Description
FilaWarden Core is an operations screen for WordPress administrators. It reads this server and this database. It does not phone home, and it does not add anything to the public site.
The Core screens are:
- Executive dashboard with a five-part health score.
- Deployment auditor with 12 readiness checks, including debug state, salts, file editing, object cache, OPcache, permalinks, cron, and HTTPS.
- Infrastructure telemetry for CPU load, memory, disk space, PHP version, and host uptime.
- WP-Cron queue monitor with retry and forget for a scheduled event.
- Scheduler heartbeat recorded by WP-Cron, not by opening an admin page.
- Database size and the 20 largest tables.
- Error log tail. The screen reads the file and does not modify it. The default file is
wp-content/debug.log. - SSL/TLS certificate check for the site host. Local and development environments are reported as local.
- Risk file scan of the document root for database dumps (
.sql), shell scripts (.sh), archives (.zip,.tar,.gz), and files named.env.
A commercial add-on, sold separately, can add security scans, APM, incidents, and webhooks. Core does not require that add-on, and Core does not lock any of its own screens behind a license.
Administrators with the manage_options capability can open FilaWarden from the WordPress admin menu. Each FilaWarden screen has a WordPress menu link that returns to the normal dashboard.
Installation
- Upload the plugin zip through Plugins, Add New, Upload Plugin, or copy the
spiggle-filawardenfolder intowp-content/plugins/. - Activate FilaWarden Core.
- Open FilaWarden in the admin menu.
- Allow WP-Cron to run, or call
wp-cron.phpfrom system cron, so the scheduler heartbeat stays current.
Optional settings use a wp-config.php constant or an environment variable of the same name. Examples:
FILAWARDEN_ENABLEDset to0turns the admin screens off.FILAWARDEN_CAPABILITYchanges the capability required to open the screens. The default ismanage_options.FILAWARDEN_LOG_PATHsets the error log file to read. When it is empty, FilaWarden usesWP_DEBUG_LOG, thenwp-content/debug.log.FILAWARDEN_PRO_UPGRADE_URLsets the optional upgrade link. Only anhttpsURL is shown, and only when the commercial add-on is not active.
You can also change the configuration array with the filawarden_config filter.
FAQ
-
Does FilaWarden Core track visitors or send data to Spiggle?
-
No. Telemetry is read on this server. Styles, scripts, and the logo are files inside the plugin. Core does not embed a public credit link.
-
Does Core need a license key?
-
No. Every Core screen works without a key. License checks belong to the separate commercial add-on.
-
What does Failed mean on Risk Files?
-
The scan finished. Failed is the high-risk mark for a
.sqlfile, a.shfile, or a file named.envinside the document root. Warning is the mark for a.zip,.tar, or.gzarchive. The scan skipswp-admin,wp-includes,vendor,node_modules, and.git. -
Why are memory or uptime reported as n/a?
-
Some hosts hide
/proc. FilaWarden then reads memory from the kernel node counters and uptime from a new process start clock. If those are blocked as well, the screen shows n/a instead of a made-up number. -
Use the WordPress menu link at the bottom of the FilaWarden sidebar or at the top right of the screen.
-
What does uninstall remove?
-
Deleting the plugin removes the
filawarden_heartbeatoption, the risk-file scan transient, and thefilawarden_heartbeat_eventcron hook. It does not delete posts, tables created by another plugin, or files outside this plugin.
Avis
Il n’y a aucun avis pour cette extension.
Contributeurs & développeurs
« FilaWarden Core » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.
Contributeurs
Traduisez « FilaWarden Core » dans votre langue.
Le développement vous intéresse ?
Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.
Journal
1.0.4
- The Pro upgrade address is https://filawarden.com.
1.0.3
- Admin screen styles load with
wp_enqueue_style(). The dark-mode class is set from a head script loaded withwp_enqueue_script(). - The error log screen only reads the log. It no longer clears the file.
1.0.2
- Initial public release.
- Operations dashboard, 12-point deployment auditor, and host telemetry.
- WP-Cron queue actions, scheduler heartbeat, database footprint, error log tail, SSL check, and risk-file scan.
- Settings come from constants, environment variables, or the
filawarden_configfilter.