SiteIntelix – WordPress Toolkit
| 开发者 | parag44 |
|---|---|
| 更新时间 | 2026年8月1日 18:17 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- 🩺 Server Diagnostics — inspect server health, PHP configuration, extensions, filesystem permissions, network access, WordPress, and database limits.
- 🧾 Debug Log Viewer — capture, search, group, filter, clear, and download private WordPress debug logs.
- ✉️ Email Log — record outgoing WordPress emails with recipients, headers, status, failures, and message previews.
- 📮 SMTP Mailer — route WordPress emails through your own SMTP provider for more reliable delivery.
- ⏱️ Cron Events — inspect scheduled WP-Cron events, run due events manually, and remove selected events safely.
- 🗄️ Database Manager — browse tables, inspect rows, search records, review sizes, and edit selected rows from wp-admin.
- 📦 Download Manager — add secure download links for installed plugin and theme ZIP packages.
- 📁 File Manager — use a focused DirectAdmin-inspired browser to navigate the WordPress installation, inspect approved files, edit safe text formats only inside configured writable locations, upload allowed files, create ZIP exports, and manage private backups and trash under enforced Safe Mode rules.
- 🛡️ Safe Mode Debugger — test plugin and theme conflict scenarios privately without affecting normal visitors.
- 👥 User Switcher — temporarily enter an allowed user account for support without requesting or changing its password, then return securely.
- 🎨 Custom CSS & JS — manage reusable administrator-authored CSS and JavaScript with frontend/admin scope, placement, priority, and inline or generated-file loading.
- 💻 Code Snippets — validate, organize, and run administrator-authored PHP in isolated closures with automatic error deactivation and recovery controls.
- 🚧 Maintenance Mode — show a polished public maintenance page while administrators continue working.
- 🧰 Modular Toolbox — enable or disable each tool from the SiteIntelix Modules screen.
- Keep troubleshooting tools in one place instead of installing many small utilities.
- Share clean diagnostic reports with support teams.
- See the active PHP configuration and server limits that often explain plugin/import failures.
- Review debug logs, email delivery, cron jobs, database rows, and maintenance mode from wp-admin.
- Keep sensitive data local: SiteIntelix does not upload logs, email contents, database contents, or generated reports.
- One focused log viewer — a compact table with Type, Last seen, Count, Description, File, and Line columns.
- Search, error-type filters, time ranges, adjustable pagination, optional columns, and grouped duplicate entries.
- Expandable stack traces plus protected refresh, clear, and download actions.
- First-run automatic setup plus dedicated settings for WP_DEBUG, SCRIPT_DEBUG, WP_DEBUG_LOG, WP_DEBUG_DISPLAY, and SAVEQUERIES.
- SiteIntelix uses the audited WP-CLI
WPConfigTransformerlibrary to update WordPress debug constants inwp-config.php. - A restricted
wp-config.php.siteintelix.bakbackup is created before changes. - WP_DEBUG_LOG points to a cryptographically randomized
.logfilename in protectedwp-content/siteintelix/storage instead of the defaultwp-content/debug.log. - Error display remains disabled by default and can be enabled explicitly from Debug Log settings when local troubleshooting requires it.
- SiteIntelix admin pages require the
manage_optionscapability. On Multisite, executable-code and network-sensitive tools require a Multisite super administrator. - Admin actions use WordPress nonces.
- Output is escaped with WordPress escaping functions.
- No external CDN assets or heavy JavaScript frameworks are loaded.
- Assets are scoped to SiteIntelix admin pages.
- SiteIntelix sends no telemetry and does not upload diagnostics, logs, email contents, database contents, snippets, custom code, or generated reports.
- Server reachability checks may contact WordPress.org endpoints and the site's own loopback or REST URL. They send normal HTTP request metadata, not report contents.
- SMTP sends outgoing mail through the administrator-configured SMTP provider. Its credential is stored locally in a non-autoloaded WordPress option.
- Enabled Code Snippets execute locally authored PHP through the module's isolated runner. SiteIntelix does not retrieve or execute remote snippet code.
- Custom CSS & JS can add administrator-authored executable JavaScript to configured frontend or admin pages.
- User Switcher uses WordPress-native authentication, signed short-lived state, dedicated capabilities, protected roles, and optional local audit logs.
- File Manager canonicalizes every path and provides read-only navigation across the WordPress installation. Writes remain confined to configured safe locations; symbolic-link traversal, private storage access, protected locations, sensitive-file content access, and PHP modification are blocked.
- Debug logs, email logs, database values, diagnostic reports, and switching records can contain sensitive information and should be shared only with trusted people.
[siteintelix_panel] on any page or post to display a compact system information table. The shortcode output is visible only to logged-in administrators.
安装:
- Log in to your WordPress admin.
- Go to Plugins → Add New.
- Search for SiteIntelix.
- Click Install Now, then Activate.
- Download the plugin ZIP file.
- Go to Plugins → Add New → Upload Plugin.
- Select the ZIP file and click Install Now.
- Click Activate Plugin. After activation, open SiteIntelix in the WordPress admin menu.
屏幕截图:
常见问题:
Who can access the plugin screens?
Users need the manage_options capability to access SiteIntelix. On Multisite, Code Snippets, Custom CSS & JS, Debug Log configuration, Database Manager, Download Manager, and Safe Mode require a Multisite super administrator. Code modules also require WordPress' unfiltered_html capability.
Does Code Snippets execute PHP?
Yes. Enabled administrator-authored PHP runs locally in an isolated closure. Snippets are syntax-checked before saving or activation, controls require capabilities and nonces, and a captured runtime failure deactivates the affected snippet. The executor intentionally uses PHP eval() for this local feature and never downloads remote code.
Where are Custom CSS & JS files stored?
Entries are stored in a plugin-owned database table. When external-file loading is selected, generated files use the restricted wp-content/uploads/siteintelix/custom-code/ directory. SiteIntelix only deletes files that match its managed filename pattern.
Where does SiteIntelix write debug logs?
WordPress writes to a randomized file in the protected SiteIntelix content directory. The viewer shows only its WordPress-relative path, not the complete server path.
Does SiteIntelix use wp-content/debug.log?
No. SiteIntelix uses its own randomized private log file so WordPress' default debug.log is not used by this plugin.
Nginx private storage rule
Nginx does not read .htaccess. Administrators using the default WordPress content URL should add this rule inside the relevant server block:
location ^~ /wp-content/siteintelix/ {
deny all;
return 403;
}
If WP_CONTENT_URL is customized, replace /wp-content/ with that installation's actual content URL path. Keep the rule scoped to the complete SiteIntelix directory, reload Nginx after validating the configuration, and use SiteIntelix's authenticated admin viewer or export handler to access logs.
Does SiteIntelix edit wp-config.php?
Yes, only when an authorized administrator starts debugging or changes a Debug Log setting. SiteIntelix uses WPConfigTransformer, validates an allowlist of debug constants, and writes a restricted adjacent backup first. If wp-config.php is read-only, the log viewer remains available while configuration changes report the write failure.
Can the viewer search logs beyond the current page?
Yes. Search and server-side filters are applied to the parsed log dataset before pagination.
Does this plugin collect or send data anywhere?
SiteIntelix does not collect telemetry or upload diagnostics, logs, email contents, database contents, or generated reports. When an administrator refreshes Server Diagnostics, reachability checks may contact WordPress.org endpoints and the site's own loopback or REST URL. Those checks send normal HTTP request metadata, not SiteIntelix report contents.
How do I use the shortcode?
Add [siteintelix_panel] to a page or post. Only administrators can see the output.
Is the plugin Multisite compatible?
Yes. Site-scoped tools can be activated per site. Tools that can execute code, inspect network-wide database data, read installed source packages, write safety MU files, or change debug configuration require a Multisite super administrator.
What happens when I delete the plugin?
SiteIntelix removes its settings, scheduled events, logs, and only signature-verified SiteIntelix safety MU bootstrap files. Custom CSS & JS entries, generated assets, Code Snippets, and File Manager-owned backups, trash, metadata, and audit records are removed only when their independent uninstall-retention settings are enabled. Debug constants are not silently rewritten during deletion; the viewer should be used to disable them first.
Can File Manager edit PHP or WordPress core files?
No. File Manager is Safe Mode-only in this release. PHP files remain view-only, while WordPress core, wp-config.php writes, SiteIntelix, must-use plugins, active plugins, and the active theme are protected. WordPress' DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants are also enforced.
更新日志:
- Added: WPConfigTransformer-based debugging, protected randomized log storage, first-run automatic setup, grouped logs, filters, stack traces, pagination, clear, and download actions.
- Fixed: Removed Debug Log MU-mode runtime files, separated capture settings from the log viewer, and prevented transformer conflicts with other plugins.
- Added: DirectAdmin-inspired File Manager, lazy WordPress-root folder tree, read-only protected locations, private ZIP downloads, and randomized protected debug storage.
- Fixed: Blocked traversal, symlink escapes, sensitive-file access, unsafe writes, and third-party notices inside SiteIntelix screens.
- Added: Safe Mode File Manager, Custom CSS & JS, Code Snippets, Maintenance Mode artwork selection, and improved User Switcher recovery and activity logging.
- Fixed: Code Snippets bootstrap order, generated-file ownership checks, multisite permissions, SMTP storage, transient previews, and uninstall cleanup matching.
- Added: User Switcher, Database Manager and Server Diagnostics dashboards, Email Log actions, and responsive Debug Log details.
- Fixed: Overview module toggles, request overhead, capability checks, nonce validation, output escaping, SQL allow-lists, and package-path validation.
- Added: Grouped Debug Log rows, expanded details, copy actions, severity indicators, filters, pagination, and native editor links.
- Fixed: Debug Log layout spacing and full-width log-row presentation.
- Added: Shared WordPress-native admin design system and focused Server Diagnostics reporting.
- Fixed: Removed the retired Custom Error UI and safely cleaned its SiteIntelix-owned files and settings. Earlier release history remains available in previous WordPress.org tags.