Audit Log — admin activity log for OpenCart 2.3, 3.x and 4.x

Audit Log for OpenCart 2.3, 3.x and 4.x answers a question that sooner or later comes up in every store with more than one employee: who changed the price, who cancelled the order, who removed access rights, and exactly when it happened.

What gets logged

Admin logins, failed login attempts and logouts; order changes — status, contents, totals, customer data; product changes — price, stock, status; categories, customers, store settings, users and permission groups, installing and removing extensions.

Every entry records who performed the action (user, IP, browser), when, on which entity, exactly what the action was — and, most importantly, a detailed diff of the changed fields in “before → after” format. For permissions, it separately shows which routes were removed and which were added.

Secrets never make it into the log

Passwords, tokens, API keys and salts are masked at the point of recording, not at display time — meaning they physically never reach the database. At the same time, the fact that a secret changed is recorded: you can see the payment module’s key was changed, but not its value. This is a deliberate distinction: a log that stores keys becomes a security hole itself.

Search and retention

The log is filterable by user, entity type, action, date range, IP and free-text search; it has pagination and an entry detail view in a modal window. Retention limits — by entry age and by count — are configurable in the free version; scheduled auto-cleanup and CSV export of the filtered log are part of Pro.

Uninstalling the module removes its events and cron tasks, but doesn’t delete the log table: a log that can be wiped with one click isn’t an evidentiary record.

Free version and Pro

Trial — only on your click. Installing and saving settings activate nothing. If you want to look at Pro, click “Try Pro”, enter your e-mail, and get a 7-day key for this store right away; it’s also sent by mail. No card, nothing auto-renews.

No load on the admin area

Logging never blocks the store: a logging error never breaks a page, and saving with no real changes doesn’t create empty entries. Benchmarks on our demo stand showed no measurable difference in admin speed with logging on versus off.