Linux 软件免费装
Banner图

NPC Maintenance Inspector

开发者 npc01
更新时间 2026年5月20日 17:32
PHP版本: 7.4 及以上
WordPress版本: 7.0
版权: GPLv2 or later
版权网址: 版权信息

标签

security maintenance monitoring diagnostics healthcheck

下载

1.0.0 1.0.1

详情介绍:

NPC Maintenance Inspector performs 9-point health diagnostics on your WordPress site directly from the admin dashboard:
  1. WordPress core updates — Detect missing core updates.
  2. Plugin updates — List plugins with available updates.
  3. Site Health issues — Extract critical issues from WP standard Site Health API.
  4. PHP version — Warn on end-of-life PHP versions.
  5. Error log analysis — Summarize debug.log entries and save a one-click backup to uploads/ for safe review.
  6. File integrity — Detect suspicious code patterns in core files (eval / base64_decode / etc.) by comparing checksums against the WordPress.org Checksum API.
  7. Suspicious files — Find unexpected PHP files in wp-content/uploads/, with built-in whitelist for known legitimate plugin files (Ajax Load More templates, WP STAGING index.php, AIOS firewall rules, etc.).
  8. SSL certificate — Check days until expiration (warn under 30 days, critical at 0).
  9. File permissions — Check critical files like wp-config.php, .htaccess, wp-content/.
Operational features: The plugin is locked to the user who activated it and to the original site URL, so it stays inert after backup restores to a different domain.

安装:

  1. Upload the plugin folder to /wp-content/plugins/ or install it via Plugins → Add New in the admin.
  2. Activate NPC Maintenance Inspector through the Plugins menu.
  3. Open NPC Inspector in the admin sidebar.
  4. Click Run Diagnosis to start a manual check.
  5. (Optional) Open NPC Inspector → Settings to enable scheduled auto-checks and email notifications.
  6. (Optional) Define NPCMI_API_KEY in wp-config.php to enable the AI report feature (see FAQ).

屏幕截图:

  • 9-point health check cards (WP Core / Plugins / Site Health / PHP / Error Log / File Integrity / Suspicious Files / SSL / Permissions).
  • Diagnosis history accordion with per-entry download.
  • Settings — security and bound site URL.
  • Settings — automatic diagnosis and email notification.
  • Settings — AI report feature configuration.
  • AI report rendered with severity badges.
  • Suspicious files card with safe-by-default whitelist behavior.

升级注意事项:

1.0.1 Updates the Claude model to claude-sonnet-4-6 ahead of the 2026-06-15 retirement of claude-sonnet-4. Recommended if you use the AI report feature. 1.0.0 Initial public release.

常见问题:

Is the AI report feature required?

No. AI report is optional and disabled by default. To enable it, add this line above /* That's all, stop editing! */ in your wp-config.php: define( 'NPCMI_API_KEY', 'sk-ant-xxxx' ); Without that constant the plugin still runs all 9 diagnostics, scheduled checks, email notifications, and history.

Does the plugin send any data externally?

By default, no. Only the AI report feature sends data, and only to Anthropic Claude API, and only when explicitly triggered (manual "Generate AI Report" button, or automatic generation when a scheduled check detects a critical issue). See the External services section below for details.

Who can use the plugin after activation?

Only the user who activated it. The user ID/email and the site URL are recorded on first activation, and the plugin refuses to operate for other users or on a different domain. This is a deliberate constraint to keep the AI cost surface and the admin actions tied to a specific operator.

Why are AI reports in Japanese?

This plugin was initially built for Japanese-speaking WordPress maintainers. The AI prompt instructs Claude to reply in Japanese. We will localize the prompt for additional output languages in a future release.

My site shows "suspicious files" in wp-content/uploads/. Should I delete them?

Not automatically. The detector tries to whitelist known legitimate plugin files (Ajax Load More templates, WP STAGING index.php, AIOS firewall rules, etc.). Anything that still appears in the warning should be opened and inspected first — many backup/staging/security plugins legitimately drop PHP files there.

更新日志:

1.0.1 (2026-05-15) 1.0.0 (2026-05-11)