DatPilot Connector
| 开发者 | datpilot |
|---|---|
| 更新时间 | 2026年10月17日 11:44 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
DatPilot Connector works on its own, with no account and nothing sent outside your site, and can optionally be connected to DatPilot, a WordPress maintenance service for Vietnamese site owners. The admin screens are in Vietnamese.
Works without connecting (all features, free):
- Health score in Settings → DatPilot: outdated core/plugins/themes, PHP version, debug output, HTTPS, risky settings, admin accounts, backup age. Read only.
- Manual backup of the database and wp-content, run in small steps so cheap hosting does not time out. Backups stay on your hosting (in a randomly named, access-denied folder under uploads); the database dump is encrypted when the sodium extension is available. Download or delete them from the same screen.
- Malware and spam scan (read only): compares WordPress core and plugins downloaded from WordPress.org against the official checksums, looks for common backdoor patterns in themes, premium plugins and the uploads folder, and finds posts injected with gambling/casino spam or hidden links.
- PHP fatal error log: records fatal errors (white screen, "critical error") without enabling WP_DEBUG, in the same protected folder as the backups. Server paths, emails, phone numbers and quoted values are removed from the message, and only the page path (no query string) is kept.
安装:
- Install from Plugins → Add New, or upload the zip, then activate.
- Open Settings → DatPilot to see the health score, make a backup or run a scan.
- Optional: to connect, create a free account at datpilot.com, add your site under "Web của tôi" and paste the connection key.
常见问题:
Does the plugin send anything without connecting?
No. Without a connection key the only outside requests are the WordPress.org checksum lookups when you click a scan button.
Does the scan delete or change files?
No. The scan only reads files and the database and lists what looks suspicious.
Where are backups stored?
In a randomly named folder inside wp-content/uploads with access denied by .htaccess/web.config. At most 5 backups are kept. Download one to your computer for safekeeping.
What happens when I delete the plugin?
The connection key, settings and the backup folder (with the error log) are removed.
Can DatPilot change my site through this plugin?
No. The plugin only answers read commands and creates, downloads or deletes its own backups. It has no command to install, update, activate or deactivate anything, restore a backup or change settings.
更新日志:
1.6.0
- Remote administrative commands removed: DatPilot can no longer update, install, activate or deactivate plugins, themes or core, restore backups or change hardening settings through this plugin.
- No more file in wp-content/mu-plugins; fatal errors are caught by the plugin itself.
- All names now use the
datpcoprefix (existing settings and connection are migrated automatically). - Admin JavaScript moved to an enqueued file; database dump uses $wpdb->prepare() with identifier placeholders (requires WordPress 6.2).
- The mu-plugin error catcher is now opt-in (button on the settings page, or enabled by DatPilot after you connect).
- Escaping and nonce checks cleaned up for the WordPress.org review; readme with external service disclosure.
- PHP fatal error log, page sampling for update screenshots.
- Malware, backdoor and SEO-spam scan.
- Backups and restores run in small steps; Ed25519 signed commands.