Fabio Pacifici

<p>The Freelance Admin Hider adds a new set on settings under the general settings page in the admin panel<br />
to allow freelancers to control which menu item the client sees<br />
in the admin panel when they log in.</p>
<p>The plugin hides specific pages and redirects the user back to the main<br />
admin page if he tries to visit directly one of the hidden pages.</p>
<p>This way the freelance has full control over themes, plugins, settings and other<br />
critical pages.</p>
<p>The plugin lets only the admin with an ID of 1 view these pages<br />
in a WordPress multisite installation it will be the super admin of the network.</p>
<p>Features of the plugin:<br />
Under settings > general you can select to remove all the following items from the<br />
menu using a check box.</p>
<ul>
<li>Removes the Dashboard menu item</li>
<li>Removes the Posts menu item</li>
<li>Removes the Media menu item</li>
<li>Removes the Pages menu item</li>
<li>Removes teh Comments menu item</li>
<li>Removes the Appearance menu item</li>
<li>Removes the Plugins menu item</li>
<li>Removes the Users menu item</li>
<li>Removes the Tools menu item</li>
<li>Removes the Settings menu item</li>
<li>Remove theme editor menu</li>
<li>Remove plugin editor menu</li>
</ul>
<p>You can also remove from the top tools bar the following elements</p>
<ul>
<li>Removes the WordPress Logo</li>
<li>Removes the updates menu</li>
</ul>
<h3>How it Works</h3>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe class="youtube-player" width="640" height="360" src="https://www.youtube.com/embed/cU36Mw8NLhY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation"></iframe></span>
<h3>Compatible with any WordPress</h3>
<p>This plugin is fully compatible with any WordPress theme.</p>


Freelance Admin Hider

This plugin hides menu items form the WordPress Admin Panel to help freelancers control which menu item is 
visible to a client.

susheelhbti

<p><strong>Server Scout</strong> is a tool for server administrators who manage multiple WordPress sites on the same server. Instead of logging into each site one by one, Scout gives you a single dashboard where you can see every WordPress installation on the server and quickly access them.</p>
<h4>What it does</h4>
<ul>
<li>Recursively scans a directory of your choice (e.g. <code>/var/www</code>) for all WordPress installations.</li>
<li>Stores the results in a dedicated database table so the dashboard loads instantly without re-scanning.</li>
<li>Refreshes the stored results automatically in the background (WP-Cron), every 30 minutes by default.</li>
<li>Displays each site’s name, URL, WordPress version, and database prefix.</li>
<li>Lists all administrator users for each site (username + email).</li>
<li>Generates a secure, one-time, 5-minute login link so you can jump straight into any site’s admin area without needing the password.</li>
</ul>
<h4>Who is it for?</h4>
<ul>
<li><strong>VPS / dedicated server owners</strong> managing multiple client or personal WordPress sites.</li>
<li><strong>Developers</strong> running several local or staging environments on one machine.</li>
<li><strong>Agencies</strong> with a fleet of sites on a single server.</li>
</ul>
<h4>How scanning & caching works</h4>
<ol>
<li>The first time you open the dashboard, click <strong>Scan Server</strong>.</li>
<li>Results are written to a <code>{prefix}servsc_sites</code> table — one row per installation.</li>
<li>Every later visit renders straight from that table (no filesystem walk).</li>
<li>A background WP-Cron task re-scans the same root on a schedule so the data stays fresh.</li>
<li>Use <strong>Rescan Now</strong> any time to force an immediate refresh.</li>
</ol>
<h4>How login links work</h4>
<ol>
<li>Click <strong>Generate Login Link</strong> next to any admin user.</li>
<li>A cryptographically signed, one-time token is stored in that site’s database (valid for 5 minutes).</li>
<li>The generated link goes through WordPress’s standard <code>admin-ajax.php</code> endpoint — not a direct PHP file — and includes a nonce for request verification.</li>
<li>Opening the link logs you directly into that site’s admin dashboard.</li>
<li>The token is deleted immediately on first use — it cannot be used twice.</li>
</ol>
<h4>Security</h4>
<ul>
<li>Requires the <code>manage_options</code> capability (Administrator) to use the plugin.</li>
<li>All form submissions are protected with WordPress nonces.</li>
<li>Login links use <code>wp_ajax_nopriv_</code> (WordPress AJAX), include a nonce, and go through <code>admin-ajax.php</code>.</li>
<li>Tokens are HMAC-signed with a per-token secret — cannot be forged.</li>
<li>Scan paths are validated with <code>realpath()</code> before use.</li>
<li>All database queries use prepared statements.</li>
<li>The standard <code>wp_login</code> action is fired on login so security plugins (login limiters, audit logs) are notified.</li>
</ul>
<p><strong>Important:</strong> This plugin is intended for server administrators only. Do not install it on shared hosting environments where you do not control all sites on the server.</p>


Server Scout

Helps server administrators discover and manage all WordPress installations on the same server from a single dashboard.

Freelance Admin Hider vs Server Scout