منصوبے کے بارے میں

# ovos console — error monitoring and cyberdefence for WordPress This repository contains the free, GPL-licensed WordPress plugin client for the **ovos console**, an error monitoring and cyberdefense platform designed for the AI era. The plugin sends PHP errors, JavaScript errors, failed logins, and scanner probes from your WordPress site to a dedicated ovos console instance. The console then ranks issues, proposes fixes, and visualizes attack patterns. ## Key Features ### Comprehensive Error Reporting - **PHP Errors**: Captures warnings, notices, fatals, and uncaught exceptions. Reporting is fire-and-forget with a 1-second timeout to ensure no impact on site performance. - **JavaScript Errors**: A bundled browser client captures window errors, unhandled rejections, and failed network requests. It includes breadcrumbs, optional masked DOM snapshots, and automation evidence (e.g., headless browser detection) to distinguish bot activity from real user issues. - **Context**: Sends redacted request variables, user ID, WordPress version, active theme, and source attribution (plugin/theme name). ### Cyberdefense & Security Insights - **Scanner Probes**: Distinguishes between real bugs and malicious scanner traffic (e.g., probes for `/wp-login.php` or known vulnerable paths). The console groups probes into "attack waves" by source IP. - **CVE Matching**: With the optional software inventory feature, the plugin reports installed plugins/themes and versions. The console matches this against public vulnerability feeds to highlight plugins that are both vulnerable and actively being probed. - **Security Events**: Optionally reports refused actions such as failed logins, rejected nonce checks, and forbidden REST calls. Usernames are masked, and reporting is rate-limited. ### Performance & Traffic Analytics - **Traffic Rollups**: An opt-in feature that sends anonymous per-minute request counters (status codes, methods, page types) to the console. This provides a denominator for error rates, allowing the console to distinguish between a spike in errors and a spike in traffic. - **Request Duration Histograms**: Tracks p50/p95 latency trends and identifies slowest pages without sending raw timing data or user information. Requires the APCu PHP extension. ## Architecture & Privacy - **Self-Hosted Console**: The plugin connects to your own ovos console instance, either managed by ovos or hosted on your infrastructure. This ensures data sovereignty. - **Privacy First**: All features are opt-in. Traffic rollups and software inventory use closed vocabularies and structured data to ensure no URLs, IPs, cookies, or user data are ever transmitted. TLS verification is enabled by default. - **Minimal Footprint**: The plugin adds no database tables, no cron jobs, and no dashboard widgets. Configuration is handled via a single settings screen or `wp-config.php` constants. ## Installation & Configuration - **Requirements**: WordPress 6.0+, PHP 8.1+, and a reachable ovos console instance. - **Setup**: Install the plugin from the GitHub release zip. Configure the console URL and API keys in **Settings → ovos console**. Enable specific features (JS errors, traffic rollups, etc.) as needed. - **Automatic Updates**: The plugin supports WordPress core's native update mechanism via the `Update URI` header, allowing for one-click or unattended updates from GitHub releases. ## Use Cases - **Debugging**: Quickly identify and correlate PHP and JS errors across the stack. - **Security Monitoring**: Detect brute-force attacks, credential stuffing, and exploitation attempts against known vulnerabilities. - **Performance Tracking**: Monitor site health and identify performance regressions after updates. - **Compliance & Audit**: Maintain a record of security events and software inventory without storing sensitive data locally. ## License The plugin is licensed under GPL-2.0-or-later. The ovos console itself is a commercial product, available as a managed service or self-hosted instance.