CRITICAL FIX: Update InterWorx log file name from access_log to transfer.log

VALIDATION RESULTS from real InterWorx server revealed:
InterWorx uses 'transfer.log' NOT 'access_log' for access logs!

VERIFIED FINDINGS:
• Log location: /home/USER/var/DOMAIN/logs/ ✓ CORRECT
• Access log name: transfer.log (NOT access_log) ✓ FIXED
• Error log name: error.log ✓ CORRECT
• Logs are symlinks to dated files (transfer-2025-11-20.log)
• Older logs automatically zipped

UPDATED MODULES (9 files):
1. modules/security/tail-apache-access.sh
2. modules/security/web-traffic-monitor.sh
3. modules/security/bot-analyzer.sh (3 locations)
4. modules/security/malware-scanner.sh
5. modules/security/live-attack-monitor.sh
6. modules/website/website-error-analyzer.sh (3 locations)
7. modules/website/500-error-tracker.sh

UPDATED DOCUMENTATION:
• REFDB_FORMAT.txt - Added VERIFIED comment
• .sysref - Updated PATH|interworx|access_log

ALL REFERENCES CHANGED:
• find /home/*/var/*/logs -name "access_log" → "transfer.log"
• /home/USER/var/DOMAIN/logs/access_log → transfer.log

This was discovered by running validate-interworx.sh on real server:
  Server: interworx-3rdshift.raptorburn.com
  InterWorx Version: 6.14.5
  Test Date: 2025-11-20

All modules now use correct log file names for InterWorx!

modules/security/bot-analyzer.sh

@@ -301,9 +301,9 @@ parse_logs() {
     local log_search_path
     local log_search_name
     if [ "$INTERWORX_MODE" = "yes" ]; then
-        # InterWorx: /home/user/var/domain.com/logs/access_log
+        # InterWorx: /home/user/var/domain.com/logs/transfer.log (VERIFIED: uses 'transfer.log' not 'access_log')
         log_search_path="/home/*/var/*/logs"
-        log_search_name="access_log"
+        log_search_name="transfer.log"
     else
         # cPanel/Plesk: /var/log/apache2/domlogs/domain.com
         log_search_path="$LOG_DIR"
@@ -320,7 +320,7 @@ parse_logs() {
 
         # Extract domain name based on control panel
         if [ "$INTERWORX_MODE" = "yes" ]; then
-            # InterWorx: extract from path /home/user/var/domain.com/logs/access_log
+            # InterWorx: extract from path /home/user/var/domain.com/logs/transfer.log
             domain=$(echo "$logfile" | sed -n 's|^/home/.*/var/\([^/]*\)/logs/.*|\1|p')
         else
             # cPanel: extract from filename
@@ -1805,8 +1805,8 @@ main() {
             find_opts+=(-mtime -"$DAYS_BACK")
         fi
 
-        # Find all access_log files in InterWorx structure
-        log_count=$(find /home/*/var/*/logs -type f -name "access_log" "${find_opts[@]}" 2>/dev/null | wc -l)
+        # Find all transfer.log files in InterWorx structure
+        log_count=$(find /home/*/var/*/logs -type f -name "transfer.log" "${find_opts[@]}" 2>/dev/null | wc -l)
 
         if [ "$log_count" -eq 0 ]; then
             print_alert "Error: No InterWorx access logs found in /home/*/var/*/logs/"