Clicks Admin Toolkit

by sykologicist

Description

Clicks Admin Toolkit packs 139+ individually toggleable administration modules into a single, high-speed dashboard — replacing 20 to 30 single-purpose plugins you would otherwise install on every WordPress website.

Most WordPress admin toolkits give you 10 or 20 features and lock the rest behind a paywall. Clicks Admin Toolkit ships 139+ production-ready modules across 10 categories — every single module is 100% free, with zero upsells, zero locked features, and zero nag banners.

The Problem Clicks Admin Toolkit Solves

A typical WordPress installation ends up with dozens of single-purpose plugins:

One plugin to duplicate posts and pages
One plugin to upload SVGs safely
One plugin for SMTP email delivery
One plugin to limit login attempts and block brute force attacks
One plugin to disable emojis and clean the HTML head
One plugin for maintenance mode and coming soon screens
One plugin to hide the WordPress version generator
One plugin for 301 redirects and 404 tracking
One plugin for broken link checking
One plugin for image WebP compression
One plugin for WooCommerce currency switching and cart drawers
…and dozens more!

Each of those plugins loads its own CSS, JavaScript, admin menus, background queries, and update checkers on every single request. The result? A bloated, cluttered WordPress admin that takes seconds to respond, degrades server performance, and creates maintenance headaches.

Clicks Admin Toolkit replaces them all with one lightweight suite that uses exactly one database query.

Zero-Overhead High-Performance Architecture

Zero-Overhead Conditional Loading: When a module is toggled OFF, its PHP file is never included, its class is never instantiated, and zero WordPress filter or action hooks are registered. Your server consumes literally zero CPU or RAM for inactive tools.
Single Autoloaded Database Record: All 139+ module states and their configuration drawers are stored in one single wp_options row (sasuite_settings). Whether you enable 5 modules or all 139, the database footprint is identical: exactly one autoloaded row during WordPress bootstrap.
Pure Native WordPress APIs: Built using native WordPress Media Library, Settings API, Transients API, and WP_Filesystem. No external dependencies, no jQuery bloat, and no arbitrary PHP execution engines.

7 Executive Dashboard Widgets (wp-admin/index.php)

Clicks Admin Toolkit includes 7 real-time monitoring and management widgets embedded directly on your main WordPress dashboard:

File Change & Integrity Radar: Monitors core WordPress files, active themes, and plugins against SHA-256 baseline hashes with 1-click re-scan.
Brute-Force & Login Security Radar: Displays throttled brute-force IPs, failed login counts, and provides 1-click unblock actions.
Outbound Mail Deliverability Monitor: Tracks total dispatched vs failed emails, SMTP connectivity health, and links to detailed logs.
Administrative Activity Stream: Chronological audit trail showing post edits, user role updates, plugin toggles, and login events.
Broken Links Sentinel: Summarizes 404 links, broken external hyperlinks, and offers background crawler triggers.
Database Health Inspector: Real-time overview of database overhead, transient bloat, and 1-click optimization cleanup.
REST API Traffic & Rate Limiter Monitor: Live 24-hour counter of REST requests and blocked abusive scrapers.

1-Click Starter Preset Packs

Get up and running in 2 seconds with curated, battle-tested configuration packs:

Agency Client Starter: Cleans wp-admin, suppresses update nags for non-admins, enables duplicate post, clean filenames, and white-labels the backend.
Maximum Security Shield: Enforces REST rate limiting, honeypot antispam, user enum blocking, XML-RPC disabling, login attempt limits, and file integrity scanning.
Speed & Core Web Vitals: Strips emojis, head junk, and query strings; throttles Heartbeat; enables native image lazy-loading and script deferral.
High-Converting Store Pack: Direct checkout, sticky buy bar, free shipping progress bar, low-stock alerts, and quick order notes.

Complete Breakdown of All 139+ Modules by Category

Content & Media (22 modules)

Duplicate Post / Page / CPT — 1-click clone action for any post, page, or custom post type into draft status.
Safe SVG Uploads & Sanitizer — Enables SVG uploads while purifying XML with DOMDocument to strip malicious scripts.
Media File In-Place Replacement — Replace any image or media file in-place without changing its attachment ID or breaking links.
Media Library Categories & Taxonomies — Adds category and tag organization with filter dropdowns to the WordPress Media Library.
Restrict Media Library to Own Uploads — Non-administrators only see media files they uploaded themselves in the grid/modal.
Drag & Drop Post Reordering — Intuitive AJAX-based drag-and-drop row sorting for posts, pages, and custom post types.
Enable Page Excerpts — Adds native excerpt support and meta box to standard WordPress pages.
External Links in New Tab — Automatically attaches target=”_blank” and rel=”noopener noreferrer” to external links.
Automatic Image Alt & Title Fallback — Automatically populates empty image alt and title attributes using the parent post title.
Clean Image Filename Sanitizer — Converts messy upload filenames (e.g. IMG_001.JPG) into clean, lowercase, SEO-friendly slugs.
Scheduled Content Publishing Calendar — Visual interactive drag-and-drop calendar view for scheduled, draft, and published editorial posts.
Bulk Image Compression & WebP Converter — Automatic on-upload compression with WebP generation and batch converter for existing media.
Broken Link Checker & Crawler — Background WP-Cron crawler checking hyperlinks via non-blocking requests with 1-click unlink.
301/302 Redirect Manager & 404 Monitor — High-performance redirection engine with auto-redirects on post slug updates and 404 logging.
Password-Protected Pages Enhancement — Replaces default lock screen with a branded layout, site logo, custom hint, and 24h cookie memory.
Disable Gutenberg Per Post Type — Restore the Classic Editor selectively on specific post types while keeping Block Editor active elsewhere.
Lightweight Social Share Buttons — Zero-dependency inline SVG share buttons (X, Facebook, LinkedIn, WhatsApp, Email) without tracking scripts.
Reading Time Estimator Badge — Calculates word count and displays a clean reading duration badge on blog articles.
Custom Post Status Manager — Registers editorial workflow statuses (In Review, Client Approved) with list table badges.
Media EXIF & GPS Metadata Stripper — Automatically sanitizes uploaded photos by stripping private camera metadata and geolocation coordinates.
Automatic Image Watermarking — Automatically apply an agency or store watermark logo to uploaded photos.
Smart 404 Auto-Redirect to Closest Match — Automatically redirects broken URLs to the closest published post match using slug similarity.

Admin UI & Menus (11 modules)

Admin Menu Organizer — Rename, reorder, hide menu items, or restrict specific menu links by user role.
Admin Bar / Toolbar Cleaner — Hide WordPress logo, comment bubbles, update counters, and “Howdy” greeting.
Custom Admin Favicon — Set a dedicated, custom favicon specifically for the WordPress admin dashboard.
Custom Admin Columns Manager — Add Post ID, Featured Image Thumbnail, Word Count, and Slug columns to list tables.
Show Last Modified Date & Author — Displays the last edited timestamp and editor username in all post list tables.
Sticky List Table Headers — Keeps column headers fixed at the top of the viewport when scrolling long list tables.
Wider Admin List Tables — Expands table layout to full width on modern widescreen (1080p/4K) monitors.
Admin Footer Customizer — Change or remove “Thank you for creating with WordPress” text and version number.
Admin Dark Mode — Sleek, modern dark mode theme toggle for the WordPress dashboard with high-contrast accents.
Custom Admin Bar Quick Links — Add custom navigation links, documentation shortcuts, or client support links to the top bar.
Admin Bookmark & Favorites Sidebar — Pin favorite admin pages with star icons for rapid navigation in a dedicated panel.

Dashboard & Notices (11 modules)

Admin Notice Drawer — Collect all third-party plugin notices into a slide-out drawer or hide them entirely.
Disable Admin Notices by User Role — Hide non-critical plugin notices for non-administrator roles (Editors, Authors, etc.).
Disable Gutenberg Fullscreen by Default — Prevents the Block Editor from auto-maximizing, keeping the admin sidebar visible.
Disable Default Dashboard Widgets — Turn off Welcome Panel, Quick Draft, WordPress Events, and Site Health default widgets.
Custom Dashboard Message Widget — Create custom rich-text welcome boxes, onboarding guides, or announcements on dashboard.
Highlight Duplicate Post Titles — Displays a visual warning badge on post list tables whenever two posts share the same title.
Disable Gutenberg Block Directory — Prevents the block inserter from searching third-party plugin blocks from WordPress.org.
Admin Quick Search in Toolbar — Instant live search input in the top admin bar to jump to any menu, setting, post, or page.
Disable Core Update Nag for Non-Admins — Hides the “WordPress X.X is available” update banner for non-admin user roles.
Quick Frontend/Backend Switcher — Adds an unobtrusive button for logged-in admins to jump between frontend and post editor.
Custom Admin Broadcast Notice Creator — Broadcast dismissible announcement notices across the admin targeted by user role.

Login, 2FA & Access (14 modules)

Custom Login URL (Rename wp-login.php) — Protects against automated brute force by mapping login to a secret slug.
Custom Login Page Styler — Customize login logo, background color/image, button styling, and form borders safely.
Limit Login Attempts & IP Lockout — Automatically lock out IP addresses after X failed attempts with custom lockout logs.
Login with Email Only or Username Only — Enforce specific login identifier rules to prevent username guessing.
Role-Based Login Redirects — Automatically redirect users to custom URLs (Shop, Dashboard) based on their role upon login.
Role-Based Logout Redirects — Send users to a custom destination URL upon logging out.
Two-Factor Authentication (2FA TOTP) — 100% free TOTP 2FA for Google Authenticator, Authy, and 1Password apps.
Emergency 2FA One-Time Recovery Codes — Generates emergency backup recovery codes in case the authenticator app is lost.
Hide “Lost your password?” & “Back to blog” — Clean login screen options to simplify the user interface.
Auto-Logout Inactive User Sessions — Automatically log out inactive users after a configurable duration (e.g., 30 mins).
Login Page reCAPTCHA & Cloudflare Turnstile — Integrates privacy-first Turnstile or reCAPTCHA v3 on Login and Registration forms.
One-Time Secret Login / Magic Links — Generate cryptographic, single-use authentication links for contractor or client handoffs.
Admin Login Lockout Countdown Display — Displays an animated real-time countdown timer on wp-login.php when an IP is throttled.
Session Timeout & Inactivity Warning Modal — Displays interactive countdown modal before session expires with 1-click Stay Logged In button.

Security & Hardening (15 modules)

Disable XML-RPC — Block xmlrpc.php to prevent pingback DDoS, trackback spam, and brute-force attacks.
Hide WordPress Version — Strip the generator meta tag from , RSS feeds, and script query strings.
Disable File Editor — Disallow in-browser theme and plugin file editing (DISALLOW_FILE_EDIT).
Anti-Spam Honeypot for Comments — Invisible honeypot field that catches automated bots without annoying user CAPTCHAs.
Block Author Enumeration Scans — Block /?author=N scans and REST API user lookups that expose author usernames.
Restrict REST API to Logged-in Users — Lock down REST API endpoints against scrapers while whitelisting core routes.
Email Alert on Admin Login from New IP — Receive instant email notifications whenever an administrator logs in from a new IP.
Obscure Login Error Messages — Displays a generic “Invalid credentials” error message on failed logins.
Disable Self-Pingbacks & Trackbacks — Stop WordPress from sending pingbacks to its own internal links when publishing.
Disable Application Passwords for Non-Admins — Turn off application password generation if API authorization is not needed.
Content Security Policy (CSP) Manager — GUI to construct compliant Content-Security-Policy, X-Frame-Options, and referrer headers.
File Change Detection & Integrity Monitor — Generates SHA-256 baselines of core, active theme, and plugins with change alerts.
Right-Click & Copy Content Protection — Lightweight script disabling right-click context menu, text selection, and inspector shortcuts.
REST API Rate Limiter & Abuse Protector — Monitors and throttles excessive requests to /wp-json/ returning HTTP 429 status.
Disposable & Temporary Burner Email Blocker — Blocks account registrations and orders using burner disposable email domains.

Performance & Cleaner (11 modules)

Disable Emojis & Styles — Remove core emoji scripts, styles, and DNS prefetch tags to save HTTP requests.
Heartbeat API Frequency Controller — Adjust heartbeat frequency (60s, 120s) or disable it completely on frontend/dashboard.
Limit or Disable Post Revisions — Set a custom max number of revisions (e.g. 3, 5) per post type to keep DB lean.
Autosave Interval Modifier — Increase post autosave interval (e.g. 120s, 300s) to reduce continuous server write load.
Clean Up Junk — Remove RSD link, WLW manifest link, shortlinks, and adjacent post links.
Disable RSS / Atom Feeds — Cleanly disable RSS feeds with a redirect to homepage if the site publishes no feeds.
Defer Non-Essential JavaScript — Automatically attach defer attributes to selected frontend scripts to boost PageSpeed.
Remove Query Strings from Static Assets — Strip ?ver=x.x.x from CSS/JS URLs to improve proxy and CDN caching.
Disable Dashicons on Frontend — Prevents loading dashicons.min.css on public frontend for logged-out visitors.
Disable Legacy jQuery Migrate — Removes jquery-migrate.min.js on modern themes that do not require legacy jQuery.
Native Lazy Load Images & Iframes — Injects native loading=”lazy” on all content images, post thumbnails, and iframes.

WooCommerce Polish (19 modules)

Disable WooCommerce Marketplace Nags — Remove marketplace suggestions, inbox tips, and promotional banners in WP Admin.
Show Product Thumbnail & SKU in Orders — Displays product thumbnail images and SKUs directly in the Orders admin table.
Direct Checkout / Skip Cart Page — Redirect “Add to Cart” clicks directly to the Checkout page for frictionless purchasing.
Auto-Complete Virtual & Downloadable Orders — Automatically mark virtual/downloadable orders as Completed upon payment.
Hide Other Shipping when Free Shipping Active — Automatically clean up checkout options when free shipping is unlocked.
Custom “Add to Cart” Button Text — Change button text globally or by product type (e.g., “Buy Now”, “Order Today”).
One-Click “Empty Cart” Button — Add a 1-click “Empty Cart” button to the WooCommerce Cart page.
Delete Expired Coupons & Abandoned Cart Transients — 1-click cleanup utility for expired promotions and abandoned cart records.
Custom Currency Symbol & Position Modifier — Modify currency display formatting without touching code or filter hooks.
Custom “Thank You” Redirection — Redirect customers to custom landing pages after purchasing specific items.
WooCommerce Quick Order Notes — Adds an Order Notes column with inline modal to add private notes without leaving list.
WooCommerce Low Stock Alert System — Dispatches automated email notifications to store administrators when inventory falls below threshold.
WooCommerce Minimum Order Amount — Prevents checkout if cart subtotal is under threshold with cart notice.
WooCommerce Sticky “Buy Now” Mobile Bar — Fixed checkout bar along the bottom of screens appearing after scrolling past Add to Cart.
GeoIP Multi-Currency Switcher — Auto-detect …

Installation

Upload the clicks-admin-toolkit folder to the /wp-content/plugins/ directory, or install directly via Plugins > Add New > Upload Plugin.
Activate the plugin through the Plugins screen in WordPress.
Navigate to Clicks Admin Toolkit in your WordPress admin sidebar.
Toggle any of the 139+ modules ON, configure its options in the slide-out drawer, and click Save Changes.
Use Ctrl+K or the search bar to instantly find any tool.

Faq

How many modules does Clicks Admin Toolkit include?

Clicks Admin Toolkit includes 139+ individually toggleable modules across 10 categories: Content & Media (22), Admin UI & Menus (11), Dashboard & Notices (11), Login, 2FA & Access (14), Security & Hardening (15), Performance & Cleaner (11), WooCommerce Polish (19), User Roles & Control (10), Email & Notifications (11), and Utilities & Maintenance (15).

Does activating dozens of modules slow down my site?

No! The plugin uses a zero-overhead conditional loader. Disabled modules are never loaded into PHP memory — their files are never included and their hooks are never registered. All settings are stored in a single autoloaded database row, so enabling 1 module or 139 modules costs the exact same: one lightweight database query.

Is it compatible with WooCommerce?

Yes! Category 7 includes 19 dedicated WooCommerce modules (GeoIP multi-currency switcher, slide-out cart drawer, sticky buy bar, free shipping progress bar, direct checkout, custom order statuses, quick order notes, etc.). These modules only run when WooCommerce is active.

Can I export my configuration and import it on another site?

Yes! Use the built-in Settings Export & Import modal or 1-Click Starter Presets to copy your entire configuration as a JSON string and import it onto any WordPress site running Clicks Admin Toolkit.

Does this plugin run arbitrary PHP code or use eval()?

No. In strict compliance with WordPress.org security policies, this plugin does not use eval(), exec(), shell_exec(), move_uploaded_file(), or arbitrary code evaluation.

Is PHP 8.x and WordPress 7.x supported?

Yes! Fully tested and verified on PHP 7.4 through 8.3+ and WordPress 6.0 through 7.1+.

What happens if I deactivate the plugin?

All behaviors cleanly revert to WordPress defaults. No core files, tables, or posts are modified. Your settings remain safely preserved in the database if you reactivate later.

Is there a paid or Pro version?

No. All 139+ modules are 100% free and fully unlocked with zero restrictions, zero upsells, and zero advertisements.

Reviews

Changelog

1.1.0

Major expansion: Added 39 new production-grade modules, expanding the toolkit to 139+ tools.
Added 7 Executive Dashboard Widgets on wp-admin: File Change Monitor, Login Radar, Outbound Mail Deliverability, Activity Stream, Broken Link Checker, Database Health Inspector, and REST Rate Limiter.
Added 1-Click Starter Preset Packs: Agency Starter, Maximum Security Shield, Speed & Core Web Vitals, and High-Converting Store Pack.
Added GeoIP Multi-Currency Switcher with live exchange rate sync and customizable currency flags.
Added WooCommerce Conversions suite: Slide-Out Cart Drawer, Sticky Buy Now Bar, Free Shipping Progress Bar, Custom Order Statuses, and Quick Order Notes.
Added Advanced Security modules: REST API Rate Limiter, File Integrity & Change Monitor, Disposable Email Blocker, Content Security Policy (CSP) Manager, and Session Timeout Inactivity Modal.
Added Content & Workflow tools: Editorial Publishing Calendar, Smart 404 Auto-Redirects, 301/302 Redirect Manager, Broken Link Checker, and Image Lossless Compressor.
Added Maintenance & Reliability tools: Automated Scheduled DB Optimizer, Database Backup & Snapshot Generator, and Plugin/Theme Auto-Rollback safeguard.
Added interactive “What’s New in v1.1.0” announcement modal with 1-click dismiss.
Enhanced Limit Login Attempts with dedicated IP Whitelisting and lockout countdown on wp-login.php.
Verified 100% WordPress.org coding standard compliance with zero security flags.

1.0.3

Initial public release with 100+ free modular administration tools.
10 organized categories: Content, Admin UI, Dashboard, Login, Security, Performance, WooCommerce, Users, Email, Utilities.
Zero-overhead conditional module loader — disabled modules are never loaded.
Single autoloaded database row for all 100+ module configurations.
DOMDocument SVG XML sanitizer with LIBXML_NONET XXE prevention.
HMAC SHA-256 cryptographic tokens for secure user switching.
Native WordPress Media Library integration for all image/asset fields.
Full WordPress.org automated review compliance.
PHP 7.4 – 8.3 and WordPress 6.0 – 7.1+ compatibility.