Aepto Domain Expiry, SSL, DNS & PHP Security
| 开发者 | limitlesshosting |
|---|---|
| 更新时间 | 2026年10月22日 07:51 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Domain registration expiry — days left + registrar when the registry publishes it
- SSL / TLS certificate expiry — days left + issuer
- DNS snapshot — A / AAAA / NS (and change journal when records move)
- Tether check — confirms the public hostname still serves this WordPress (not “A record equals server IP”, which breaks behind Cloudflare)
- Email authentication grade — SPF, DKIM, DMARC, MX from public DNS
- PHP security — checks this server’s PHP version against critical advisories (starting with php2shell); admin notice + copy-ready support ticket for your host; repeat emails until patched
- Email alerts — choose up to 10 recipients; toggle domain / SSL / tether / DNS / Mail Pulse / PHP alerts; pick reminder days (30 / 14 / 7 / 1)
- Mail Pulse — weekly delivery probe with click-to-confirm; catches silent wp_mail failures; loud wp-admin warning when mail is dead
- Test email — Settings → Send test email to all recipients (if it fails, use an SMTP plugin — many hosts block PHP mail())
- Admin bar chip — quick Domain / SSL countdown (or PHP: critical when an advisory hits)
- Dashboard widget — at-a-glance risks
- Continuity report (PDF) — dense client-ready PDF (expiry, tether, DNS, email auth, Mail Pulse, PHP security); Connected adds outside uptime %, stability, latency, downtime history
- Outside uptime board in Protection — live status, 24h/7d/30d/90d uptime %, stability, latency, downtime duration history (alerts even if WordPress cannot send mail)
- Add this site to your Aepto portfolio
- Domain Watch and Theft Guard
- Attention inbox in wp-admin
- Open the full Aepto dashboard for this domain
- AI page monitoring — catch white screens, critical / database errors, and “uptime green but the page is broken”
- Alert webhooks — push incidents to Slack, tickets, Zapier, on-call tools
- Site owners who renew domains once a year and forget
- WooCommerce / form sites that need mail to actually deliver
- Agencies who need a clean continuity report for clients
- Anyone who needs to push their host to patch critical PHP CVEs quickly
- Anyone who has been burned by DNS pointing somewhere else
- Your site’s hostname — TLS certificate probe and tether self-check against the public hostname of this WordPress site. Data sent: HTTPS connection to your own host (no third-party account). Runs when you run Domain Anchor or on the scheduled cron.
- Public DNS resolvers (via PHP DNS functions / the server’s configured resolvers) — used to read A, AAAA, NS, MX, and TXT records for email authentication grading and DNS snapshots. Data sent: the domain name being queried. Runs during Domain Anchor checks.
- RDAP bootstrap (RDAP.org) — used to look up domain registration expiry / registrar data when available. Data sent: the domain name in an HTTPS RDAP query. Service info: https://about.rdap.org/ (includes privacy considerations). Terms / policy: https://about.rdap.org/
- Verisign RDAP — fallback / TLD RDAP lookup for supported zones (for example .com). Data sent: the domain name in an HTTPS RDAP query. Terms of use: https://www.verisign.com/legal-center/rdap-terms/ — Privacy: https://www.verisign.com/legal-center/privacy/
- Aepto (https://app.aepto.com) — only when you Connect, opt in to anonymous install stats, or load optional outside-uptime / Protection data. Data may include install id, site URL/host, OAuth tokens you authorize, and monitoring identifiers you enable. Privacy: https://aepto.com/privacy — Terms: https://aepto.com/terms
PHP_VERSION only (no remote vulnerability API call).
No third-party ads or analytics scripts are injected on the public front end of your site.
Aepto is a product of Limitless Hosting. Learn more at aepto.com.
安装:
- Install and activate from Plugins, or upload the plugin folder.
- Open Aepto → Anchor and click Run check now.
- Open Aepto → Settings, set alert recipients, then Send test email (alerts use WordPress mail).
- See Aepto → About for the full free / Connect / paid feature list.
- Optional: Protection → Connect free with Aepto (site must be reachable over HTTPS for Connect).
屏幕截图:
常见问题:
Does this work without an Aepto account?
Yes. Domain Anchor — expiry, SSL, DNS, tether, email auth, PHP security, wp_mail alerts, admin bar, report — runs on your WordPress host with zero Aepto login.
How is this different from Site Health?
Site Health checks the WordPress engine (PHP, cron, plugins) at a high level. Aepto Domain Anchor checks the domain layer: registration, certificate, DNS drift, tether, and mail authentication — and adds critical PHP CVE alerts with a crafted message you can paste to your hosting company.
What PHP vulnerabilities does Aepto check?
Aepto ships a curated list of critical PHP runtime advisories (starting with php2shell: CVE-2026-109618 and CVE-2026-109619). It compares your server’s PHP_VERSION to the patched floors published by the PHP project. Shared hosts may apply vendor backports — the ticket asks them to confirm that in writing.
Will this slow down my site?
Checks run in wp-admin and via WP-Cron. There is no front-end HTML/JS/CSS by default. A small public REST route exists only for the tether challenge.
What email alerts do I get for free?
By default: domain and SSL countdown emails at 30, 14, 7, and 1 days, plus immediate mail on tether failure or significant DNS change — to the site admin email. Mail Pulse also sends a periodic probe with a confirm link; if WordPress claims “sent” but nobody confirms, Aepto flags a silent failure and warns in wp-admin (because broken mail cannot reliably email you). Critical PHP alerts repeat (day 0, 3, 7, then weekly) until the version is patched or you turn PHP alerts off. In Settings you can add recipients, toggle alert types, and Run Mail Pulse now.
What is sent to Aepto?
Nothing until you Connect or opt in to anonymous install stats. After Connect, only what you authorize (domains, monitoring, etc.). PHP security evaluation stays on your WordPress host.
Can I use this on localhost?
Yes for Domain Anchor UI and tether. Public RDAP / SSL / DNS for localhost will often show empty — use a real domain for full data. Connect free with Aepto requires a public HTTPS site (Aepto rejects http:// callbacks, including local Docker). That “Invalid Redirect” message on Connect from localhost is expected, not a broken upgrade link.
更新日志:
- PHP security: critical advisory checks (php2shell / CVE-2026-109618 & CVE-2026-109619), admin notice, repeat email alerts, and a copy-ready hosting support ticket
- Display name / tags / description updated for PHP security discoverability (slug unchanged)
- Review fixes: Aepto-first display name, documented RDAP services, PDF library prefix, Mail Pulse confirm page, scoped notices, remove unnecessary textdomain load
- Initial release: Domain Anchor, Connect, Protection, settings, continuity report