Admin Activity Log & Audit Trail
Add-on ID: kv_admin_activity_log · Edition: CS-Cart & Multi-Vendor · Latest version: 1.0.0 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view
Admin Activity Log & Audit Trail records who changed what and when in your admin panel and, on Multi-Vendor, in the vendor panel. For prices, stock, order statuses, settings, add-ons, user accounts and the other objects that matter, every entry keeps the old and the new value of each changed field. You see at a glance who set a price to $4.90 instead of $49.00, who switched an add-on off or who gave a new account administrator rights.
The core Logs page of CS-Cart only notes that a product, order, user or category was created, updated or deleted. It stores no values, no settings or add-on changes, no payment, shipping or promotion changes, and no per-object history. This add-on fills that gap and leaves the core logs as you configured them.
- Field-level before/after diffs for products (name, code, status, price, list price, quantity, quantity discounts, categories, texts), categories, orders (status, totals, items, addresses, notes), users (e-mail, names, status, account type, user groups, password and API key changes without their values), user groups and privileges, settings and add-on settings, add-on installs, uninstalls and on/off switches, payment and shipping methods, promotions and vendors or storefronts.
- Every admin form submission is logged with the dispatch (for example
block_manager.update), the user, the role, the vendor, the IP address, the browser and the submitted data, so changes outside the tracked objects are visible too. - Sign-ins: successful and failed admin and vendor panel sign-ins, sign-outs and “Act on behalf of” sessions.
- Automatic secret masking: passwords, API keys, tokens, card numbers and payment or carrier credentials are stored as
******, and you can add your own field names. - Searchable log with filters for period, user, role, vendor, action, object, dispatch, IP address and result; an entry page with the diff; History tabs on product, order, user, category and vendor pages; CSV export.
- E-mail alerts for sensitive changes: add-ons installed or switched off, new or changed administrator accounts, privilege changes, settings and payment method changes, price changes above a percentage, failed sign-ins, act-on-behalf sessions and purges.
- Append-only and tamper-evident: entries cannot be edited, and each entry is signed together with the previous one. Verify integrity finds entries changed or deleted directly in the database.
- Retention: old entries are deleted after the number of days you choose (365 by default), once a day or from cron.
- Multi-Vendor: vendors can see the actions of their own staff (optional); the marketplace administrator sees everything.
- Light on the store: the storefront is never touched; an admin request costs one database insert plus a few small reads for the objects it changes.
Documentation
Section titled “Documentation”| Page | Contents |
|---|---|
| Installation | Requirements, installing, upgrading, uninstalling |
| Configuration | Settings, alerts, retention, privacy, license |
| Usage | The log, entries and diffs, History tabs, export, integrity check, vendor panel |
| Developer notes | What is recorded and how, tables, hooks, file map |
| FAQ | Common questions, GDPR |
Compatibility
Section titled “Compatibility”| CS-Cart / Multi-Vendor | 4.17.2 – 4.21.x |
| PHP | 7.2.5 – 8.3 (whatever your CS-Cart version supports) |
| Storefront | Not affected: the add-on has no storefront output and records nothing customers do on the storefront |
| Full page cache (4.21) | Supported: nothing runs on cached storefront pages |
| Other add-ons | Works next to the core logs, Two-factor sign-in and every other add-on; their own settings changes are logged like core settings |