesign - 24-hour chart, peak / quietest hour, busiest part of the day and "right now" vs. a usual hour, plus a "View more details" window with a weekday x hour heat map and an hourly table.
  • "Recent Visits & Page Journeys" (formerly "Last 30 Days Traffic by IP") - one-line rows with the last page viewed, and each visitor's page journey opens inline when the row is clicked.
  • "Online Now" window (click the Online Users box) - visitors online right now with their current page, device and status, auto-refresh every 10 seconds and pagination.
  • "Browsers & Search Engines" - one panel with ranked bars and shares replaces the two pie charts.

Melhoria

  • "Traffic by Title" table - rank badges, unique visitors, share bars, colour-coded bounce rate and a "View stats" button; the page statistics window was redesigned to fit the screen without scrolling.
  • Charts are now drawn by the plugin itself (no extra library) and their axes fit the data closely.
  • "Top Referring Countries" is hidden for now.

Correção

  • Page URLs were shown with a doubled "http://" in the visitor journey.
  • Page statistics showed two identical lines (a page is recorded once per visitor per day); it now shows visitors per day plus visits, unique and returning visitors, uses the site's time zone, filters by site on multisite and no longer falls back to all-time data for an empty period.
  • The dashboard script could keep serving an old cached copy after an update (behind CDNs such as Cloudflare).
  • A details window could flash briefly on every page load.
  • "Visits by Time of Day" no longer builds its SQL from unescaped date input.

Versão 11.23

4 reforços de segurança Assinar para baixar a versão 11.23

Segurança

  • Fixed an unauthenticated stored XSS vulnerability via the "page_title" parameter of the visitor-tracking endpoint (ahcpro_track_visitor). A crafted page title could be stored in the title-traffic table and execute in the admin dashboard when the "Traffic by Title" table was loaded. Page titles, user agents and referers are now stripped of any HTML on storage (both in the AJAX handler and in the hit counter itself), and page titles and links are escaped on output, so payloads stored by older…
  • Fixed reflected XSS in the dashboard date-range search fields, which echoed submitted values back into the page without escaping.
  • Hardened output escaping in the "Latest Search Words" block and in the mobile-app REST API (page titles, keywords and referers are no longer returned with markup).
  • Admin redirects now use wp_safe_redirect, and the database index upgrade routine validates table/index identifiers before running.

Versão 11.22

1 reforço de segurança Assinar para baixar a versão 11.22

Segurança

  • Fixed a stored XSS vulnerability in the search-keywords path of the visitor-tracking endpoint. An unauthenticated visitor could submit a crafted "referer" (e.g. a search-engine URL whose query string contained a percent-encoded HTML payload) that survived URL sanitization, was decoded back to markup, stored in the keywords table, and executed in the admin dashboard when viewing the Latest Search Words / keywords report. Extracted keywords are now stripped of any HTML on storage and escaped on…

Versão 11.21

1 correção Assinar para baixar a versão 11.21

Correção

  • Prevented a fatal error on older PHP versions (below 7.1) where autoloading the bundled MaxMind GeoIP2 library could crash the visitor-tracking request (HTTP 500), causing visits to not be recorded. On such servers the plugin now safely skips the local GeoIP database reader and falls back to the other geolocation methods (Cloudflare headers, permanent cache, external API), so tracking keeps working. The reader initialization was also hardened to catch a broader range of runtime errors and log…

Versão 11.20

1 melhoria Assinar para baixar a versão 11.20

Melhoria

  • The CanvasJS charting library (~527 KB) is no longer loaded for regular front-end visitors. It is only enqueued in the admin dashboard and, on the front-end, only for logged-in administrators who can see the admin-bar chart. This improves front-end PageSpeed / Total Blocking Time with no change to the charts.

Versão 11.19

1 reforço de segurança

Segurança

  • Fixed a stored XSS vulnerability where an unauthenticated visitor could submit a crafted page URL (and related fields) through the visitor-tracking endpoint that would execute in the admin dashboard when viewing the IP Tracking / visitor path modal. Visitor-supplied URLs, titles and related fields are now sanitized on storage and escaped on output (both server-side and in the admin JavaScript).

Versão 11.18

2 reforços de segurança

Segurança

  • Fixed a SQL injection in the admin "custom duration" statistics AJAX endpoint, where a custom date range (from/to) was used to build a query without validation. Date-range values are now strictly validated as real calendar dates before use.
  • Added a login + capability (and nonce) check to the custom-duration statistics AJAX endpoint, which previously had none, so site analytics can no longer be pulled by unauthenticated or low-privilege requests.

Versão 11.17

2 reforços de segurança

Segurança

  • Fixed an authentication-bypass affecting the mobile-app REST API (traffic/statistics/v1). Before the app was paired, the app key was empty and a request sending an empty KEY header could pass the check; the key check now fails closed when no key has been generated or when the supplied key is empty, and uses a timing-safe comparison. Legitimate paired apps are unaffected.
  • Hardened all mobile-app REST report queries against SQL injection by ensuring every user-supplied value (IP address, dates, search terms) is parameterized via $wpdb->prepare and all pagination values are cast to integers.

Versão 11.16

2 melhorias 3 correções Assinar para baixar a versão 11.16

Melhoria

  • When Google Search Console isn't connected, the "Latest Search Words" widget now shows a cleaner message with a clear "Open API Settings" button that links straight to the Google Console API tab (instead of a brown inline link that opened the general settings tab). The settings page also now opens the correct tab when the URL includes a tab parameter.
  • Simplified the Google Search Console setup guide from six steps down to two. The guide now uses a single Google link that creates the project and enables the Search Console API together, plus a direct link to the Service Account creation page, and the settings page shows the service account email with a one-click Copy button as soon as a valid JSON is added, so it can be pasted into Search Console before testing the connection.

Correção

  • The admin dashboard JavaScript is now versioned by the plugin version, so browsers and page-cache/optimization plugins reliably load the latest script after every update instead of serving a stale cached copy. This is why some UI changes previously appeared not to take effect until the cache was cleared by hand.
  • Campaign visits (UTM) now appear in the Traffic Sources report under their own "UTM Traffic" category. Newsletter/email links carry no HTTP referer, so campaign visits were previously counted as "Direct". Campaign visits with no real referer are now tagged and shown as a distinct "UTM Traffic" source (e.g. "newsletter (email)"), separate from Direct and Referral, and are not double-counted. Campaign labels are intentionally kept out of the "Referring Sites" report so that report continues to…
  • Google Search Console "Sync Now" no longer creates duplicate keyword rows on every run. The duplicate-check queries were reading from prefixed table names that did not exist, so the check never matched and each sync re-inserted the same keywords (plus duplicate source/country lookup rows). The read queries now match the plugin's actual table names.

Versão 11.15

1 novidade Assinar para baixar a versão 11.15

Novidade

  • UTM campaign support. Visits arriving with utm_source/utm_medium (e.g. from newsletter or email links) are now detected and recorded as a traffic source in the "Referring Sites" report, shown as "source (medium)". This fixes email/newsletter traffic previously appearing as Direct because such links carry no HTTP referer. UTM parameters are also detected inside redirect/click-tracking links.

Versão 11.14

1 melhoria 1 correção

Melhoria

  • Front-end script version now follows the plugin version for proper cache-busting on updates.

Correção

  • Visitor tracking script (front.js) no longer depends on jQuery, so it loads and records visits even on sites that defer or remove jQuery via performance/optimization plugins. This resolves cases where statistics were not being recorded on some sites.

Versão 11.13

1 melhoria

Melhoria

  • Page-title traffic is now recorded for custom post types as well, not only built-in posts, pages, and WooCommerce products. Non-content views (home, blog, and archive pages) remain excluded.

Versão 11.12

1 correção

Correção

  • The IP Tracking modal ("day hits") now uses the raw visit date when looking up page visits, so sessions recorded near midnight no longer show "No page visits found" when the hit counter shows visits.

Versão 11.11

1 melhoria 4 reforços de segurança Assinar para baixar a versão 11.11

Melhoria

  • Performance improvements

Segurança

  • Hardened all report REST routes and admin AJAX endpoints against SQL injection by parameterizing every query and forcing pagination values to integers.
  • Fixed a stored/second-order SQL injection where the custom timezone setting was saved without validation; timezone values are now validated against known timezone identifiers and UTC offsets before storage.
  • Added capability checks to the admin-facing statistics AJAX endpoints so site analytics can no longer be requested by unauthenticated or low-privilege users.
  • Fixed reflected XSS and SQL injection in the IP history endpoint (output escaped, inputs sanitized and parameterized).

Versão 11.9.12

1 melhoria

Melhoria

  • Tidied the Geolocation settings panel layout, clearer header, a proper status box with the database state and update button aligned, and consistent spacing between fields.

Versão 11.9.11

2 melhorias

Melhoria

  • Long IP addresses (IPv6 and masked/long IPv4) in the "Last 30 Days Traffic by IP" report are now neatly truncated with an ellipsis so they no longer stretch the column. The full address still shows on hover and is preserved when copying or exporting to Excel.
  • The Excel export Location column no longer includes empty trailing commas when a city/region is unavailable.

Versão 11.9.10

1 melhoria 1 correção 1 reforço de segurança

Melhoria

  • External-API enrichment is now OFF by default and is force-disabled on upgrade to immediately restore site responsiveness. You can re-enable it from the settings page once stability is confirmed.

Correção

  • Resolved a server slowdown/timeout (Cloudflare 522) that could occur on busy sites. The background "fill missing cities" cron ran every minute and could tie up PHP workers via WordPress's inline cron.

Segurança

  • When enabled, enrichment now runs every 5 minutes (was every minute), processes far fewer IPs per run, uses a 1s per-call timeout, and stops after an 8-second wall-clock budget so it can never block a request for long.

Versão 11.9.9

1 melhoria

Melhoria

  • Searching the "Last 30 Days Traffic by IP" report (by IP or by month) is now much faster. The date filter was using a HAVING clause on a computed, timezone-converted value, which prevented index use; it now filters the raw indexed date column instead.

Versão 11.9.8

2 melhorias 2 reforços de segurança

Melhoria

  • "Fill missing cities via external API" is now enabled by default.
  • Raised the background daily lookup limit to 990 (still under the 1000/day free cap).

Segurança

  • When the daily limit is reached or a provider rate-limits us, the plugin silently backs off, no errors are shown and site performance is never affected. The whole enrichment job is wrapped so no failure can surface to visitors.
  • Un-resolvable IPs are tried at most 3 times then parked, so the queue never grows without bound or re-loops.

Versão 11.9.7

2 novidades 2 melhorias

Novidade

  • Added a Geolocation settings panel (Settings page) with a MaxMind license key field. Adding a key (free or paid GeoIP2-City) downloads the official database for better city/region accuracy.
  • Optional background "fill missing cities via external API" mode. For IPs the local database only resolves to a country, a rate-limited per-minute cron enriches city/region from a free API and caches the result permanently (kept well under free daily limits).

Melhoria

  • The Location column no longer shows trailing commas (e.g. "Egypt, ,") when a city/region is unavailable.
  • Some IP ranges (mobile carriers, data centers) have no city in the free GeoLite2 database and will show the country only unless a paid license or external enrichment is enabled.

Versão 11.9.6

1 melhoria 2 correções

Melhoria

  • Some IPs (data-center / hosting / some mobile ranges) legitimately have no city in the free GeoLite2 database and will correctly show the country only.

Correção

  • Visitors that were recorded with country-only data (before the GeoIP database finished downloading) are now automatically completed with city and region in the background.
  • Cached IPs that were missing city/region are now completed from the local database on the next lookup instead of staying country-only.

Versão 11.9.5

1 novidade 1 melhoria 2 correções

Novidade

  • Added a "Download GeoIP database now" button and a status notice on the plugin pages, since WP-Cron is unreliable on some hosts.

Melhoria

  • When the site is behind Cloudflare (country-only on free plans), city and region are now completed from the local database instead of being left blank.

Correção

  • The GeoIP database download was using an invalid URL and never completed (so city/region stayed empty). It now downloads from a working source (npm registry tarball, with a GitHub mirror fallback) and extracts correctly.
  • Corrected the one-off download scheduling so a failed first attempt is retried automatically.

Versão 11.9.4

6 melhorias

Melhoria

  • Performance (front-end): visitor geolocation now uses a local MaxMind GeoLite2 database instead of a blocking external API call on every visit. The database downloads automatically into wp-content/uploads via a monthly cron job (no manual setup, no API keys).
  • Added a permanent IP-to-location cache table (ahc_ip_geo) so each IP is resolved only once.
  • Sites behind Cloudflare now read visitor location directly from Cloudflare headers (zero lookups).
  • The real-time heartbeat now runs every 60s instead of 15s, cutting background requests by ~75%.
  • Visitor de-duplication checks now use the new indexes instead of scanning the hits table.
  • Removed debug log writes from the visit-tracking hot path.

Versão 11.9.3

3 melhorias

Melhoria

  • Fixed the "Last 30 Days Traffic by IP" report timing out on large sites. Replaced the per-row correlated sub-query and EXISTS filter with a single pre-aggregated JOIN, and removed DATE wrapping that blocked index usage.
  • Added database indexes (on ahc_hits, ahc_recent_visitors, ahc_online_users) automatically on update. Indexes are only created if missing; no manual database changes required.
  • Removed a debug log line that wrote to disk on every report request.

Versão 11.9.2

1 melhoria 1 reforço de segurança Assinar para baixar a versão 11.9.2

Melhoria

  • UI: Redesigned the top stat boxes with colored accents and corrected their width alignment

Segurança

  • Fixed a Cross-Site Scripting (XSS) vulnerability in the dashboard date range fields

Versão 11.9

2 melhorias Assinar para baixar a versão 11.9

Melhoria

  • Data retention settings with manual and automatic cleanup
  • Performance improvements

Versão 11.7.4

6 melhorias Assinar para baixar a versão 11.7.4

Melhoria

  • Accurate session duration tracking using WordPress Heartbeat API
  • Number formatting with thousands separator across all reports
  • Y-axis chart intervals auto-scale with data size
  • Sessions under 15 seconds now display as "< 15s"
  • Hide visitors with no titled page visits from reports
  • Labels grammar and Arabic translation improvements

Versão 11.7.3

1 melhoria

Melhoria

  • Reports improvements

Versão 11.7.2

1 correção

Correção

  • Bug fixing in Traffic by Title report

Versão 11.7

1 melhoria

Melhoria

  • PHP function Bug fixing

Versão 11.5

1 melhoria

Melhoria

  • Datatable bug fixing

Versão 11.2

1 melhoria 1 correção

Melhoria

  • Enhancements to existing reports

Correção

  • Bug fixing

Visitor Traffic Real Time Statistics Pro

Versão na DROPE: 11.26
Ver produto

As versões disponíveis na DROPE são liberadas para assinantes e para quem comprou o produto.

O que mudou

258 mudanças em 137 versões

  • Novidade 35
  • Melhoria 116
  • Correção 86
  • Segurança 21

Versões

137
  1. 11.26
  2. 11.25
  3. 11.24
  4. 11.23
  5. 11.22
  6. 11.21
  7. 11.20
  8. 11.19
  9. 11.18
  10. 11.17
  11. 11.16
  12. 11.15
  13. 11.14
  14. 11.13
  15. 11.12
  16. 11.11
  17. 11.9.12
  18. 11.9.11
  19. 11.9.10
  20. 11.9.9
  21. 11.9.8
  22. 11.9.7
  23. 11.9.6
  24. 11.9.5
  25. 11.9.4
  26. 11.9.3
  27. 11.9.2
  28. 11.9.1
  29. 11.9
  30. 11.8
  31. 11.7.4
  32. 11.7.3
  33. 11.7.2
  34. 11.7.1
  35. 11.7
  36. 11.6
  37. 11.5
  38. 11.4
  39. 11.3
  40. 11.2
  41. 11.1
  42. 10.9
  43. 10.8
  44. 10.7
  45. 10.6
  46. 10.5
  47. 10.4
  48. 10.3
  49. 10.2
  50. 10.1
  51. 9.9
  52. 9.8
  53. 9.7
  54. 9.6
  55. 9.5
  56. 9.4
  57. 9.3
  58. 9.2
  59. 9.1
  60. 8.9
  61. 8.8
  62. 8.7
  63. 8.6
  64. 8.5
  65. 8.4
  66. 8.3
  67. 8.2
  68. 8.1
  69. 7.9
  70. 7.8
  71. 7.7
  72. 7.6
  73. 7.5
  74. 7.4
  75. 7.3
  76. 7.2
  77. 7.1
  78. 6.9
  79. 6.8.1
  80. 6.8
  81. 6.7
  82. 6.6
  83. 6.5
  84. 6.4
  85. 6.3
  86. 6.2
  87. 6.1
  88. 5.7
  89. 5.6
  90. 5.5
  91. 5.4
  92. 5.3
  93. 5.2
  94. 5.1
  95. 4.9
  96. 4.8
  97. 4.7
  98. 4.6
  99. 4.5
  100. 4.4
  101. 4.3
  102. 4.2
  103. 4.1
  104. 4
  105. 3.14
  106. 3.13
  107. 3.12
  108. 3.11
  109. 3.10
  110. 3.9
  111. 3.8
  112. 3.7
  113. 3.6
  114. 3.5
  115. 3.4
  116. 3.3
  117. 3.2
  118. 3.0.0.27
  119. 3.0.0.26
  120. 3.0.0.25
  121. 3.0.0.24
  122. 3.0.0.23
  123. 3.0.0.22
  124. 3.0.0.21
  125. 3.0.0.20
  126. 3.0.0.19
  127. 3.0.0.18
  128. 3.0.0.17
  129. 3.0.0.16
  130. 3.0.0.15
  131. 3.0.0.14
  132. 3.0.0.13
  133. 3.0.0.5
  134. 3.0.0.4
  135. 3.0.0.3
  136. 3.0.0.2
  137. 3.0.0.1

CUPONS

GANHE 5% DE DESCONTO na sua primeira compra

Preencha o formulário abaixo e garanta 5% de desconto na sua primeira compra. Válido por tempo limitado.