Sysadmin Total Suite

This plugin brings together several maintenance tools for WordPress in one admin panel:

• Core integrity: verifies your WordPress files against the official checksums and reports which ones are modified, missing or not part of the core. For a modified file it can show a diff against the official copy, so you can see exactly what changed. The plugin never modifies your files: to repair the core it points you to Dashboard > Updates > Reinstall now, which is WordPress’s own mechanism.
• Profiling: measures the front page load time (core, plugins, theme, SQL and outgoing HTTP calls), keeps a history and displays it as charts.
• Check users: lists the registered users (name, registration date, role) and lets you delete them with a double confirmation.
• WPO (Web Performance Optimization): active plugins, size of the autoloaded options, expired transients, WP-Cron status including cleanup of orphaned tasks, cache detection and environment versions (PHP, MySQL/MariaDB, WordPress).
• AI bot blocking: robots.txt opt-out plus real User-Agent blocking (HTTP 403) for AI crawlers, selectable bot by bot.

Every action requires administrator capabilities and is protected with nonces. The plugin does not write to or delete anything inside the WordPress core directories. The operations that do change something (deleting a user, clearing expired transients, removing orphaned cron tasks, blocking a bot) act on the database and always ask for confirmation first.

External services

This plugin connects to WordPress.org services in order to verify and restore the core:

1. WordPress.org checksums API (https://api.wordpress.org/core/checksums/1.0/): queried when you run the integrity analysis, to obtain the official checksums for your version and locale. The WordPress version and the site locale are sent.
2. WordPress.org downloads (https://downloads.wordpress.org/ and the localized sites https://*.wordpress.org/): the official ZIP package for your version is downloaded only when you ask to see the differences (diff) or to restore a core file. The version and locale are sent to build the package URL.

No personal data is sent and no other third-party service is contacted. These services are provided by the WordPress Foundation; see https://wordpress.org/about/privacy/ for details.

The official package is used only as the reference copy of the core, exactly as WordPress itself does when it reinstalls or updates the core. No code is fetched from any third-party server, nothing is executed from the download, and the extracted content is only ever written back to the same core path it came from.