TSO Swiss Knife – Advanced Maintenance & Developer Toolkit

TSO Swiss Knife gives WordPress developers and site administrators a single, well-organised panel (under Tools › TSO Swiss Knife) to inspect and control the internal systems that affect performance, stability, and security.

Included modules

• Activity History — Central log of changes across all plugin tools (options edited, database replacements, maintenance mode, admin menu, and more). Pinned as the default favorite for quick access.
• Hidden WordPress Profiles — Apply quick presets and toggle safe performance, content, and privacy constants via JSON under the plugin uploads folder (no wp-config.php editing). Runtime filters apply on the next request.
• Cron Manager — List, manually run, or delete scheduled WP-Cron events. Core hooks are protected from accidental deletion.
• Action Scheduler — Inspect WooCommerce Action Scheduler tables, pending actions, and queue health when the library is present.
• Debug Mode — Toggle WP_DEBUG, WP_DEBUG_LOG, WP_DEBUG_DISPLAY, SCRIPT_DEBUG, and SAVEQUERIES via JSON flags stored under wp-content/uploads/tso-swiss-knife-advanced-maintenance-developer-toolkit/config/ — no wp-config.php editing required.
• Options Editor — Search, inspect, edit, and safely delete wp_options rows with core options protected.
• Meta Editor — Browse and edit post, user, term, and comment meta with type-aware validation.
• Option Library — Save named option presets and re-apply them across environments.
• Export/Import TSO Configuration — Back up and restore plugin settings and module preferences as JSON.
• TSO Link Inspector — In-plugin promo for the free TSO Link Inspector companion plugin (broken-link scanner and fixer on WordPress.org).
• Transients — Filter by status and purge expired or all transients in bulk.
• WP Constants — Read-only overview of relevant constants grouped by category.
• WP Internals — Inspect post types, taxonomies, roles, query vars, rewrite tags, and shortcodes.
• REST API Controls — Disable anonymous REST API access or block individual namespaces.
• Heartbeat Controls — Set Heartbeat mode (default / disable frontend / disable editor / disable all) and interval.
• Update Manager — Review pending core, plugin, and theme updates, optionally block update checks (staging), and control update email notifications.
• TSO Options & Tables Cleaner — In-plugin promo for the free TSO Options & Tables Cleaner companion plugin (database cleanup, orphan options, backups, and table optimization on WordPress.org).
• Slow Query Monitor — Log slow database queries when SAVEQUERIES is enabled, inspect live queries for the current request, export CSV/JSON, and open a summary from the admin bar.
• Search & Replace — Run dry-run or live serialized-safe search and replace across database tables.
• Hooks Inspector — Browse the live $wp_filter global, with callback details and a real-time search filter.
• Rewrite Rules Flush — Soft or hard flush with a single click; search within the current rules table.
• Server Files Review — Scan for unexpected PHP files in uploads and other writable directories.
• Redirects — Manage safe redirect rules stored in the database with import and export support.
• Custom 404 Page — Assign a WordPress page as the site 404 response while keeping the original URL and a real HTTP 404 status (no redirect).
• Slug Manager — Bulk-edit post and term slugs with conflict detection.
• Health Report — Generate a shareable site health snapshot covering environment, plugins, and common issues.
• Reorder & Hide Sidebar — Drag to reorder WordPress admin menu items, rename labels, nest items under another section, or hide items for all admins.
• Users & Sessions — Review administrators, role-less users, old accounts, and active sessions.
• Roles & Capabilities — Compare roles, apply capability templates, and audit dangerous caps.
• Media Cleaner — Review unattached media, missing attachment files, and unreferenced uploads.
• Security Review — Highlight common hardening and update issues.
• Core File Integrity — Verify WordPress core files against official checksums and flag unexpected changes.
• Login Protection — Custom login URL, brute-force limits, and related hardening controls.
• Email Diagnostics — Inspect wp_mail settings and send a test email.
• Content Audit — Find hidden content issues such as empty titles, missing thumbnails, long slugs, and broken shortcodes.
• Maintenance Mode — Toggle a 503 maintenance page with a custom message and IP whitelist.
• Plugin Sandbox — Isolate plugin conflicts via a must-use loader: only your selected plugins load for your admin session.

Translations

• On Tools › TSO Swiss Knife, administrators can switch the plugin UI to Catalan (CAT), Spanish (ES), or English (ENG) without changing the site-wide language. This only affects that admin screen.
• Further locales can be contributed via Translate WordPress once the plugin is published.

External services

This plugin can optionally contact third-party services. None of these calls run unless a site administrator enables the related feature and, where required, provides an API key.

Comment Antispam (optional)

When Comment Antispam reputation or cloud checks are enabled, visitor data from comments or protected contact forms may be sent as follows:

• Stop Forum Spam (https://api.stopforumspam.org/api) — Used to look up whether an IP, email address, or username has been reported as spam. Sent on each checked submission (results may be cached briefly). Service: Stop Forum Spam. Terms of use · Privacy policy.
• AbuseIPDB (https://api.abuseipdb.com/api/v2/check) — Used to check IP reputation. Sends the visitor IP and your AbuseIPDB API key (request header). Service: AbuseIPDB. Terms of use · Privacy policy.
• CleanTalk (https://moderate.cleantalk.org/api2.0) — Used for cloud spam filtering when CleanTalk mode is selected. Sends your CleanTalk access key plus sender email, IP, nickname, URL, message content, and post/page context. Service: CleanTalk. Terms of use and privacy policy.
• Project Honey Pot (HTTP:BL) — Optional DNS-based IP reputation lookup using your HTTP:BL access key and the visitor IPv4 address. Service: Project Honey Pot. Terms of use · Privacy policy.
• Akismet — When cloud mode is set to Akismet and the Akismet plugin is active, spam checks are handled by Akismet according to its own settings and policies. Service: Akismet. Terms of service · Privacy policy.

Core File Integrity (optional)

When you run a core integrity scan, the plugin requests official WordPress core checksums from https://api.wordpress.org/core/checksums/1.0/. Only the WordPress version and locale are sent (no personal data). Service: WordPress.org. Privacy policy.