iNET

<p><strong>Sitevorx</strong> is a lightweight, all-in-one WordPress plugin that helps you optimize performance, harden security, and manage your website from a single, modern dashboard. No bloat, no external dependencies — just the tools you need.</p>
<h4>Security Center (NEW in 1.1.0)</h4>
<ul>
<li><strong>Security Score Dashboard</strong>: A single 0–100 score that summarizes the hardening state of your site, with prioritized recommendations.</li>
<li><strong>Core Integrity Checker</strong>: Compares every WordPress core file against the official <code>api.wordpress.org</code> MD5 checksums to detect modified, missing, or extra files.</li>
<li><strong>HTTP Security Headers</strong>: One-click enable <code>X-Content-Type-Options</code>, <code>X-Frame-Options</code>, <code>Referrer-Policy</code>, and <code>Permissions-Policy</code> on the frontend.</li>
<li><strong>Login Honeypot</strong>: Invisible bait field on <code>wp-login.php</code> that silently rejects spam bots without affecting real users.</li>
<li><strong>User Enumeration Protection</strong>: Blocks <code>?author=N</code> probing and the public REST <code>/wp/v2/users</code> endpoint for non-logged-in visitors.</li>
<li><strong>Login Notification</strong>: Emails the administrator whenever an account with <code>manage_options</code> logs in successfully (1-hour cooldown per IP).</li>
<li><strong>Login Attempt Limiter</strong>: Lock out IPs after repeated failed login attempts, with configurable threshold, lockout duration, and IP allowlist.</li>
<li><strong>Secret Login URL</strong>: Hide the default <code>wp-login.php</code> behind a custom keyword.</li>
<li><strong>Google reCAPTCHA v2 / v3</strong>: Protect the login form from bots, with a configurable v3 score threshold.</li>
<li><strong>Disable XML-RPC</strong> and <strong>Disable File Editor</strong>: Block DDoS / brute-force vectors and stop code editing from the dashboard.</li>
</ul>
<h4>Speed Optimization</h4>
<ul>
<li><strong>Heartbeat Throttle</strong>: Slows the Heartbeat API to 60 seconds instead of disabling it, preserving autosave and post-locking.</li>
<li><strong>System Tweaks</strong>: Lazy load images, limit post revisions, allow safe SVG uploads (with XXE-hardened sanitizer).</li>
<li><strong>Database Cleanup</strong>: Remove revisions, spam comments, and expired transients in one click.</li>
<li><strong>Malware Scanner</strong>: Scan your entire codebase and database for suspicious injections.</li>
</ul>
<h4>SMTP Configuration</h4>
<ul>
<li>Send emails via <strong>Gmail</strong> (App Password) or a <strong>custom SMTP server</strong> (SSL/TLS).</li>
<li>Built-in <strong>Test Email</strong> sender.</li>
<li>Email delivery log with success/failure tracking.</li>
<li>Force From Name and From Email to prevent address drift.</li>
</ul>
<h4>Website Utilities</h4>
<ul>
<li>Inject tracking codes in <strong>Header/Footer</strong> (Google Analytics, Facebook Pixel, etc.).</li>
<li><strong>Content Protection</strong>: Disable right-click, text selection, and drag-and-drop.</li>
<li><strong>Maintenance Mode</strong>: Display a professional “under construction” page to visitors.</li>
<li><strong>Custom Login Logo</strong>: Replace the WordPress logo on the login screen with your own brand.</li>
</ul>
<h4>Disk Space Manager</h4>
<ul>
<li>Recursively scan your hosting for large files (>50 MB).</li>
<li>Auto-categorize files (backups, error logs, large media).</li>
<li>Bulk delete to free up disk space instantly.</li>
</ul>
<h4>Floating Contact Buttons</h4>
<ul>
<li><strong>Phone Hotline</strong> button with animated icon.</li>
<li><strong>Zalo</strong> chat button (auto-opens Zalo app).</li>
<li><strong>Messenger</strong> chat button (m.me deep link).</li>
<li>Fully responsive floating widget in the corner of your site.</li>
</ul>
<h4>Import / Export Settings</h4>
<ul>
<li><strong>Export</strong> all Sitevorx settings as a JSON file.</li>
<li><strong>Import</strong> settings from another site in one click.</li>
<li><strong>Reset</strong> all settings to factory defaults.</li>
</ul>
<h4>Scheduled Cleanup (WP-Cron)</h4>
<ul>
<li>Automatic cleanup: daily, twice daily, or weekly.</li>
<li>Clears temp files, auto-drafts, spam, and optimizes database tables.</li>
<li>Activity log showing the last 20 cleanup runs.</li>
</ul>
<h4>Maintenance & Update Monitor</h4>
<ul>
<li>Track plugins and themes that need updating.</li>
<li>Check WordPress core, PHP version, SSL status, and WP_DEBUG.</li>
<li>Maintenance health score with actionable recommendations.</li>
</ul>
<h4>Server Info</h4>
<ul>
<li>View Web Server, PHP, MySQL, and WordPress versions at a glance.</li>
<li>PHP limits: memory, execution time, input vars, upload size.</li>
<li>List all loaded PHP extensions.</li>
<li>Database size monitoring.</li>
</ul>
<h3>External Services</h3>
<h4>Google reCAPTCHA (v2 and v3)</h4>
<p>Sitevorx can optionally integrate with Google reCAPTCHA (v2 checkbox or v3 invisible / score-based) to protect the WordPress login form. This feature is disabled by default and only works when an administrator explicitly enables it, selects a version, and provides valid Google-issued API keys.</p>
<p>When enabled, the plugin loads the Google reCAPTCHA JavaScript on the login screen and sends the generated verification token to Google’s verification endpoint (<code>https://www.google.com/recaptcha/api/siteverify</code>) during login validation. For v3, the configurable score threshold (filter <code>sitevorx_recaptcha_v3_score_threshold</code>, default <code>0.5</code>) is compared against Google’s returned score.</p>
<p>This service is provided by Google:<br />
* Service URL: https://www.google.com/recaptcha/<br />
* Verification endpoint: https://www.google.com/recaptcha/api/siteverify<br />
* Terms of Service: https://policies.google.com/terms<br />
* Privacy Policy: https://policies.google.com/privacy</p>
<h4>WordPress.org Core Checksums API</h4>
<p>The <strong>Security Center <span aria-hidden="true" class="wp-exclude-emoji">→</span> Kiểm Tra Toàn Diện <span aria-hidden="true" class="wp-exclude-emoji">→</span> WordPress Core Integrity</strong> check (off by default; runs only when the admin clicks “Kiểm tra”) fetches the official MD5 checksums for the installed WordPress version from WordPress.org so it can flag modified or missing core files.</p>
<ul>
<li>Verification endpoint: https://api.wordpress.org/core/checksums/1.0/</li>
<li>Request payload: only the installed WordPress version string (e.g. <code>6.4.2</code>) and the locale <code>en_US</code>. No site URL, user data, or content is sent.</li>
<li>Operated by: WordPress.org</li>
<li>Terms of Service: https://wordpress.org/about/privacy/</li>
</ul>
<h3>Highlights</h3>
<ul>
<li><strong>All-in-one</strong>: Replaces 5-7 single-purpose plugins (SMTP, Security, Optimization, Cleanup, Maintenance).</li>
<li><strong>Modern UI</strong>: Gradient banners, collapsible sidebar, toast notifications, fully responsive.</li>
<li><strong>Secure by design</strong>: Nonce verification, input sanitization, CSRF protection, prepared database queries.</li>
<li><strong>Lightweight</strong>: Modular architecture — only loads what you use. Zero frontend impact. No Composer or NPM required.</li>
<li><strong>Localized</strong>: Full Vietnamese (vi) translation included via .po/.mo files.</li>
</ul>


Sitevorx

An all-in-one WordPress toolkit for site optimization, security hardening, SMTP configuration, disk cleanup, and maintenance monitoring.

Majix

<p>The Jix Media Library Cleanup Tool is the ultimate solution for WordPress administrators looking to clean up their media library, reduce database bloat, and improve site performance.</p>
<p>Over time, your WordPress Media Library accumulates “orphaned” items—database entries without files, files not attached to any posts, or broken links. This tool allows you to scan, analyze, and remove these items safely.</p>
<p><strong>🚀 <a href="https://fardara.ir/pro/media-cleanup.html" rel="nofollow ugc">Upgrade to the Pro Version</a></strong> to unlock Deep Scanning for page builders (Elementor/Divi), Automated Scheduling, and Advanced Filtering.</p>
<h3>✨ Free (Lite) Features</h3>
<ul>
<li><strong>Dashboard Overview:</strong> Get a quick snapshot of your library health, including Total Attachments, Estimated Library Size, and Unattached Items.</li>
<li><strong>Dry Run Mode:</strong> The safest way to clean. Run a full simulation to see exactly what <em>would</em> be deleted without touching a single file.</li>
<li><strong>Move to Trash:</strong> Support for “Soft Delete.” Instead of permanently deleting files, move them to the WordPress Trash first so you can restore them if needed.</li>
<li><strong>Standard Cleanup Criteria:</strong>
<ul>
<li><strong>Missing Parent Post:</strong> Attachments belonging to deleted posts.</li>
<li><strong>Missing Physical File:</strong> Database records where the actual file is missing from the server.</li>
<li><strong>HTTP Errors:</strong> Detects images returning 403 (Forbidden) or 404 (Not Found) errors.</li>
<li><strong>Unattached (Unused) Media:</strong> Files that are not attached to any specific post or page.</li>
</ul>
</li>
<li><strong>Safety Protections:</strong>
<ul>
<li><strong>Ignore Recent Files:</strong> specific setting to protect files uploaded within the last X days (default 30) from being scanned.</li>
<li><strong>Manual Exclusions:</strong> “Lock” specific files to ensure they are never deleted.</li>
</ul>
</li>
<li><strong>Real-Time Logs:</strong> View a live log of the cleaning process directly on the screen as batches are processed.</li>
<li><strong>Batch Processing:</strong> Processes files in small batches (Max 5 in Lite) to prevent server timeouts.</li>
</ul>
<h3>💎 Pro Features</h3>
<p>Unlock the full power of Jix Media Cleanup:<br />
<a href="https://fardara.ir/pro/media-cleanup.html" rel="nofollow ugc">Get Pro Version Now</a></p>
<ul>
<li><strong>Deep Scan Engine:</strong> The standard scan looks at WordPress attachments. The <strong>Deep Scan</strong> engine analyzes content within Page Builders (Elementor, Divi), Widgets, and Theme Options to ensure you don’t delete images currently in use by your design tools.</li>
<li><strong>Automated Scheduler:</strong> “Set it and forget it.” Schedule your cleanups to run automatically (Daily, Weekly, or Monthly) with your preferred criteria.</li>
<li><strong>Advanced Audit Logging:</strong> Keep a permanent record of every action taken with downloadable log files.</li>
<li><strong>Advanced Filtering:</strong>
<ul>
<li><strong>Filter by Parent Post Types:</strong> Restrict scans to specific post types (e.g., scan only ‘product’ or ‘post’).</li>
<li><strong>Exclude File Formats:</strong> Prevent specific file extensions (e.g., .pdf, .gif) from ever being deleted.</li>
</ul>
</li>
<li><strong>Unlimited Batch Size:</strong> Remove the 5-item limit for faster processing on powerful servers.</li>
</ul>
<h3>How to Use</h3>
<ol>
<li><strong>Navigate:</strong> Go to <strong>Tools > Media Cleanup</strong>.</li>
<li><strong>Review Stats:</strong> Check the top widgets for an overview of your library.</li>
<li><strong>Configure Settings:</strong>
<ul>
<li>Enable <strong>Dry Run Mode</strong> (Highly Recommended for first use).</li>
<li>Enable <strong>Move to Trash</strong> for added safety.</li>
</ul>
</li>
<li><strong>Select Criteria:</strong> Choose what you want to clean (e.g., Missing Parent Post, Unattached Media).</li>
<li><strong>Set Controls:</strong>
<ul>
<li>Set “Ignore Recent Files” (e.g., 30 days).</li>
<li>(Pro) Enable Deep Scan if you use Elementor or Divi.</li>
</ul>
</li>
<li><strong>Run:</strong> Click the “Start Cleanup” button.</li>
<li><strong>Review:</strong> Watch the “Real-time Progress” log. If in Dry Run, review the results to see what would have been deleted.</li>
</ol>


Jix Media Library Cleanup Tool

A powerful and safe tool to detect and delete orphaned media attachments, missing files, and broken links. Supports Dry Run and Audit Logging.

Sitevorx vs Jix Media Library Cleanup Tool