Viktor Szépe

<h4>Only for development!</h4>
<h4>Now with OPcache memory consumption support</h4>
<p>This plugin dumps the colorized filenames and memory consumptions or file sizes after the normal WordPress HTML output, after the closing html tag. This generates invalid HTML but gives you an overview of loaded plugins and the current theme.</p>
<p><em>What’s running</em> lists all files parsed and executed by the PHP engine. It can be used for plugin or theme refactoring.</p>
<h4>Now you can highlight your own plugin and theme</h4>
<p>Provide a part of its path in wp-config.php:</p>
<pre><code>define( 'WHATS_RUNNING_HIGHLIGHT', 'wp-content/plugins/my-plugin' ); </code></pre>
<h4>Color codes</h4>
<ul>
<li>your code is highlighted with YELLOW background</li>
<li>plugin files are in BLUE</li>
<li>themes files are in ORANGE</li>
<li>files in the wp-includes directory are in GREEN</li>
<li>files in the wp-admin directory are in GREY</li>
<li>all other files are in RED</li>
<li>VIOLET bar after the filename represents the file size ( 0.5 kB/px )</li>
<li>DARK MAGENTA bar after the filename represents the OPcache memory consumption ( 1 kB/px )</li>
</ul>
<h4>Links</h4>
<p>You can watch <a href="https://core.trac.wordpress.org/ticket/28364" rel="nofollow ugc">WP core bug #28364</a> to get more information about <a href="https://github.com/szepeviktor/WPHW/blob/master/wp-entry-points.md" rel="nofollow ugc">WordPress entry points</a>.</p>
<p>You can find some documentaion here what makes a WordPress plugin efficient: https://github.com/szepeviktor/WPHW</p>
<p>Development of this plugin goes on on <a href="https://github.com/szepeviktor/whats-running" rel="nofollow ugc">GitHub</a>.</p>


What's running

Lists WordPress require() calls mainly for plugin code refactoring.

Perfbase

<p>Perfbase profiles WordPress applications and sends performance traces to the Perfbase APM platform. It captures request lifecycle timing, WordPress context, selected metadata, and trace data through the native Perfbase PHP extension and the shared Perfbase PHP SDK.</p>
<p>This plugin is a Software-as-a-Service integration. It requires a Perfbase account, a Perfbase API key, and the native <code>ext-perfbase</code> PHP extension. The plugin does not submit traces until profiling is enabled and an API key is configured.</p>
<p>The plugin can profile:</p>
<ul>
<li>Standard HTTP requests.</li>
<li>Admin requests when enabled.</li>
<li>AJAX requests.</li>
<li>WordPress cron runs.</li>
<li>WP-CLI commands when enabled.</li>
<li>WordPress, theme, plugin, REST, and WooCommerce context when available.</li>
</ul>
<p>For privacy and cardinality control, request URLs are stored without query strings. Important WordPress query parameters are stored separately where useful.</p>
<h3>External Services</h3>
<p>This plugin connects to the Perfbase APM platform, an external application performance monitoring service, when profiling is enabled.</p>
<p>Service name: Perfbase APM platform and the configured Perfbase ingest API endpoint. The default endpoint is <code>https://ingress.perfbase.cloud</code>.</p>
<p>Service policies: <a href="https://perfbase.com/privacy/" rel="nofollow ugc">Perfbase Privacy Policy</a> and <a href="https://perfbase.com/terms/" rel="nofollow ugc">Perfbase Terms</a>.</p>
<p>When data is sent: trace data is sent only after a Perfbase API key is configured, profiling is enabled, the request passes the configured sampling rate, include/exclude filters, user-agent exclusions, request-type toggles, and HTTP status-code rules. For HTTP, AJAX, cron, and WP-CLI lifecycles, submission normally happens at the end of the lifecycle or during shutdown. The plugin does not submit profiling traces while profiling is disabled or while no API key is configured.</p>
<p>Perfbase can send:</p>
<ul>
<li>Native trace payloads: function call trees, function names, source file paths and line numbers, timing, CPU, memory, host resource metrics, call context, and runtime error or exception context.</li>
<li>System/resource data: host operating system, kernel, hostname, CPU architecture, CPU details, disk capacity details, memory usage, CPU usage, disk I/O, and network I/O samples.</li>
<li>Process-list tracking when enabled: capped process snapshots with process ID, executable basename, OS user, CPU usage, memory usage, and process runtime. Command-line arguments are not included in process snapshots.</li>
<li>Additional native trace metadata: normalized SQL query text and query type, database DSN/host/database/username/port metadata, MongoDB or Elasticsearch query/filter payload summaries, Redis or Memcached keys and fields, HTTP URL or URI metadata that may include query strings depending on the PHP API or HTTP library used, HTTP method/status/timing/byte-count metadata, file paths and file operation metadata, mail recipient and subject metadata, shell/process command strings, AWS operation names, OPcache and JIT statistics, PHP error or exception samples, compiled file paths, magic method counts, and truncated function argument values if argument capture is separately configured.</li>
<li>WordPress request metadata: action name, HTTP method, request URL without query string, HTTP status code, user IP address, user agent, logged-in user ID when available, hostname, environment, application version, PHP version, WordPress version, and Perfbase plugin version.</li>
<li>WordPress context metadata: AJAX action, REST route, admin page, post/page identifiers, post type/status, taxonomy context, template and theme information, conditional page type flags, plugin lifecycle context, and WooCommerce page, cart, product, or order context when available.</li>
<li>Operational summaries: memory usage, database query count and timing summaries when available, and sanitized outbound HTTP request metadata when HTTP tracking is enabled.</li>
</ul>
<p>Perfbase does not collect:</p>
<ul>
<li>Source code.</li>
<li>Request bodies, full POST payloads (<code>$_POST</code>), arbitrary form fields, or uploaded file contents.</li>
<li>Cookie values (<code>$_COOKIE</code>) or PHP session data (<code>$_SESSION</code>).</li>
<li>Authorization header values.</li>
<li>Passwords, API keys, nonces, or session IDs from WordPress request, cookie, or session data.</li>
<li>Command-line arguments for process-list snapshots.</li>
</ul>
<p>Feature flags control the extra native trace metadata listed under “Perfbase can send”, including outbound HTTP URLs or URIs with query strings for some HTTP libraries and truncated function argument values if argument capture is separately configured. Administrators should review enabled Perfbase extension feature flags before profiling sensitive workloads.</p>
<p>Extension installer and CDN: the plugin runtime does not call <code>cdn.perfbase.com</code>. The optional extension installer and manual extension binary downloads use <code>https://cdn.perfbase.com</code> only when a server administrator downloads or runs those installation assets.</p>
<h3>Privacy</h3>
<p>This plugin connects to Perfbase’s external service when profiling is enabled. It sends profiling trace data and request metadata to the configured Perfbase API endpoint.</p>
<p>Data submission requires explicit configuration of a Perfbase API key and the Enable Profiling setting. The plugin does not submit traces while profiling is disabled or while no API key is configured.</p>
<p>Administrators should review their site’s privacy policy and disclose their use of Perfbase where appropriate.</p>


WordPress integration for the Perfbase APM platform.

What's running vs Perfbase