RankRaft AI Analytics

Changelog

1.2.4

• The plugin’s links now point to its documentation at docs.rankraft.ai.
• A clearer description in the plugin directory.

1.2.3

• Security: bot visits can no longer be faked by a visitor sending a made-up proxy header. The visitor’s address is read from a proxy header only when the request came through a proxy the plugin trusts — Cloudflare, your host or local network, or addresses you add with the rankraft_aa_trusted_proxies filter. Sites behind another CDN or load balancer should add its addresses there.
• Privacy: the referring page is now sent without its query string, so private links (such as password-reset or order-confirmation pages) are never passed on.
• Fixed: data is kept and retried, not dropped, when RankRaft asks the plugin to slow down.
• Fixed: the cache-bypass rule no longer affects real folders on your server, and works with the site’s own http→https redirect.
• Fixed: turning off logging now removes the cache-bypass rule from .htaccess.
• Other small reliability and security fixes.

1.2.2

• Fixed: backslashes in page addresses were being removed from some recorded requests.

1.2.1

• The settings screen is down to five controls. Delivery tuning (batch size, flush threshold, queue size, retention, timeouts, circuit breaker) is now fixed at the tested values, because none of them has an answer that differs per site and every one of them could be set to a value that broke delivery.
• Admin, cron, AJAX and REST requests are now skipped unconditionally, and the query-string redaction list can no longer be emptied. Both were switches that could silently turn off the privacy guarantees described above.
• “Never log these paths” is now additive: your patterns are added to the built-in list (admin, login, checkout, cart, account) instead of replacing it.
• Developers can still override the fixed values with the rankraft_aa_* filters; every filtered value is clamped to a safe range.
• Activating the plugin no longer writes the .htaccess cache-bypass rules. They are written when you turn logging on, so a freshly activated plugin touches neither the network nor your server configuration until you ask it to.
• Hardening: the admin notice links and every settings field name are escaped at the point of output, and $_SERVER values are unslashed and sanitised before use.
• Test connection now checks the key you have just typed, saves it once the API accepts it, and switches request logging on. Setting up is paste the key and press Test; it used to fail with “No site key configured” while the key was visibly on screen, because it only ever read the saved one.
• The Status tab drops Clear queue, Send queued logs now, Refresh and Re-schedule. Scheduling repairs itself on every page load, so the button could not normally appear, and clicking it would have pushed the next send a minute further out. Clearing the queue destroyed unsent logs with no way back and nothing needed it; the other two duplicated the once-a-minute background send and the browser’s own reload. Write .htaccess rules now appears only when the rules are actually missing and the file is writable.

1.1.0

• The ingest address is now fixed at https://ingest.rankraft.ai and is no longer an editable setting, so a mistyped address can no longer silently stop reporting.

1.0.1

• A resume notification that arrives before RankRaft’s API has caught up now schedules one delayed re-check instead of leaving the site paused.

1.0.0

• First public release.
• Cache-bypass self-test now verifies the site certificate; clearer message when the server cannot verify itself.
• Uninstall also removes the .htaccess rules and all plugin options and transients.
• Suggested privacy-policy text for site owners (Settings → Privacy → Policy Guide).

0.3.1

• AI and search crawlers now bypass full-page caches (FlyingPress, WP Rocket, LiteSpeed, WP Super Cache) automatically via rules the plugin writes to .htaccess, so their visits are logged. Visitors keep getting cached pages.
• Status tab: “Check cache bypass” self-test and “.htaccess rules” status.
• Fixed: saving the General tab no longer resets Privacy settings.

0.2.0

• Rewritten delivery pipeline: retries with exponential backoff, circuit breaker, send lock, daily cleanup.
• Query-string redaction and full input sanitisation.
• Encrypted site key storage; RANKRAFT_SITE_KEY constant support.
• Status tab with Test connection, Send test event, Send now and Clear queue.
• Glob patterns for excluded paths.
• Uninstall cleanup.

0.1.0

• Initial release.