Description
SiteIntelix is a modular diagnostics and troubleshooting toolkit for WordPress administrators, developers, and support teams.
It brings a DirectAdmin-inspired File Manager, private debug logs, outgoing email history, server checks, cron inspection, database browsing, Safe Mode, SMTP, user switching, custom CSS/JavaScript, PHP snippets, and maintenance controls into one organized admin menu. Modules load only when needed, screen-specific assets stay scoped to SiteIntelix pages, and third-party admin banners stay out of the SiteIntelix workspace.
Key Features
- 🩺 Server Diagnostics — inspect server health, PHP configuration, extensions, filesystem permissions, network access, WordPress, and database limits.
- 🧾 Debug Log Viewer — capture, search, group, filter, clear, and download private WordPress debug logs.
- ✉️ Email Log — record outgoing WordPress emails with recipients, headers, status, failures, and message previews.
- 📮 SMTP Mailer — route WordPress emails through your own SMTP provider for more reliable delivery.
- ⏱️ Cron Events — inspect scheduled WP-Cron events, run due events manually, and remove selected events safely.
- 🗄️ Database Manager — browse tables, inspect rows, search records, review sizes, and edit selected rows from wp-admin.
- 📦 Download Manager — add secure download links for installed plugin and theme ZIP packages.
- 📁 File Manager — use a focused DirectAdmin-inspired browser to navigate the WordPress installation, inspect approved files, edit safe text formats only inside configured writable locations, upload allowed files, create ZIP exports, and manage private backups and trash under enforced Safe Mode rules.
- 🛡️ Safe Mode Debugger — test plugin and theme conflict scenarios privately without affecting normal visitors.
- 👥 User Switcher — temporarily enter an allowed user account for support without requesting or changing its password, then return securely.
- 🎨 Custom CSS & JS — manage reusable administrator-authored CSS and JavaScript with frontend/admin scope, placement, priority, and inline or generated-file loading.
- 💻 Code Snippets — validate, organize, and run administrator-authored PHP in isolated closures with automatic error deactivation and recovery controls.
- 🚧 Maintenance Mode — show a polished public maintenance page while administrators continue working.
- 🧰 Modular Toolbox — enable or disable each tool from the SiteIntelix Modules screen.
Why Use SiteIntelix?
- Keep troubleshooting tools in one place instead of installing many small utilities.
- Share clean diagnostic reports with support teams.
- See the active PHP configuration and server limits that often explain plugin/import failures.
- Review debug logs, email delivery, cron jobs, database rows, and maintenance mode from wp-admin.
- Keep sensitive data local: SiteIntelix does not upload logs, email contents, database contents, or generated reports.
Debug Log Module
- One focused log viewer — a compact table with Type, Last seen, Count, Description, File, and Line columns.
- Search, error-type filters, time ranges, adjustable pagination, optional columns, and grouped duplicate entries.
- Expandable stack traces plus protected refresh, clear, and download actions.
- First-run automatic setup plus dedicated settings for WP_DEBUG, SCRIPT_DEBUG, WP_DEBUG_LOG, WP_DEBUG_DISPLAY, and SAVEQUERIES.
Logging
- SiteIntelix uses the audited WP-CLI
WPConfigTransformerlibrary to update WordPress debug constants inwp-config.php. - A restricted
wp-config.php.siteintelix.bakbackup is created before changes. - WP_DEBUG_LOG points to a cryptographically randomized
.logfilename in protectedwp-content/siteintelix/storage instead of the defaultwp-content/debug.log. - Error display remains disabled by default and can be enabled explicitly from Debug Log settings when local troubleshooting requires it.
Security and Privacy
- SiteIntelix admin pages require the
manage_optionscapability. On Multisite, executable-code and network-sensitive tools require a Multisite super administrator. - Admin actions use WordPress nonces.
- Output is escaped with WordPress escaping functions.
- No external CDN assets or heavy JavaScript frameworks are loaded.
- Assets are scoped to SiteIntelix admin pages.
- SiteIntelix sends no telemetry and does not upload diagnostics, logs, email contents, database contents, snippets, custom code, or generated reports.
- Server reachability checks may contact WordPress.org endpoints and the site’s own loopback or REST URL. They send normal HTTP request metadata, not report contents.
- SMTP sends outgoing mail through the administrator-configured SMTP provider. Its credential is stored locally in a non-autoloaded WordPress option.
- Enabled Code Snippets execute locally authored PHP through the module’s isolated runner. SiteIntelix does not retrieve or execute remote snippet code.
- Custom CSS & JS can add administrator-authored executable JavaScript to configured frontend or admin pages.
- User Switcher uses WordPress-native authentication, signed short-lived state, dedicated capabilities, protected roles, and optional local audit logs.
- File Manager canonicalizes every path and provides read-only navigation across the WordPress installation. Writes remain confined to configured safe locations; symbolic-link traversal, private storage access, protected locations, sensitive-file content access, and PHP modification are blocked.
- Debug logs, email logs, database values, diagnostic reports, and switching records can contain sensitive information and should be shared only with trusted people.
Shortcode
Use [siteintelix_panel] on any page or post to display a compact system information table. The shortcode output is visible only to logged-in administrators.
Privacy Policy
SiteIntelix sends no telemetry and does not upload logs, email contents, database contents, snippets, custom code, File Manager data, or generated diagnostic reports. Stored logs, SMTP credentials, settings, snippets, custom code, and File Manager backups, trash, metadata, and audit records remain in the WordPress installation and are available only through privileged administration interfaces. Enabled custom JavaScript and PHP snippets execute on the site according to their configured scope.
When an administrator runs or refreshes Server Diagnostics, reachability checks may make HTTP requests to WordPress.org endpoints and to the site’s own loopback or REST URL. These requests include normal network metadata such as the site’s public IP address and a SiteIntelix version user agent, but they do not include the contents of SiteIntelix reports.
When SMTP is enabled, WordPress sends outgoing email and authentication data to the administrator-selected SMTP provider under that provider’s privacy terms. SiteIntelix stores the SMTP credential locally in a non-autoloaded option; it does not transmit the credential anywhere else.
Screenshots









Installation
Automatic
- Log in to your WordPress admin.
- Go to Plugins Add New.
- Search for SiteIntelix.
- Click Install Now, then Activate.
Manual Upload
- Download the plugin ZIP file.
- Go to Plugins Add New Upload Plugin.
- Select the ZIP file and click Install Now.
- Click Activate Plugin.
After activation, open SiteIntelix in the WordPress admin menu.
FAQ
-
Who can access the plugin screens?
-
Users need the
manage_optionscapability to access SiteIntelix. On Multisite, Code Snippets, Custom CSS & JS, Debug Log configuration, Database Manager, Download Manager, and Safe Mode require a Multisite super administrator. Code modules also require WordPress’unfiltered_htmlcapability. -
Does Code Snippets execute PHP?
-
Yes. Enabled administrator-authored PHP runs locally in an isolated closure. Snippets are syntax-checked before saving or activation, controls require capabilities and nonces, and a captured runtime failure deactivates the affected snippet. The executor intentionally uses PHP
eval()for this local feature and never downloads remote code. -
Where are Custom CSS & JS files stored?
-
Entries are stored in a plugin-owned database table. When external-file loading is selected, generated files use the restricted
wp-content/uploads/siteintelix/custom-code/directory. SiteIntelix only deletes files that match its managed filename pattern. -
Where does SiteIntelix write debug logs?
-
WordPress writes to a randomized file in the protected SiteIntelix content directory. The viewer shows only its WordPress-relative path, not the complete server path.
-
Does SiteIntelix use wp-content/debug.log?
-
No. SiteIntelix uses its own randomized private log file so WordPress’ default
debug.logis not used by this plugin. -
Nginx private storage rule
-
Nginx does not read
.htaccess. Administrators using the default WordPress content URL should add this rule inside the relevantserverblock:`location ^~ /wp-content/siteintelix/ {
deny all;
return 403;
}
`If
WP_CONTENT_URLis customized, replace/wp-content/with that installation’s actual content URL path. Keep the rule scoped to the complete SiteIntelix directory, reload Nginx after validating the configuration, and use SiteIntelix’s authenticated admin viewer or export handler to access logs. -
Does SiteIntelix edit wp-config.php?
-
Yes, only when an authorized administrator starts debugging or changes a Debug Log setting. SiteIntelix uses WPConfigTransformer, validates an allowlist of debug constants, and writes a restricted adjacent backup first. If
wp-config.phpis read-only, the log viewer remains available while configuration changes report the write failure. -
Can the viewer search logs beyond the current page?
-
Yes. Search and server-side filters are applied to the parsed log dataset before pagination.
-
Does this plugin collect or send data anywhere?
-
SiteIntelix does not collect telemetry or upload diagnostics, logs, email contents, database contents, or generated reports. When an administrator refreshes Server Diagnostics, reachability checks may contact WordPress.org endpoints and the site’s own loopback or REST URL. Those checks send normal HTTP request metadata, not SiteIntelix report contents.
-
How do I use the shortcode?
-
Add
[siteintelix_panel]to a page or post. Only administrators can see the output. -
Is the plugin Multisite compatible?
-
Yes. Site-scoped tools can be activated per site. Tools that can execute code, inspect network-wide database data, read installed source packages, write safety MU files, or change debug configuration require a Multisite super administrator.
-
What happens when I delete the plugin?
-
SiteIntelix removes its settings, scheduled events, logs, and only signature-verified SiteIntelix safety MU bootstrap files. Custom CSS & JS entries, generated assets, Code Snippets, and File Manager-owned backups, trash, metadata, and audit records are removed only when their independent uninstall-retention settings are enabled. Debug constants are not silently rewritten during deletion; the viewer should be used to disable them first.
-
Can File Manager edit PHP or WordPress core files?
-
No. File Manager is Safe Mode-only in this release. PHP files remain view-only, while WordPress core,
wp-config.phpwrites, SiteIntelix, must-use plugins, active plugins, and the active theme are protected. WordPress’DISALLOW_FILE_EDITandDISALLOW_FILE_MODSconstants are also enforced.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“SiteIntelix – WordPress Toolkit” is open source software. The following people have contributed to this plugin.
Contributors“SiteIntelix – WordPress Toolkit” has been translated into 1 locale. Thank you to the translators for their contributions.
Translate “SiteIntelix – WordPress Toolkit” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.8.1 — 2026-08-01
- Added: WPConfigTransformer-based debugging, protected randomized log storage, first-run automatic setup, grouped logs, filters, stack traces, pagination, clear, and download actions.
- Fixed: Removed Debug Log MU-mode runtime files, separated capture settings from the log viewer, and prevented transformer conflicts with other plugins.
2.8.0 — 2026-08-01
- Added: DirectAdmin-inspired File Manager, lazy WordPress-root folder tree, read-only protected locations, private ZIP downloads, and randomized protected debug storage.
- Fixed: Blocked traversal, symlink escapes, sensitive-file access, unsafe writes, and third-party notices inside SiteIntelix screens.
2.7.3 — 2026-07-28
- Added: Safe Mode File Manager, Custom CSS & JS, Code Snippets, Maintenance Mode artwork selection, and improved User Switcher recovery and activity logging.
- Fixed: Code Snippets bootstrap order, generated-file ownership checks, multisite permissions, SMTP storage, transient previews, and uninstall cleanup matching.
2.7.2 — 2026-07-24
- Added: User Switcher, Database Manager and Server Diagnostics dashboards, Email Log actions, and responsive Debug Log details.
- Fixed: Overview module toggles, request overhead, capability checks, nonce validation, output escaping, SQL allow-lists, and package-path validation.
2.7.1 — 2026-07-21
- Added: Grouped Debug Log rows, expanded details, copy actions, severity indicators, filters, pagination, and native editor links.
- Fixed: Debug Log layout spacing and full-width log-row presentation.
2.7.0 — 2026-06-24
- Added: Shared WordPress-native admin design system and focused Server Diagnostics reporting.
- Fixed: Removed the retired Custom Error UI and safely cleaned its SiteIntelix-owned files and settings.
Earlier release history remains available in previous WordPress.org tags.
