Debug UX, robots\/.htaccess review, uploads folder hygiene, language-pack install button, and security hardening. Refreshed translations.<\/p>","1.0.6":"
Adds Staging Mode, URL & HTTPS Doctor, and Server & Runtime, plus hardening for cron, rewrites, transients, meta, export\/import, language downloads, and uninstall cleanup.<\/p>","1.0.5":"
Cron Manager core-hook protection, site-transient purge, role template confirm, search race fixes, Debug Mode docs, and refreshed translations.<\/p>","1.0.4":"
Fixes double-serialize in Meta\/Options editors, redirect subdirectory sources, 404 prefill queue, shortcode removal, transients LIKE matching, and Slow Query duplicate snapshot.<\/p>","1.0.3":"
Safer cron, meta, and search-replace; redirects and 404 alerts fixed; Options Editor and Content Audit hardened.<\/p>","1.0.2":"
Health, redirects, snapshot, and translation fixes. Tested with WordPress 7.1.<\/p>","1.0.1":"
Fixed bugs in modules.<\/p>","1.0.0":"
Initial release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3620303,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3620303,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x499.png":{"filename":"banner-1544x499.png","revision":3620303,"resolution":"1544x499","location":"assets","locale":"","width":1500,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3620303,"resolution":"772x250","location":"assets","locale":"","width":772,"height":257}},"assets_blueprints":{},"all_blocks":{"tsosk\/404-url":{"name":"tsosk\/404-url","title":"Tsosk Url"}},"tagged_versions":["1.0.5","1.0.6","1.0.7"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3620303,"resolution":"1","location":"assets","locale":"","width":1413,"height":851},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3620303,"resolution":"2","location":"assets","locale":"","width":1411,"height":778},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3620303,"resolution":"3","location":"assets","locale":"","width":1409,"height":781},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3620303,"resolution":"4","location":"assets","locale":"","width":1399,"height":856}},"screenshots":{"1":"Hidden WordPress Profiles \u2014 apply quick presets and toggle performance, content, and privacy constants via the plugin config under uploads (no wp-config.php editing).","2":"Custom 404 Page \u2014 assign any WordPress page as the site 404 response while keeping the original URL and a real HTTP 404 status (no redirect).","3":"Reorder & Hide Sidebar \u2014 drag to reorder WordPress admin menu items, rename labels, nest items under another section, or hide items for all admins.","4":"Slow Query Monitor \u2014 inspect slow and live database queries when SAVEQUERIES is enabled, export the log, and open a summary from the admin bar."}},"plugin_section":[],"plugin_tags":[4567,153,94,4932,732],"plugin_category":[52,59],"plugin_contributors":[260487],"plugin_business_model":[],"class_list":["post-336098","plugin","type-plugin","status-publish","hentry","plugin_tags-cron","plugin_tags-database","plugin_tags-debug","plugin_tags-developer-tools","plugin_tags-maintenance","plugin_category-performance","plugin_category-utilities-and-tools","plugin_contributors-deadko","plugin_committers-deadko"],"banners":{"banner":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/banner-772x250.png?rev=3620303","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/icon-128x128.png?rev=3620303","icon_2x":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/icon-256x256.png?rev=3620303","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/screenshot-1.png?rev=3620303","caption":"Hidden WordPress Profiles \u2014 apply quick presets and toggle performance, content, and privacy constants via the plugin config under uploads (no wp-config.php editing)."},{"src":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/screenshot-2.png?rev=3620303","caption":"Custom 404 Page \u2014 assign any WordPress page as the site 404 response while keeping the original URL and a real HTTP 404 status (no redirect)."},{"src":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/screenshot-3.png?rev=3620303","caption":"Reorder & Hide Sidebar \u2014 drag to reorder WordPress admin menu items, rename labels, nest items under another section, or hide items for all admins."},{"src":"https:\/\/ps.w.org\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/assets\/screenshot-4.png?rev=3620303","caption":"Slow Query Monitor \u2014 inspect slow and live database queries when SAVEQUERIES is enabled, export the log, and open a summary from the admin bar."}],"raw_content":"\n
TSO Swiss Knife gives WordPress developers and site administrators a single, well-organised panel (under Tools \u203a TSO Swiss Knife<\/strong>) to inspect and control the internal systems that affect performance, stability, and security.<\/p>\n\n This plugin can optionally contact third-party services. None of these calls run unless a site administrator enables the related feature and, where required, provides an API key.<\/p>\n\n When Comment Antispam<\/strong> reputation or cloud checks are enabled, visitor data from comments or protected contact forms may be sent as follows:<\/p>\n\n When you run a core integrity scan, the plugin requests official WordPress core checksums from When you click Check this site<\/strong>, the plugin requests this site\u2019s own home URL through the WordPress HTTP API (a loopback, similar to Site Health). Redirects are not followed. No third-party host is contacted and no personal data is sent. The request only runs after an administrator clicks the button.<\/p>\n\n Opening Health Report<\/strong> (or downloading its HTML\/JSON) may request this site\u2019s own home URL with a HEAD request to list common security response headers. Results are cached briefly. No third-party host is contacted and no personal data is sent.<\/p>\n\n\n Yes. Features that use WordPress cache APIs (for example flushing related caches after cleanup tools) call core functions such as The module protects a list of known WordPress core options. For third-party options, verify in your code or database that they are truly unused before deleting.<\/p><\/dd>\n No. Logged-in administrators are always bypassed, regardless of IP whitelist settings.<\/p><\/dd>\n Use only the Plugin Sandbox<\/strong> in this plugin. Combining it with other per-user plugin override tools may produce unpredictable results.<\/p><\/dd>\n No. Automatic updates are managed only by WordPress core (Dashboard \u2192 Updates<\/strong>). Update Manager can block update checks on staging sites, hide specific plugin updates, and control update email notifications \u2014 it does not write Use it on a cloned \/ staging \/ local copy<\/strong>, right after you copy the live site, and before you place test orders or browse as a customer. Enable only the switches you need (badge, noindex, hold email, pause cron, mail log). Turn them all off before you copy that database back to production. Do not leave Staging Mode options enabled on the live site.<\/p><\/dd>\n No. It adds noindex headers, pauses XML sitemaps, and adjusts robots.txt while the option is on. It does not<\/strong> filter or save Not if you enable Do not send real emails<\/strong>. WordPress still thinks the mail was accepted, but it never leaves the server. A short copy (recipient, subject, excerpt) is stored in the WordPress database for administrators only (not as a public file under uploads). All Staging Mode switches are off until you turn them on.<\/p><\/dd>\n No. Due events stay in Cron Manager<\/strong> but are not executed while that Staging Mode option is on. Turn it off on the live site so reminders and queues run again.<\/p><\/dd>\n No. It only explains mismatches (http vs https, www, folder, and constants locked in wp-config.php). The leftover-http count is also read-only. Use Search & Replace<\/strong> if you decide to rewrite stored URLs, after a backup \u2014 always run preview first.<\/p><\/dd>\n No. Core hooks (for example Selected plugin settings stored in Yes for this plugin. Health Report HTML\/JSON, URL Doctor messages, and other TSO AJAX\/admin-post responses follow the language selected on Tools \u203a TSO Swiss Knife<\/strong>. The rest of WordPress admin keeps the site language.<\/p><\/dd>\n Runtime config and other managed files go under No. Debug flags, security constants, and hidden-profile toggles are saved as JSON under No. Debug Mode does not create, truncate, or rotate Yes, but only when you explicitly save from the Server Files Review<\/strong> module. It can write These tools are intended for experienced administrators and developers. Always run Search & Replace<\/strong> as a dry-run first and keep a database backup. In Options Editor<\/strong>, core options are protected, but deleting or editing third-party options can break plugins or themes. When in doubt, export a snapshot or test on staging.<\/p><\/dd>\n Only when you enable reputation or cloud checks and, where required, provide API keys. See the External services<\/strong> section above for each provider, what data is sent, and links to their terms and privacy policies. With all cloud features off, checks run locally (honeypot, rate limits, keyword rules, and similar).<\/p><\/dd>\nIncluded modules<\/h4>\n\n
\n
WP_DEBUG<\/code>, WP_DEBUG_LOG<\/code>, SAVEQUERIES<\/code>; errors hidden from visitors), saved as JSON under wp-content\/uploads\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/config\/<\/code>. The tab shows the constants currently in effect (read-only) and copy-paste wp-config.php<\/code> snippets. Constants already defined in wp-config.php<\/code> cannot be overridden.<\/li>\nwp_options<\/code> rows with core options protected.<\/li>\nwp_options<\/code> settings as JSON (Redirects, Staging Mode switches, Login Protect, Slow Query settings, and more). Does not include Debug\/Security JSON under uploads, the Staging mail log, sandbox sessions, or the Slow Query log.<\/li>\n$wp_filter<\/code> global, with callback details and a real-time search filter.<\/li>\nrobots.txt<\/code> \/ .htaccess<\/code> when you confirm.<\/li>\nTranslations<\/h4>\n\n
\n
External services<\/h3>\n\n
Comment Antispam (optional)<\/h4>\n\n
\n
https:\/\/api.stopforumspam.org\/api<\/code>) \u2014 Used to look up whether an IP, email address, or username has been reported as spam. Sent on each checked submission (results may be cached briefly). Service: Stop Forum Spam<\/a>. Terms of use<\/a> \u00b7 Privacy policy<\/a>.<\/li>\nhttps:\/\/api.abuseipdb.com\/api\/v2\/check<\/code>) \u2014 Used to check IP reputation. Sends the visitor IP and your AbuseIPDB API key (request header). Service: AbuseIPDB<\/a>. Terms of use<\/a> \u00b7 Privacy policy<\/a>.<\/li>\nhttps:\/\/moderate.cleantalk.org\/api2.0<\/code>) \u2014 Used for cloud spam filtering when CleanTalk mode is selected. Sends your CleanTalk access key plus sender email, IP, nickname, URL, message content, and post\/page context. Service: CleanTalk<\/a>. Terms of use and privacy policy<\/a>.<\/li>\nCore File Integrity (optional)<\/h4>\n\n
https:\/\/api.wordpress.org\/core\/checksums\/1.0\/<\/code>. Only the WordPress version and locale are sent (no personal data). Service: WordPress.org<\/a>. Privacy policy<\/a>.<\/p>\n\nURL & HTTPS Doctor (optional)<\/h4>\n\n
Health Report security headers (optional)<\/h4>\n\n
\n
tso-swiss-knife-advanced-maintenance-developer-toolkit<\/code> folder to \/wp-content\/plugins\/<\/code>, or use Plugins \u203a Add New \u203a Upload Plugin<\/strong> with the ZIP.<\/li>\n\n
Does this plugin work with object-cache plugins like Redis?<\/h3><\/dt>\n
wp_cache_flush()<\/code> \/ wp_cache_delete()<\/code>, which delegate to whatever persistent object-cache drop-in is active (Redis, Memcached, etc.).<\/p><\/dd>\nIs it safe to delete an option from the Options Editor tab?<\/h3><\/dt>\n
Does enabling Maintenance Mode block the admin?<\/h3><\/dt>\n
Can I run multiple plugin-testing tools at once?<\/h3><\/dt>\n
Does Update Manager change WordPress auto-updates?<\/h3><\/dt>\n
auto_update_*<\/code> site options or hook auto_update_*<\/code> filters.<\/p><\/dd>\nWhen should I use Staging Mode?<\/h3><\/dt>\n
Does Staging Mode change Settings \u2192 Reading (\u201cDiscourage search engines\u201d)?<\/h3><\/dt>\n
blog_public<\/code>, so opening Settings \u2192 Reading will not permanently lock \u201cDiscourage search engines\u201d after you turn Staging Mode off.<\/p><\/dd>\nDoes Staging Mode send customer emails from a test copy?<\/h3><\/dt>\n
Does pausing scheduled tasks in Staging Mode delete cron events?<\/h3><\/dt>\n
Does URL & HTTPS Doctor change my site address?<\/h3><\/dt>\n
Can I manually run WordPress core cron events?<\/h3><\/dt>\n
wp_version_check<\/code> or wp_maybe_auto_update<\/code>) are read-only in Cron Manager: Run, Edit, and Delete are blocked in the UI and in AJAX.<\/p><\/dd>\nWhat does Export\/Import TSO Configuration include?<\/h3><\/dt>\n
wp_options<\/code> (Redirects, Staging Mode switches, Login Protect, Comment Anti-Spam, Slow Query settings, Health alerts, and similar). It does not<\/strong> include Debug\/Security\/Hidden Profiles JSON under uploads, sandbox sessions, the Staging mail log, or the Slow Query log. Import overwrites the sections you choose; always export a backup first. Login Protect never imports an enabled custom login URL (to avoid lockouts). If Staging switches arrive enabled, confirm you are on a test site.<\/p><\/dd>\nDoes the CAT \/ ES \/ ENG language switcher affect downloads and AJAX?<\/h3><\/dt>\n
Where does the plugin write files?<\/h3><\/dt>\n
wp-content\/uploads\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/<\/code>. The Staging Mode mail log is stored in the database (not under uploads). The Plugin Sandbox may install a must-use loader under mu-plugins<\/code> (via the WordPress Filesystem API) so early plugin filtering can run; that loader is removed when no sandbox sessions remain. The plugin does not write wp-content\/debug.log<\/code> or edit wp-config.php<\/code>.<\/p><\/dd>\nDoes this plugin edit wp-config.php?<\/h3><\/dt>\n
wp-content\/uploads\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/config\/<\/code> and applied at runtime. Constants already defined in wp-config.php<\/code> always take precedence and cannot be overridden from the plugin.<\/p><\/dd>\nDoes Debug Mode create or manage wp-content\/debug.log?<\/h3><\/dt>\n
wp-content\/debug.log<\/code>. Enabling Developer mode<\/strong> only stores JSON flags (WP_DEBUG<\/code>, WP_DEBUG_LOG<\/code>, SAVEQUERIES<\/code>, and related) in the plugin uploads config folder; WordPress or the server then writes debug.log<\/code> as usual if logging is on. The Debug tab can list and preview common log paths when they already exist. Empty and shrink actions apply only to logs the plugin owns under wp-content\/uploads\/tso-swiss-knife-advanced-maintenance-developer-toolkit\/<\/code> \u2014 never to wp-content\/debug.log<\/code>.<\/p><\/dd>\nCan Server Files write robots.txt or .htaccess?<\/h3><\/dt>\n
robots.txt<\/code> and .htaccess<\/code> at the site or WordPress root \u2014 not under wp-content\/uploads\/<\/code>. Always review the generated content before saving on production.<\/p><\/dd>\nWho should use Search & Replace or the Options Editor?<\/h3><\/dt>\n
Does Comment Antispam send data to third parties?<\/h3><\/dt>\n
Why do I see two copies of this plugin after installing?<\/h3><\/dt>\n