revised v1.5.4 package

v1.5.4 security and privacy hardening

Frontend WordPress nonce required for heartbeat/action requests.
Same-site Origin/Referer validation.
Per-session rate limits plus a higher shared-IP ceiling to reduce NAT false positives.
New-session creation capped per IP.
Maximum 500 stored events per session.
Trusted proxy/CDN IPs can be supplied only through the explicit bqlv_client_ip filter; forwarding headers are never trusted automatically.
Frontend tracking and raw-IP storage can be disabled in Settings.
Disabling IP storage immediately clears IP addresses already stored by the plugin.
bqlv_tracking_enabled, bqlv_should_track_request, and bqlv_store_ip_address filters are available for privacy/consent integrations.
uninstall.php removes plugin tables/settings on deletion by default; administrators can opt to preserve them.

BestQuest Live Visitors v1.5.3

BestQuest Live Visitors v1.5.3

This release improves the Action history experience in the live visitor dashboard.

What’s fixed

Expanded Action history now stays open during automatic refreshes

Previously, the Live Visitors table refreshed every 10 seconds and recreated the row markup, causing expanded click-history sections to close automatically.

The plugin now preserves the open/closed state of each visitor’s Action history across refreshes.

If you expand a visitor’s tracked-click history, it remains open until you close it manually.

Included from recent v1.5 updates

Action column for visitor activity

Tracking of affiliate and regular article-link clicks

Click time, link text, destination URL, and source page

Expandable tracked-click history

Session path removed from the visible tables for a cleaner dashboard

Page-navigation data still retained internally

Upgrade notes

No database changes are required for this release.

Existing visitor history, settings, click history, IP data, and retention settings are preserved.

BestQuest Live Visitors

BestQuest Live Visitors v1.4.0
This release improves the visitor history table and reduces noise from automated probes and invalid URLs.
What’s new

• IP address column added
  • New visitor sessions now record the source IP address.
  • IP addresses are visible only to WordPress administrators.
  • IP data is removed automatically together with expired session data.
• Simplified recent visitor history
  • Removed the redundant Last seen column from the history table.
  • First seen and Recorded span now provide the relevant timing information.
  • last_seen is still maintained internally for live-status calculations and session duration.
• 404 tracking disabled
  • The tracking script is no longer loaded on WordPress 404 pages.
  • Automated requests to nonexistent URLs such as random .aspx paths will no longer appear as real visitors in the Live Visitors dashboard.
• Cleaner bot/probe reporting
  • Scanner traffic reaching nonexistent WordPress pages is prevented from contaminating live visitor statistics.
• Privacy documentation updated
  • Documentation now reflects that IP addresses are stored temporarily as part of session data.
  • IP addresses follow the plugin’s configured retention period.
    Upgrade notes
    Existing visitor records created before v1.4.0 do not contain IP addresses and will display — in the IP column.

Existing settings, ignored-IP configuration, visitor history and database tables are preserved during the upgrade.

After updating, purge any page cache once so the new front-end tracking behavior takes effect immediately.

BestQuest Live Visitors v1.3.4

BestQuest Live Visitors v1.3.4

This release adds public BestQuest attribution to the WordPress visitor tracking plugin.

What's New

• Small "Visitor insights powered by BestQuest" credit in the public website footer.
• Footer credit enabled by default, with an option to disable it in plugin settings.
• No additional external tracking requests.
• Updated documentation explaining the attribution.

Existing Features

• Real-time visitor monitoring
• Recent visitor session history
• Expandable page journeys
• Referrer, browser, and device information
• Configurable session retention
• Administrator IP exclusion

Installation

Download the attached plugin ZIP and upload it through WordPress → Plugins → Add New Plugin → Upload Plugin.

This is a prerelease. Testing on additional WordPress installations is encouraged.

Feedback

Report bugs or suggest improvements:
https://github.com/kanvastudio/bestquest-live-visitors/issues

Website: https://bestquest.net/

BestQuest Live Visitors v1.3.3

BestQuest Live Visitors v1.3.3

First public release of BestQuest Live Visitors, a self-hosted WordPress plugin for monitoring visitor activity.

Features

• Real-time visitor dashboard
• Recent visitor session history
• Expandable page journeys
• Referrer and browser/device information
• Visitor timezone reporting
• Configurable heartbeat and session retention
• IP-hash-based visitor exclusions
• No storage of raw IP addresses

Installation

1. Download the plugin ZIP attached below.
2. In WordPress, open Plugins → Add New → Upload Plugin.
3. Upload the ZIP and activate it.
4. Open Live Visitors in the WordPress dashboard.

Notes

Visitor counts are approximate. Session duration represents recorded elapsed time, not necessarily active engagement.

Website: https://bestquest.net/

License: GPL-2.0-or-later