Nota Backup & Restore
| 开发者 | wpnota |
|---|---|
| 更新时间 | 2026年6月22日 15:10 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Nota Backup & Restore creates complete WordPress backups (all files + database) in a single ZIP file. Designed for reliability on shared hosting — chunked processing ensures backups never fail due to PHP timeouts or memory limits.
Free Features
- One-click full backup — all WordPress files + database in a single ZIP
- Selective backup — database only or files only
- Chunked ZIP creation — never times out, even on large sites
- Configurable chunk settings — files per chunk and MB per chunk
- AES-256 encryption for database backups
- Custom exclusion rules — skip any folder or file path
- Backup history with status, size, duration and error details
- Estimated backup size before you start
- Dashboard widget showing last backup status
- Standalone installer — migrate to a new domain without WordPress
- Server compatibility panel — shows PHP version, ZipArchive, PDO SQLite availability and more
- SQLite archive format — faster compression, smaller files, incremental updates (only changed files rewritten)
- Cloud Storage — Google Drive, Amazon S3, Wasabi, Dropbox, Microsoft OneDrive, FTP/SFTP
- Automatic scheduled backups — daily, weekly, monthly
- Admin panel restore — one-click restore directly in WordPress
- Emergency Recovery — standalone restore page that works even when WordPress is broken
- Email notifications — success and failure alerts
- Staging environment — create a staging site, test changes, push to live
- Go to Nota Backup in the WordPress admin sidebar
- Click Start Backup
- The plugin creates a ZIP file of all your files and database
- Download the ZIP from the backup list
- Download the backup ZIP and the Installer PHP file from the backup list
- Upload both files to the new server's web root
- Open
https://newdomain.com/installer_{backup_name}.php - The installer extracts the ZIP, then prompts for new database credentials and new site URL
- Follow the step-by-step wizard — URLs and paths are replaced throughout the database
安装:
- Upload the
nota-backup-restorefolder to/wp-content/plugins/ - Activate the plugin through the Plugins menu in WordPress
- Go to Nota Backup in the WordPress admin sidebar
- Create your first backup with one click
屏幕截图:
常见问题:
Does it work on shared hosting?
Yes. Nota Backup & Restore is built specifically for shared hosting. Chunked processing keeps every request well within PHP time limits and memory constraints.
What is included in a full backup?
All WordPress files (themes, plugins, uploads, wp-content) plus the complete MySQL database, packaged into a single ZIP file.
Can I schedule automatic backups?
Automatic scheduled backups require the Pro version. The free version supports on-demand (manual) backups.
What happens if a backup fails halfway through?
The plugin detects and cleans up incomplete backups automatically. Error details are logged to backup history.
Is AES-256 encryption secure?
Yes. The database is encrypted with AES-256-CBC. The encryption key is derived from your password using SHA-256.
Can I restore to a different domain?
Yes. The standalone installer handles full migrations. It replaces all URLs and paths — including inside serialized PHP data — so WordPress loads correctly on the new domain.
How do I migrate WordPress to a new host?
Download the backup ZIP and the Installer PHP file from the backup list. Upload both to the new server's web root, open the installer in your browser, enter the new database credentials and site URL, and the wizard handles the rest — including replacing all URLs in the database.
How do I backup WordPress for free?
Install Nota Backup & Restore, go to Nota Backup in the WordPress admin sidebar, and click Start Backup. No account or configuration required. Full site backups (files + database) are completely free.
Does this plugin support SQLite backups?
The plugin detects whether your server has PDO_SQLite available and shows the result in the Site Information panel on the backup page. SQLite backup format — which produces faster, smaller archives and supports incremental updates (only changed files are rewritten) — is available in the Pro version. The free version uses standard ZIP format.
Does the free version connect to any external services?
No. The free version makes no external API calls. The only external link is the "Upgrade to Pro" button, which opens https://www.wp-nota.com/pricing/ in a new tab.
更新日志:
2.2.1
- New: Archive format indicator on backup page — shows active format (ZIP) with a note that SQLite format is available in Pro
- New: PDO_SQLite detection in Site Information panel — shows whether your server supports the SQLite archive format
- New: Archive Format section in Settings — displays ZIP as active and SQLite as a Pro-locked option
- Added calendar view to backup history page
- Fixed history view toggle buttons
- Improved admin notice and post-backup review prompt messages for clarity
- Security: Backup ZIP filenames now include a random suffix — site slug + timestamp alone could be brute-forced, and the ZIP contains wp-config.php plus the full database
- Security: Installer state and log files now use unguessable names derived from the backup archive name (DB credentials were stored in a fixed-name state file during migration)
- Security: Backup directory .htaccess now denies ALL direct HTTP access (downloads always go through authenticated admin-ajax); existing installs upgraded automatically
- Security: Admin warning when leftover installer/migration files (installer, SQL dump, state files, backup ZIP) are detected in the site root, with one-click safe deletion
- Security: Installer CSRF token no longer stored in a web-accessible file
- Improvement: Installer ZIP extraction is now chunked (~400 files / ~80 MB per request) with progress display — no more proxy timeouts on multi-GB sites
- Fix: Site Changes bar "WordPress updated" detection never worked — the wp_version column was missing from the backups table; added with automatic migration
- Fix: Site Changes bar counted deleted backups as the last backup — a deleted backup is not a restore point
- Fix: Leftover-files security notice could stay hidden for hours after a migration due to caching — now scans fresh on every admin page load
- Fix: History page "Register" button for orphan backups did nothing — its script was attached before the script handle was registered, so WordPress silently dropped it
- New: Real-time activity log panel during backup — shows DB export, file list, ZIP progress and completion in a terminal-style display
- Fix: Plugin Check warnings for non-sanitized JSON POST inputs (selected_paths, selected_tables) — sanitization happens correctly after json_decode
- New: Selective backup — Database Only and Files Only modes are now free (with table/folder picker)
- Fix: Checkbox visually not showing as checked in Settings > Exclusions
- Fix: Plugin language files now load correctly (load_textdomain with direct path)
- Fix: Backup log entries now show their real timestamps instead of all showing the finalize/cleanup time
- New: Review notice — admin banner shown 14 days after activation (plugin pages only) with remind/dismiss options
- New: Backup success review prompt — appears after each successful backup with one-click dismiss
- New: Settings > Exclusions — "Skip .ini files in WordPress root" option (default on); prevents php.ini / .user.ini from being included in backups and causing issues after migration
- New: Settings > Exclusions — Staging tab added with PRO badge
- Fix: Installer URL replace infinite loop on tables with non-UTF-8 primary keys (e.g. wp_wffilemods); cursor now base64-encoded in state
- Fix: Installer state save failure on non-UTF-8 database content (JSON_INVALID_UTF8_SUBSTITUTE)
- Fix: Installer MySQL error 1293 — TIMESTAMP multi-default incompatibility with MySQL 5.5 now auto-corrected
- Fix: Installer progress bar resetting on every replace chunk
- Fix: AJAX permission/nonce error showed generic "DB init failed." instead of actual message
- New: Site Changes Bar — shows what changed since the last backup (WordPress update, plugin/theme changes, new uploads) in the main backup card
- New: Activity Logs system — wpbn_logs DB table stores per-backup log entries (info/warning/error) for debugging and audit
- New: Logs admin page — backup rows are collapsible, showing timestamps and level badges; system-level logs shown separately
- New: Log retention setting — keep logs for last N backups (default 20), configurable from the Logs page
- New: Backup Encryption (AES-256) is now a free feature — password stored securely using WordPress secret keys
- New: Remove Encryption button in Settings to clear saved encryption password
- Fix: pollBackupStatus() now has a max retry limit (20) to prevent infinite polling on stale state
- Fix: ZIP close() failure recovery now rolls back offset to prevent double-processing files
- Cleanup: Removed dead and premium-only code from free plugin (restore engine stubs, cloud handlers, duplicate JS functions)
- New: French (fr_FR) translation added
- New: Cache directory exclusions moved to Settings — checkboxes for W3TC, WP Super Cache, WP Rocket, Divi, WP-Optimize, Breeze cache folders
- Improvement: Cache exclusion paths no longer hardcoded — stored in database, configurable per site
- Fix: Backup directory moved to uploads folder (
wp-content/uploads/nota-backup-restore) per wp.org guidelines - Fix: Removed PclZip fallback and global
PCLZIP_TEMPORARY_DIRconstant — ZipArchive is required
- Fix: Orphaned backup state (PHP killed mid-backup) now creates a failed record automatically via hourly cron — no longer requires opening the admin panel
- Fix: Removed non-functional notification code (email settings, test email handler) that was included but had no effect in the free version
- New: Backup type selector replaced with visual cards (Full, Database Only, Files Only)
- Improvement: File sizes in GB now display two decimal places (e.g. 1.34 GB)
- Improvement: ZIP chunk size is now auto-calculated based on available server memory
- Improvement: Files per chunk automatically scales with chunk size, with optional manual override in Settings
- Improvement: Smart chunk size auto-calculation based on server memory
- Improvement: Files per chunk auto-derived from chunk size (chunk MB × 40)
- Fix: Removed scheduled backup cron hook and callback — scheduled backups are a Pro feature and must not exist as locked code in the free version (Guideline 5)
- Fix: Removed
wpbn_run_cron_nowAJAX action that returned a premium-only error - Fix: Removed cron schedule interval definitions (wpbn_daily, wpbn_weekly, etc.) which were only used for scheduled backups
- Fix: Removed
assets/icon-128x128.pngfrom plugin ZIP — plugin assets must be uploaded separately via SVN
- Fix: Estimated backup size now works —
wpbn_size_estimateAJAX handler was missing and has been added - Fix: DB health check and test email AJAX handlers were missing and have been added
- Security:
installer-template.phpremoved from plugin; backup ZIPs no longer containinstaller.php— the installer is now generated on demand and downloaded separately from the admin panel as a.phpfile, never written to the server filesystem
- Fix: Removed bundled-but-locked feature stubs to comply with WordPress.org Guideline 5 (Trialware)
- Fix: installer-template.php security hardening — removed error_reporting(E_ALL), capped max_execution_time to 3600, fixed CSRF token output escaping, sanitized HTTP_HOST
- New: Standalone installer is now downloaded separately alongside the backup ZIP — upload both to the new server, open installer.php, and it extracts the ZIP and migrates the database automatically
- New: Free version released on WordPress.org as "Nota Backup & Restore"
- Removed: Freemius SDK — no longer required in the free version
- Removed: Cloud storage code — available in Pro version only
- Removed: Restore engine — available in Pro version only
- Removed: Emergency Recovery — available in Pro version only
- New: "Files Per Chunk" setting — configures how many files are processed per ZIP request
- Fix: ZIP Chunk Size (MB) setting now correctly limits bytes per request during ZIP creation
- Fix: Plugin deactivation now clears scheduled cron events to prevent orphaned tasks
- Fix: Critical file write operations now return proper errors on failure instead of silently corrupting the backup
- Improvement: Database export now streams directly to disk in 500-row batches — prevents out-of-memory errors on large databases
- Fix: Bootstrap CSS now bundled locally instead of loaded from CDN
- Fix: Wrapped all admin_url() calls with esc_url()
- Initial release