susheelhbti

<p><strong>Server Scout</strong> is a tool for server administrators who manage multiple WordPress sites on the same server. Instead of logging into each site one by one, Scout gives you a single dashboard where you can see every WordPress installation on the server and quickly access them.</p>
<h4>What it does</h4>
<ul>
<li>Recursively scans a directory of your choice (e.g. <code>/var/www</code>) for all WordPress installations.</li>
<li>Stores the results in a dedicated database table so the dashboard loads instantly without re-scanning.</li>
<li>Refreshes the stored results automatically in the background (WP-Cron), every 30 minutes by default.</li>
<li>Displays each site’s name, URL, WordPress version, and database prefix.</li>
<li>Lists all administrator users for each site (username + email).</li>
<li>Generates a secure, one-time, 5-minute login link so you can jump straight into any site’s admin area without needing the password.</li>
</ul>
<h4>Who is it for?</h4>
<ul>
<li><strong>VPS / dedicated server owners</strong> managing multiple client or personal WordPress sites.</li>
<li><strong>Developers</strong> running several local or staging environments on one machine.</li>
<li><strong>Agencies</strong> with a fleet of sites on a single server.</li>
</ul>
<h4>How scanning & caching works</h4>
<ol>
<li>The first time you open the dashboard, click <strong>Scan Server</strong>.</li>
<li>Results are written to a <code>{prefix}servsc_sites</code> table — one row per installation.</li>
<li>Every later visit renders straight from that table (no filesystem walk).</li>
<li>A background WP-Cron task re-scans the same root on a schedule so the data stays fresh.</li>
<li>Use <strong>Rescan Now</strong> any time to force an immediate refresh.</li>
</ol>
<h4>How login links work</h4>
<ol>
<li>Click <strong>Generate Login Link</strong> next to any admin user.</li>
<li>A cryptographically signed, one-time token is stored in that site’s database (valid for 5 minutes).</li>
<li>The generated link goes through WordPress’s standard <code>admin-ajax.php</code> endpoint — not a direct PHP file — and includes a nonce for request verification.</li>
<li>Opening the link logs you directly into that site’s admin dashboard.</li>
<li>The token is deleted immediately on first use — it cannot be used twice.</li>
</ol>
<h4>Security</h4>
<ul>
<li>Requires the <code>manage_options</code> capability (Administrator) to use the plugin.</li>
<li>All form submissions are protected with WordPress nonces.</li>
<li>Login links use <code>wp_ajax_nopriv_</code> (WordPress AJAX), include a nonce, and go through <code>admin-ajax.php</code>.</li>
<li>Tokens are HMAC-signed with a per-token secret — cannot be forged.</li>
<li>Scan paths are validated with <code>realpath()</code> before use.</li>
<li>All database queries use prepared statements.</li>
<li>The standard <code>wp_login</code> action is fired on login so security plugins (login limiters, audit logs) are notified.</li>
</ul>
<p><strong>Important:</strong> This plugin is intended for server administrators only. Do not install it on shared hosting environments where you do not control all sites on the server.</p>


Server Scout

Helps server administrators discover and manage all WordPress installations on the same server from a single dashboard.

Arul Prasad J

<p>This is a lightweight WordPress plugin that displays the current running PHP/MySQL version inside “At a Glance” admin dashboard widget.</p>
<p>Plugin uses standard actions and filters only. (No jQuery used)</p>
<p>If you love this plugin, <a href="https://paypal.me/arulprasadj?locale.x=en_GB" rel="nofollow ugc">buy me a cup of coffee</a></p>


WP PHP Version Display

Displays the current running PHP/MySQL version inside "At a Glance" admin dashboard widget.

Server Scout vs WP PHP Version Display