Blue Coral - Site Audit, Performance, Admin Toolkit
| 开发者 | nguyenrom |
|---|---|
| 更新时间 | 2026年9月11日 21:29 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Blue Coral - Site Audit, Performance, Admin Toolkit provides practical local tools for maintaining a WordPress site or network.
Features include:
- Local Activity Logs with filtering, retention controls, and WordPress privacy export/erasure support.
- Security Headers with static headers (HSTS, Referrer-Policy, and more), enable-gated CSP options with manual directive configuration, Subresource Integrity, and asset versioning.
- Site Enhancements with default-off toggles for SVG uploads, XML-RPC, comments, feeds, embeds, emojis, and asset cleanups.
- Maintenance Mode with role-based bypass and a 503 page.
- Configuration export/import and Plugin Control for plugin visibility and blocked endpoints.
- User and avatar utilities, and an API/MCP workspace for separately configured clients.
- A Settings page with Enabled Features controls, data lifecycle choices, and Activity Logs guidance.
- An extended BlueCoral build for managed client sites additionally provides CSP service templates, restricted file and database administration tools, and a client access workspace; these are not part of this WordPress.org package.
安装:
- Upload the
bluecoral-admin-toolkitfolder to the/wp-content/plugins/directory, or install the ZIP through Plugins > Add New > Upload Plugin. - Activate Blue Coral - Site Audit, Performance, Admin Toolkit through the Plugins screen.
- Open Blue Coral > Settings to configure Toolkit features.
屏幕截图:
常见问题:
Does the plugin send data to BlueCoral?
No. The core plugin operates locally in the WordPress installation and does not send telemetry, analytics, credentials, database contents, or Activity Log records to BlueCoral or another third party. When enabled, Activity Logs collect and store administrator and site activity locally in the WordPress database. See the Description section for the local record categories, retention controls, privacy tools, and optional MCP integration.
Which third-party components are bundled?
The package includes enshrined/svg-sanitize under the MIT License. Its maintained source is https://github.com/darylldoyle/svg-sanitizer.
更新日志:
1.10.0
- Hides the Security Headers CSP options until CSP is enabled, keeping the settings page focused.
- Reorders the Settings page, moves the Activity Logs section above Data Lifecycle, and adds feature-control extension points.
- Preserves existing feature settings during option migration.
- Restored advanced administration modules for managed client sites, refreshed module boundaries, and kept compatibility metadata unchanged (WordPress 7.1, PHP 7.4).
- Updated WordPress.org compatibility metadata to WordPress 7.1 and added release validation to prevent metadata drift.
- Hardened request, server, upload, SQL identifier, and output handling for WordPress.org security compliance.
- Removed Plugin Control behavior that could change WordPress update decisions.
- Removed a deferred database-maintenance integration from this WordPress.org candidate and retained the free Security Headers and Activity Logs settings.
- Improved Activity Log detail rendering and pagination compatibility, and removed a retired direct sign-in route.
- Verified the distributed package uses database-backed Activity Logs and excludes obsolete restricted integration, filesystem, installer, external CSP-source, output-buffer, and global-configuration behavior.
- Updated the public display name for WordPress.org review while preserving the
bluecoral-admin-toolkitdirectory, settings, hooks, and REST routes.
- Updated Activity Log disclosures.
- Added complete external-service disclosures and corrected Activity Log translation domains for WordPress.org review.
- Renamed the public package identity and preserved existing Toolkit settings, option keys, actions, and REST routes for compatibility.
- Clarified local-data and optional integration disclosures for WordPress.org review.
- Removed the redundant Plugin URI header for WordPress.org submission compliance.
- Consolidated bundled dependencies under
vendors/and renamed the plugin to Blue Toolkit.
- Added WordPress.org readme, Toolkit license, and third-party source/license notices.
- Fixed the Toolkit coding-standard violation.