MegaManager Connector

MegaManager Connector allows you to connect your WordPress site to the MegaManager platform for:

• Real-time Monitoring – Keep track of your site’s health and uptime status
• Automated Backups – Schedule and manage full-site cloud backups
• Remote Updates – Update plugins, themes, and WordPress core remotely
• Cache Management – Clear page, object, and OPcache directly from admin bar or dashboard
• Plugin Management – Activate and deactivate plugins from the dashboard
• Security – Secure communication with HMAC signatures
• Database Optimization – Analyze and optimize database tables remotely
• Maintenance Mode – Enable/disable maintenance mode without writing files

External Services

This plugin connects to the MegaManager platform API to provide remote site management features. The service is hosted at https://wpmegamanager.com/api/fn.

What data is sent and when:

• Site Registration (on connect): Your site URL, WordPress version, PHP version, and a generated site secret are sent once when you connect the plugin to MegaManager.
• Heartbeat (every 5 minutes while connected): Site ID, WordPress version, PHP version, and site URL are sent to confirm your site is online and reachable. The heartbeat is essential for the connection status feature and runs automatically while the plugin is connected. It does NOT send any content, user data, or analytics — only basic environment identifiers.
• Metrics (hourly, opt-in only): When you enable telemetry in the plugin settings, performance data (TTFB, page size, plugin list, theme, PHP/WP versions, disk/database size, activity logs) is sent hourly. This is disabled by default and requires explicit opt-in via the Settings > MegaManager page. You can disable it at any time; the setting takes effect immediately.
• Backup operations: During cloud backups, your database and wp-content files are uploaded to MegaManager cloud storage via signed URLs.

No data is sent until you explicitly connect the plugin by entering a Connect Token from the MegaManager dashboard.

• Terms of Service: https://wpmegamanager.com/terms
• Privacy Policy: https://wpmegamanager.com/privacy

1. Upload the megamanager-connector folder to the /wp-content/plugins/ directory
2. Activate the plugin through the ‘Plugins’ menu in WordPress
3. Go to Settings > MegaManager in your WordPress admin
4. Enter your Connect Token from the MegaManager dashboard
5. Click “Connect to MegaManager”

1. 

   Dashboard - connected site overview

2. 

   Cache management panel

3. 

   Connect token input

1.4.7

• SECURITY: Database cleanup will no longer drop a table belonging to a plugin you still have installed. “Orphaned” tables were matched on the table name alone, so a live WooCommerce store listed its Action Scheduler tables as safe to remove — dropping those takes every scheduled order job with them. The plugin now refuses any table still claimed by an installed plugin and reports it back instead of removing it.
• SECURITY: On hosting where one database holds more than one WordPress install, the prefix check now respects table boundaries. Cleanup and site transfer could previously reach a neighbouring installation’s tables, or another subsite’s on multisite, because the prefix “wp_” also matches “wp_2_” and “wp_staging_”.
• SECURITY: The feedback endpoint no longer accepts any request that merely carries a non-empty cookie. It checks the session token’s shape and applies a per-IP limit, so anonymous traffic can no longer hold PHP workers open on a blocking outbound request.
• SECURITY: Rejected API requests can no longer fill the disk. Each one wrote a log line with no size limit; the daily log file is now capped.
• SECURITY: The working files a restore creates — which include a complete database dump — are now removed after four hours even when the restore is interrupted. Previously they were only cleaned up when it finished, and a restore cut short by a timeout left the dump behind.
• SECURITY: Table optimisation now checks the table name against this installation’s prefix and confirms the table exists, the same way the removal path already did.
• FIX: Temporary-access links now last as long as the access you granted. A link created for 24 hours was rejected about a minute later, and because the first click used the token up, trying again reported it invalid rather than expired — the feature could not work at all.
• FIX: Maintenance mode’s “allow administrators” setting is now stored and honoured. It previously had no effect, and administrators were always let through regardless of the choice.
• FIX: Saving auto-update settings no longer switches off the ones it was not asked about. Setting up a plugin automation from the dashboard silently turned off the theme and core auto-updates you had chosen in wp-admin; each setting is now left alone unless it is actually being changed.
• FIX: Page analysis now works on the front page, shop and category archives. Asking about a URL that is not a single post or page returned “page not found” and no script list at all; those pages are now scanned for their real script and stylesheet sizes like any other.
• NEW: The site now reports what it holds — posts, pages and other public content types by status, plus media, comments, registered users and taxonomies — so MegaManager can answer questions about the site’s content instead of guessing from database table sizes.
• NEW: WooCommerce shops additionally report this month’s orders, how many are paid, revenue and the order status split.

1.4.6

• CHANGE: Automatic updates are now off until you turn them on. Earlier versions enabled the auto-update scheduler for every site, including ones that had never asked for it; a fresh install now starts with it switched off, and an install’s existing choice is left untouched.
• FIX: The connector no longer updates itself from its own scheduler. Replacing the running plugin’s files mid-run could break the very process doing it and drop the site’s connection, so the connector is now updated deliberately — from WordPress’ own Plugins screen or an explicit action — never silently in the background.
• FIX: A restore now streams the database dump with a quote-aware SQL splitter, so a backup whose content holds newlines, semicolons or comment markers inside a value restores correctly instead of failing with a syntax error midway.

1.4.5

• FIX: A restore interrupted partway through — by a timeout or a memory limit — no longer leaves the site stuck on the maintenance screen. The maintenance flag it writes is now valid, so an interrupted restore recovers instead of white-screening until the file is removed by hand.
• FIX: Site transfer only rewrites this installation’s own tables. On hosting where one database holds more than one WordPress install, a transfer no longer reaches into the neighbouring site’s tables.
• FIX: After a transfer, the destination keeps its own connection to MegaManager instead of adopting the source’s identity, so both sites continue to report correctly in the dashboard.
• FIX: Database optimize, table cleanup and orphaned-table removal now actually run. A quoting bug made them send invalid SQL and silently do nothing while reporting success.
• FIX: A restore can no longer start a second time while one is already in progress, which previously risked two restores writing over the same tables at once.
• FIX: During a transfer’s address rewrite, tables with a composite primary key are left untouched rather than risking overwriting unrelated rows.
• FIX: A PHP error raised during a backup no longer leaves it stuck showing “in progress” — the backup lock is always released.
• FIX: The backup archive no longer includes a second copy of the database dump, so uploads are smaller.
• SECURITY: The command relay is constrained to MegaManager’s own endpoints; the pairing endpoint is rate limited against token guessing; and a re-pairing site URL is re-checked against private/reserved addresses.

1.3.9

• NEW: Site transfer. MegaManager can copy one connected site over another — a staging build onto the live site, for instance. Addresses are rewritten during the copy, including inside the serialized data that page builders store layouts in, so links and modules keep working on the new domain. The destination keeps its own connection to MegaManager rather than inheriting the source’s.
• NEW: Reviewers keep their WordPress role. An administrator or editor given review access can now resolve and delete comments on the site they administer; everyone else comments only. WordPress remains the authority, so a change of role there applies at the next sign-in.
• NEW: Disconnecting now works both ways. Pressing Disconnect tells MegaManager immediately instead of leaving the dashboard to find out on the next manual sync, and removing a site from the dashboard tells the plugin to let go rather than leaving it calling a site that is no longer managed.
• NEW: uninstall.php — deleting the plugin now removes everything it stored, the shared secret included. Previously those options survived deletion and a reinstall silently re-paired the site with the old key. Deactivating still leaves them alone.
• NEW: The site now says when it is leaving. Deactivating the plugin tells MegaManager at once — and keeps the site’s settings, so switching it back on simply reconnects; deleting it says so while its credentials still exist, so the platform can retire its own copy. Activating sends a check-in immediately instead of waiting for a visitor.
• FIX: Scheduled work no longer depends on the site having visitors. WordPress only runs cron when somebody loads a page, so on a quiet site metrics, automatic updates and the expiry of temporary logins could all sit waiting indefinitely. MegaManager can now run each of them directly; automatic updates started this way still obey the site’s own settings, and a site with them switched off is left alone.
• FIX: Log retention runs from the write path as well as its daily cron, so log files on a site with no traffic are pruned rather than growing without limit.
• FIX: Auto-updates could report “in progress” forever. A plugin update that raised a PHP error skipped the cleanup, and while the lock expired after 30 minutes the status flag had nothing to clear it. The state is now derived from the lock, so even a process killed outright recovers.
• PERFORMANCE: The connector was issuing 24 database queries on every page load of the site it is installed on, including for anonymous visitors — a one-time defaults backfill re-running on every request. Measured on a live site, that is now 3.
• FIX: The log directory’s protection files are re-created if something removes them, rather than only when the directory is first made.
• SECURITY: The two feedback actions that run before a session exists are now rate limited, so a review token cannot be guessed at network speed.
• IMPROVE: Granting a WordPress user review access takes effect on their next page load instead of after a back-off.
• IMPROVE: Saving a comment closes the panel and confirms, instead of reopening it with a “Reply…” box under the sentence you had just written.
• FIX: A marker whose element is hidden — an inactive slider, a closed accordion — is drawn against the nearest visible part of the page and flagged as approximate, instead of being placed off-screen where it could not be seen at all.
• IMPROVE: The feedback toolbar lists every comment on the current page, numbered to match the markers, and the comment panel opens beside its own marker rather than in a fixed corner.

1.3.8

• NEW: WordPress users of the site can be given review access from MegaManager — once granted they get the feedback overlay automatically while logged in, with no link to click. They can comment only, never resolve.
• IMPROVE: The feedback toolbar can be dragged anywhere and folded away with a click, so it never sits on top of a cookie banner or chat bubble. Its position and folded state are remembered.
• NEW: A show/hide switch for comments, so the page can be viewed exactly as a visitor sees it without losing anything.
• NEW: “Open on site” on any comment in the dashboard jumps straight to that comment on the page, with the thread already open.
• COMPATIBILITY: The overlay stays out of visual page builders (Divi, Elementor, WPBakery, Beaver Builder, Oxygen, Bricks, Brizy) and the Customizer — it never loads in an editing canvas, and steps aside if a builder is opened while it is running.

1.3.6

• NEW: Click-to-comment feedback. Reviewers open the site from MegaManager and click anywhere to leave a comment pinned to that exact element; clients can be invited by email and need no account. Comments stay on the same content at any screen width.
• PRIVACY: The feedback overlay is only served to visitors holding a review session — ordinary visitors download no extra JavaScript and the site behaves exactly as before.
• SECURITY: Review sessions are issued by MegaManager, not by the site: the connector only relays the session token it was given, so the site secret alone cannot be used to post as another person. Session cookies are httpOnly and SameSite=Lax.

1.3.5

• IMPROVE: The API base can now be overridden consistently for self-hosted / local backends via define(‘WPMM_API_BASE’, …) in wp-config.php — the core connect/heartbeat/command calls honour it, not just the backup calls.

1.3.4

• SECURITY: Restore/download URLs are now restricted to an HTTPS cloud-storage allowlist (same as uploads), and plugin rollback is limited to official https://downloads.wordpress.org URLs — prevents server-side request forgery and installing arbitrary code from an untrusted source.
• SECURITY: All management REST endpoints now require a fresh HMAC signature (X-WPMegaManager-Signature + X-WPMegaManager-Timestamp) in addition to the site secret, closing a request-replay gap where a captured header could be reused. Requests older than 5 minutes are rejected.
• SECURITY/PRIVACY: The backup temp directory now includes an index.php guard (blocks directory listing on servers that ignore .htaccess, e.g. Nginx/LiteSpeed), and the on-disk archive is cleaned up when a backup is auto-failed after a crash — a full-database dump can no longer linger in the uploads directory.
• RELEASE: Download megamanager-connector-v1.4.7.zip — connector semver stays independent from the MegaManager web app.

1.3.2

• BACKUP (WordPress): Backup Manager UI under MegaManager — create cloud backups, list recent jobs, live status and log output, AJAX-driven polling; cron hooks for restore checks and connection status while the site is connected; packaged as includes/class-backup-manager.php (PHP-only, shared-hosting friendly).
• BACKUP (platform): POST /api/fn/plugin-backup — timing-safe site secret verification, Backblaze B2 S3-compatible signed upload and download URLs (multipart database + wp-content), backup row lifecycle (init → complete), storage usage against the site backup plan, retention pruning when limits are exceeded, restore job hand-off, audit and failure alerts.
• RELEASE: Download megamanager-connector-v1.3.2.zip — connector semver stays independent from the MegaManager web app.

1.3.0

• RELEASE: MegaManager Connector 1.3.0 — connector package version line and readme stable tag decoupled from the SaaS app; same API-compatible PHP baseline. Download: megamanager-connector-v1.3.0.zip

1.4.4

• APP: MegaManager web app 1.4.4 — Updates overview search filters visible plugin/theme/core rows per site; connector WordPress plugin remains v1.2.9 (semver independent from the SaaS app)

1.2.9

• RELEASE: MegaManager Connector 1.2.9 — connector version line is independent from the SaaS app; ships with current API-compatible PHP; download zip remains megamanager-connector-v1.2.9.zip

1.4.3

• NOTE (historical numbering): Previously shipped with app releases under the same number as the web app; connector versioning is now decoupled (see 1.2.9+). GDPR export/delete/retention APIs; uptime monitor schema and scheduler; unique email/domain constraints; notification email dispatch; AI Tasks plugin list UX; Copilot parsing; admin credits TS fixes

1.4.2

• RELEASE: App and connector semver aligned to 1.4.2; Release Operations shows live app version from build

1.4.1

• FIX: Pending plugin/theme/core updates now collected reliably on cron and manual sync — load wp-admin plugin.php before update.php, run wp_version_check before wp_update_*, optional forced refresh on dashboard sync; safer new_version parsing for themes/plugins (PHP 8+)

1.4.0

• IMPROVE: Broader PHP debug.log level detection (PHP Error, memory limit, max execution time, uncaught Throwable) for monitoring and alerts
• FEATURE: Self-hosted MegaManager API: backup pipeline uses plugin-backup on the Node backend with Backblaze B2 (S3-compatible signed URLs); set WPMM_API_BASE to your /api/fn base and configure B2_* env vars on the server
• FIX: Alerts for PHP log issues can be stored when type is site_health (DB constraint extended in app migrations)

1.3.10

• FIX: Remote plugin/theme/core update no longer reported as success when WordPress upgrader returns false (was treated as success due to !is_wp_error check)
• FIX: Reject success when installed version string unchanged after upgrade attempt

1.2.7

• FEATURE: Auto updates default on for plugins/themes; configurable check interval (15 min / 1 h / 12 h / daily) replaces maintenance window field in connector settings
• RELEASE: Aligned with MegaManager app (cookie consent, add-site connection gate, UI fixes)

1.2.6

• FIX: Cache clear reporting — success only when something is actually cleared; OPcache unavailable or failed reset no longer reported as success
• IMPROVE: wp-content/cache cleanup reports deleted file count; expired transients report row counts; skipped layers listed separately

1.2.3

• FEATURE: Switch User one-time login token support
• FIX: Auto-login now uses REST API switch-user endpoint instead of removed legacy wpmm_autologin
• FIX: Edge function auth headers corrected to use X-Site-Secret

1.2.1

• COMPLIANCE: Added wpsupporting to Contributors in readme.txt
• COMPLIANCE: Removed define(‘FS_METHOD’, ‘direct’) — no longer sets global constant; guides user to wp-config.php instead
• COMPLIANCE: Backup manager inline / replaced with wp_register_style/wp_register_script + wp_add_inline_style/wp_add_inline_script via admin_enqueue_scripts hook
• COMPLIANCE: Temp backup directory now uses wp_upload_dir() basedir with plugin-slug subfolder (megamanager-connector/) instead of hardcoded WP_CONTENT_DIR path

1.2.0

• SECURITY: Removed all sslverify=false from outbound requests; default SSL verification is now used
• STABILITY: Fixed is_plugin_active() fatal errors in cron/frontend contexts by adding safe include guard
• STABILITY: Bounded disk usage scan (max 50,000 files) and media inventory (max 500 images) to prevent cron timeouts
• STABILITY: Wrapped RecursiveIteratorIterator in try/catch for permission-denied safety
• CRON: Moved cron_schedules filter into class constructor for reliable early registration
• CRON: Ensured five_minutes schedule is always available before wp_schedule_event calls
• COMPLIANCE: Fully removed residual handle_autologin() method from plugin code
• COMPLIANCE: Updated readme External Services section with heartbeat data details

1.1.0

• SECURITY: Removed insecure URL-based auto-login mechanism
• SECURITY: Hardened REST API permission callbacks for PHP 8+ null safety (returns WP_Error instead of fatal)
• COMPLIANCE: Added explicit telemetry opt-in toggle; metrics are disabled by default
• COMPLIANCE: Added External Services section to readme.txt with Terms/Privacy links
• COMPLIANCE: Removed all direct wp-content file writes for maintenance mode
• COMPLIANCE: Refactored inline CSS/JS to use wp_enqueue_script/wp_enqueue_style and wp_add_inline_script/wp_add_inline_style
• COMPLIANCE: Consistent plugin headers and author metadata referencing https://wpmegamanager.com
• FIX: Replaced direct emoji characters in PHP with HTML entities for shared-hosting compatibility

1.0.1

• Added backward-compatible remote backup support and command routing fixes

1.0.0

• Initial release