csgaku

CSGaku Site State Check is a lightweight plugin for reviewing basic WordPress site status from the admin area.
The plugin is designed for administrators and developers who want to check important maintenance and security-related signals on demand. It does not automatically repair, delete, or change site settings. It presents the current state so the site administrator can decide what to review next.
CSGaku Site State Check does not use external API communication or external vulnerability database lookups for its checks. It uses information available within the WordPress site and server environment.
The plugin can run on PHP 7.4 or later, but PHP 8.2 or later is recommended.
Design principles:
<ul>
<li>No external API or external service communication for normal checks</li>
<li>No automatic repair</li>
<li>No automatic deletion</li>
<li>No automatic setting changes</li>
<li>No direct display of secret values or full file contents</li>
<li>Results organized by status and severity</li>
<li>Latest result, simple local history, and CSV export support</li>
</ul>
Main checks include:
<ul>
<li>PHP version</li>
<li>WordPress version</li>
<li>Site URL and home URL</li>
<li>SSL status</li>
<li>Sitemap</li>
<li>Debug settings</li>
<li>wp-config.php</li>
<li>.htaccess</li>
<li>index.php</li>
<li>wp-admin, wp-content, and wp-includes</li>
<li>Public access protection for debug.log</li>
<li>PHP execution prevention setting in uploads</li>
<li>wp-config.php structure and location</li>
<li>SALT constants</li>
<li>Administrator user count</li>
<li>Presence of the admin username</li>
<li>Older administrator accounts</li>
<li>Application passwords</li>
<li>Search engine visibility setting</li>
<li>XML-RPC status</li>
<li>Core, plugin, and theme update status</li>
<li>Inactive plugins</li>
<li>Unused theme candidates</li>
<li>444 and 555 permissions under wp-content</li>
<li>uploads/YYYY/.htaccess and uploads/YYYY/MM/.htaccess</li>
</ul>
About obfuscation-related checks:
CSGaku Site State Check can review index.php for patterns that are sometimes associated with obfuscation, such as base64, eval, gzinflate, long Base64-like strings, hex escapes, and chr concatenation. If such patterns are found, they are shown as items to review. They are not treated as final proof of malicious code by themselves.
About permissions:
The plugin checks 444 and 555 permissions under wp-content. These permissions may be intentional in some environments, but they can also affect updates, deletion, and maintenance work. When such items are found under themes, the plugin can note that they may be intentional depending on the environment.
About uploads security:
The plugin checks whether uploads/.htaccess contains PHP execution prevention rules, and it also checks for .htaccess files under uploads year/month folders. If relevant .htaccess files are found in those locations, they are shown for review without displaying file contents.
About CSV export:
The latest result can be exported as CSV with a UTF-8 BOM for compatibility with spreadsheet applications. To reduce CSV formula injection risk, values starting with dangerous leading characters are escaped before export.
Important limitations:
<ul>
<li>This plugin is a confirmation tool.</li>
<li>It does not provide malware cleanup.</li>
<li>It does not provide automatic remediation.</li>
<li>It does not provide complete vulnerability assessment.</li>
<li>It does not guarantee detection of all issues.</li>
<li>Final review and response should be handled by the site administrator.</li>
</ul>

CSGaku Site State Check

Checks key WordPress site status items from the admin area without external API communication or automatic changes.

Usman Ali Qureshi

Server Info – System Health & Diagnostics Suite provides a stunning, comprehensive dashboard to track your server’s health, debug fatal errors, and monitor database limits, all for free.
Why pay for a PRO server monitoring plugin when you can get all the premium features out-of-the-box? This plugin gives you a detailed look into your web hosting environment, helping you easily identify bottlenecks, memory limits, and configuration errors that could be slowing down your site or crashing WooCommerce.
<h3>🌟 Premium Features included for FREE:</h3>
<ul>
<li>Always-On Admin Bar HUD: A sleek HUD in your top WordPress admin bar showing your Environment (Local/Staging/Production), PHP version, and live RAM usage percentage.</li>
<li>Smart Environment Badges: Auto-detects if you are on a Local or Staging site, displaying a color-coded badge so you never accidentally break a live production site!</li>
<li>Advanced Database Limits: View your <code>Max Connections</code> and <code>Max Allowed Packet</code> to prevent your database from crashing during high-traffic events.</li>
</ul>
<h3>📊 Comprehensive System Diagnostics:</h3>
<ul>
<li>PHP Information: PHP Version, Memory Limit, Upload Max Size, Post Max Size, Max Execution Time, Active Extensions.</li>
<li>Database Information: MySQL Version, Total Database Size, Database Charset & Collation, Top 5 Largest Tables with Sizes, Max Allowed Packet, and Max Connections.</li>
<li>WordPress Configuration: WP Memory Limit, Debug Mode Status, Multisite Detection, Permalink Structure, Current Theme, and Active/Inactive Plugins list.</li>
<li>Server Details: Server IP, Server Hostname, Web Server Software (Nginx/Apache/LiteSpeed), OS Architecture, and Live CPU/Memory/Uptime Metrics.</li>
<li>Caching & Optimization: Detects OPcache, Memcached, Redis Cache, and Output Buffering status to ensure your server is primed for speed.</li>
<li>Diagnostics & Security: Detects file permissions for <code>wp-config.php</code>, <code>wp-content</code>, and <code>uploads</code> directories, plus checks if WP Cron is running properly or disabled.</li>
</ul>
Please rate the Plugin if you find it useful, thanks!

Server Info – System Health & Diagnostics Suite

Thanks Usman Ali for this great work :)



Easy to use and helpful!

This is exactly what I needed. Unfortunately, it didn't work -- or rather, it crashed with two notices: Undefined index 'SERVER_ADDR' and undefined index 'SERVER_ADMIN' and one fatal error "Call to undefined function mysqli_connect()".

In all fairness, I'm using version 4.9.4 of Wordpress and the documentation shows that the Server Info plugin hasn't been tested with it. But I didn't expect a fatal error crash.

This Wordpress site is on a 3rd party shared hosting platform running IIS. I have a plugin that I am developing that works flawlessly on my other Wordpress sites but fails on this one. I suspect an out-of-date component -- either PHP or MySQL or something unexpected. I was hopeful that the Server Info plugin would help me track down the culprit.

Crashed with Fatal Error

nice after a migration, to know on which server we are

useful

No indication of reason of problem.

The "Server Info" menu item simply fails to appear on some sites.

Server Info menu item missing on some sites


Quick and easy. Thank you for the efforts. ;)


Good work!

The ultimate free Server Info plugin for WordPress. View Memory Limits, PHP/MySQL versions, Datacenter Location, and an Always-On Admin HUD.

CSGaku Site State Check vs Server Info – System Health & Diagnostics Suite