susheelhbti

<p><strong>Server Scout</strong> is a tool for server administrators who manage multiple WordPress sites on the same server. Instead of logging into each site one by one, Scout gives you a single dashboard where you can see every WordPress installation on the server and quickly access them.</p>
<h4>What it does</h4>
<ul>
<li>Recursively scans a directory of your choice (e.g. <code>/var/www</code>) for all WordPress installations.</li>
<li>Stores the results in a dedicated database table so the dashboard loads instantly without re-scanning.</li>
<li>Refreshes the stored results automatically in the background (WP-Cron), every 30 minutes by default.</li>
<li>Displays each site’s name, URL, WordPress version, and database prefix.</li>
<li>Lists all administrator users for each site (username + email).</li>
<li>Generates a secure, one-time, 5-minute login link so you can jump straight into any site’s admin area without needing the password.</li>
</ul>
<h4>Who is it for?</h4>
<ul>
<li><strong>VPS / dedicated server owners</strong> managing multiple client or personal WordPress sites.</li>
<li><strong>Developers</strong> running several local or staging environments on one machine.</li>
<li><strong>Agencies</strong> with a fleet of sites on a single server.</li>
</ul>
<h4>How scanning & caching works</h4>
<ol>
<li>The first time you open the dashboard, click <strong>Scan Server</strong>.</li>
<li>Results are written to a <code>{prefix}servsc_sites</code> table — one row per installation.</li>
<li>Every later visit renders straight from that table (no filesystem walk).</li>
<li>A background WP-Cron task re-scans the same root on a schedule so the data stays fresh.</li>
<li>Use <strong>Rescan Now</strong> any time to force an immediate refresh.</li>
</ol>
<h4>How login links work</h4>
<ol>
<li>Click <strong>Generate Login Link</strong> next to any admin user.</li>
<li>A cryptographically signed, one-time token is stored in that site’s database (valid for 5 minutes).</li>
<li>The generated link goes through WordPress’s standard <code>admin-ajax.php</code> endpoint — not a direct PHP file — and includes a nonce for request verification.</li>
<li>Opening the link logs you directly into that site’s admin dashboard.</li>
<li>The token is deleted immediately on first use — it cannot be used twice.</li>
</ol>
<h4>Security</h4>
<ul>
<li>Requires the <code>manage_options</code> capability (Administrator) to use the plugin.</li>
<li>All form submissions are protected with WordPress nonces.</li>
<li>Login links use <code>wp_ajax_nopriv_</code> (WordPress AJAX), include a nonce, and go through <code>admin-ajax.php</code>.</li>
<li>Tokens are HMAC-signed with a per-token secret — cannot be forged.</li>
<li>Scan paths are validated with <code>realpath()</code> before use.</li>
<li>All database queries use prepared statements.</li>
<li>The standard <code>wp_login</code> action is fired on login so security plugins (login limiters, audit logs) are notified.</li>
</ul>
<p><strong>Important:</strong> This plugin is intended for server administrators only. Do not install it on shared hosting environments where you do not control all sites on the server.</p>


Server Scout

Helps server administrators discover and manage all WordPress installations on the same server from a single dashboard.

Justin Peacock

<p>Env Bar is a great way to keep track of your server environment. On the Env Bar Settings page you can select Development, Staging, or Production to then output a colored bar in the bottom of your site.</p>
<h3>Credits</h3>
<p>Icon: Created by Aneeque Ahmed from the Noun Project</p>


Env Bar

Display a colored bar to help distinguish between different environments.

Server Scout vs Env Bar