mojowill

<p>The Mojo Admin Toolbox is a collection of little functions I found myself using a lot to customise the admin dashboard of WordPress, specifically when I was hiding stuff from a client or customising it for them! The latest version (1.3+) REQUIRES WordPress 3.5+.</p>
<h4>Features</h4>
<ul>
<li>Remove/Hide the WordPress Comments system, never confuse your client again!</li>
<li>Easily customise the Login Page Logo.</li>
<li>Set a New custom default avatar for your site.</li>
<li>Remove dashboard widgets for ALL users.</li>
<li>Hide the theme editor page and stop clients messing up the theme!</li>
<li>Easily change the Dashboard footer text for your own.</li>
<li>Change the Descriptions and link destination for your custom login logo.</li>
<li>Hide the WordPress meta generator tag, make it a little more difficult for those script kiddies!</li>
</ul>
<h4>New Features</h4>
<ul>
<li>Modify From name and email address for all emails sent by your WordPress site!</li>
<li>Image uploader now in use on the options page (Now using the WordPress 3.5 Media Manager)!</li>
<li>Added option to override theme, useful if your theme is trying to do the same thing as this plugin is!</li>
</ul>
<h4>Future Development Plan</h4>
<ul>
<li>Option to set ‘superadmin’ who can see everything</li>
<li>Option to hide other WordPress features (Links, Tools, Plugins etc)</li>
<li>Option to hide Update notices from non-superadmins</li>
</ul>
<h3>Developer Notes</h3>
<p>If you would like to follow the development of the plugin or get involved please either drop by my <a href="http://www.mojowill.com" title="Mojo Will" rel="nofollow ugc">website</a> or the project <a href="https://github.com/mojowill/Mojo-Admin-Toolbox" title="GitHub" rel="nofollow ugc">GitHub page</a>.</p>


The Mojo Admin Toolbox

A small toolbox of functions for customising the admin dashboard, useful for hiding stuff from clients!

susheelhbti

<p><strong>Server Scout</strong> is a tool for server administrators who manage multiple WordPress sites on the same server. Instead of logging into each site one by one, Scout gives you a single dashboard where you can see every WordPress installation on the server and quickly access them.</p>
<h4>What it does</h4>
<ul>
<li>Recursively scans a directory of your choice (e.g. <code>/var/www</code>) for all WordPress installations.</li>
<li>Stores the results in a dedicated database table so the dashboard loads instantly without re-scanning.</li>
<li>Refreshes the stored results automatically in the background (WP-Cron), every 30 minutes by default.</li>
<li>Displays each site’s name, URL, WordPress version, and database prefix.</li>
<li>Lists all administrator users for each site (username + email).</li>
<li>Generates a secure, one-time, 5-minute login link so you can jump straight into any site’s admin area without needing the password.</li>
</ul>
<h4>Who is it for?</h4>
<ul>
<li><strong>VPS / dedicated server owners</strong> managing multiple client or personal WordPress sites.</li>
<li><strong>Developers</strong> running several local or staging environments on one machine.</li>
<li><strong>Agencies</strong> with a fleet of sites on a single server.</li>
</ul>
<h4>How scanning & caching works</h4>
<ol>
<li>The first time you open the dashboard, click <strong>Scan Server</strong>.</li>
<li>Results are written to a <code>{prefix}servsc_sites</code> table — one row per installation.</li>
<li>Every later visit renders straight from that table (no filesystem walk).</li>
<li>A background WP-Cron task re-scans the same root on a schedule so the data stays fresh.</li>
<li>Use <strong>Rescan Now</strong> any time to force an immediate refresh.</li>
</ol>
<h4>How login links work</h4>
<ol>
<li>Click <strong>Generate Login Link</strong> next to any admin user.</li>
<li>A cryptographically signed, one-time token is stored in that site’s database (valid for 5 minutes).</li>
<li>The generated link goes through WordPress’s standard <code>admin-ajax.php</code> endpoint — not a direct PHP file — and includes a nonce for request verification.</li>
<li>Opening the link logs you directly into that site’s admin dashboard.</li>
<li>The token is deleted immediately on first use — it cannot be used twice.</li>
</ol>
<h4>Security</h4>
<ul>
<li>Requires the <code>manage_options</code> capability (Administrator) to use the plugin.</li>
<li>All form submissions are protected with WordPress nonces.</li>
<li>Login links use <code>wp_ajax_nopriv_</code> (WordPress AJAX), include a nonce, and go through <code>admin-ajax.php</code>.</li>
<li>Tokens are HMAC-signed with a per-token secret — cannot be forged.</li>
<li>Scan paths are validated with <code>realpath()</code> before use.</li>
<li>All database queries use prepared statements.</li>
<li>The standard <code>wp_login</code> action is fired on login so security plugins (login limiters, audit logs) are notified.</li>
</ul>
<p><strong>Important:</strong> This plugin is intended for server administrators only. Do not install it on shared hosting environments where you do not control all sites on the server.</p>


Server Scout

Helps server administrators discover and manage all WordPress installations on the same server from a single dashboard.

The Mojo Admin Toolbox vs Server Scout