WordPress.org
Get WordPress

Plugin Directory

Changeset 3735510


Ignore:
Timestamp:
10/08/2026 08:54:15 PM (4 weeks ago)
Author:
powersuite
Message:

Updated readme.txt

Location:
powersuite-modular-admin-toolkit
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • powersuite-modular-admin-toolkit/tags/1.1.2/readme.txt

    r3735491 r3735510  
    1313== Description ==
    1414
    15 PowerSuite Modular Admin Toolkit brings everyday WordPress tasks into one searchable dashboard. Customize your admin area, manage content and media, improve login workflows, and configure email delivery. Enable only the tools your site needs.
    16 
    17 **155 modules across Free and Pro: 90 free modules in this download, plus 65 additional modules in the separate, paid WP PowerSuite Pro add-on.**
    18 
    19 Start with the 90 free modules. No PowerSuite account, license key, or trial period is required. Add Pro when you need tools such as forms, backups, advanced login protection, custom fields, and client branding. Pro's module code is supplied by the separate add-on, not bundled as locked features in this free plugin.
    20 
    21 = Included free: 90 everyday tools =
    22 
    23 * **A cleaner dashboard:** add an admin logo, adjust dashboard columns, hide unwanted widgets, and simplify the admin bar.
    24 * **Faster content tasks:** duplicate posts and menus, change post types, publish missed scheduled posts, and set content expiration.
    25 * **Media essentials:** sanitize SVG uploads, regenerate thumbnails, set default featured images, and control upload sizes.
    26 * **Login and user tools:** configure Google Sign-In, block selected usernames, use generic login errors, and show last-login and registration dates.
    27 * **Site and content navigation:** edit robots.txt and ads.txt, set a fallback redirect for 404 pages, and add breadcrumbs, a table of contents, reading time, or post-view counts.
    28 * **WordPress behavior controls:** disable emojis, front-end Dashicons, comments, or XML-RPC when your site does not need them.
    29 * **Email delivery:** connect SMTP or a supported email provider, send test emails, and configure fallback delivery and failure alerts.
    30 
    31 = One place to manage your tools =
    32 
    33 Find modules by name or category, filter Free and Pro, and save favorites for quick access. Use the Quick Launcher to find tools from other admin screens. Save presets or import and export settings for repeatable setup; keep exported files private.
    34 
    35 Disabled modules do not run their feature logic, though the shared dashboard and core still load as needed. You choose which modules to enable.
    36 
    37 = Add Pro: 65 more tools for growing sites =
    38 
    39 Need more than the essentials? **WP PowerSuite Pro adds 65 modules** to the same Control Center. Keep the free plugin active and install Pro alongside it.
    40 
    41 * **Build forms and capture inquiries:** create forms manually or with AI assistance, manage entries, and configure notifications and webhooks. Generate image alternative text with AI, too.
    42 * **Add login protection and support access:** use two-factor authentication, failed-login limits, a custom login URL, session management, and temporary login links.
    43 * **Build more flexible websites:** create custom post types, taxonomies, custom fields, and options pages; reorder content; and generate pages from CSV templates.
    44 * **Take control of your media:** organize the Media Library into folders, replace attachments, rename files, add image sizes, and choose WebP or AVIF conversion on supported servers.
    45 * **Maintain and troubleshoot your site:** create and restore local backups, clean selected database data, check broken links, review activity and email logs, and manage advanced redirects.
    46 * **Customize client projects:** manage code snippets, header and footer code, custom admin CSS, menus, and list-table columns. Brand login pages and use white-label names, branding, and support links.
    47 
    48 **Ready for the additional tools? [Explore WP Powersuite Premium](https://wppowersuite.com) for Pro features and pricing.** The free plugin remains usable on its own.
    49 
    50 AI generation requires a supported provider connection; provider charges and data policies are separate from Pro. Manual form building does not require an AI provider. See the Pro readme for its service disclosures.
    51 
    52 = Get started =
    53 
    54 Install the free plugin, open **PowerSuite > Modules**, and enable your first tool. Each module with configuration options has its own settings. Start with a few tools and test the changes before adding more.
    55 
    56 Use staging for sensitive changes and avoid overlapping features in other plugins. Keep independent backups; this toolkit does not replace a complete security solution. Optional external integrations may require provider accounts and paid plans. Their data use is explained below.
    57 
    58 == Privacy ==
    59 
    60 The free plugin makes no licensing requests. Enabled integrations, displayed avatars/logos, selected image imports, and explicitly submitted feedback can contact services as detailed below. Disabled modules do not contact these services. Alpine.js is bundled, not CDN-hosted.
    61 
    62 == External services ==
    63 
    64 = Email Delivery =
    65 
    66 Email Delivery uses configured PHP mail, SMTP, or an email provider. WordPress mail and Test email send subject, body, sender, recipients, reply-to, attachments, and authentication information through that connection.
    67 
    68 Test connection uses configured credentials. SMTP connects/authenticates without sending mail. API checks request account, permission, domain, or sender information. Emailit and Bird request a recent message record; SendLayer requests a recent delivery-event record. Responses can expose existing account mail information. Netcore and turboSMTP POST synthetic send requests with intentionally invalid sender/recipient addresses and subject/body `connection-test` to check authentication, without customer messages or attachments. Maileroo only checks locally for a sending key; Test email verifies delivery.
    69 
    70 For provider SMTP delivery, an empty host uses the default relay below; an entered host overrides it. The relay receives mail content and SMTP credentials. API User-Agent headers include plugin name/version. Servers receive connection information, including your server's IP.
    71 
    72 Connecting Gmail/Microsoft sends authorization code, application credentials, and callback URL to the provider's token endpoint; later sends may refresh tokens there. Configured SES event webhooks fetch SNS signing certificates and verified subscription-confirmation URLs containing subscription tokens. Sender-domain health checks query your DNS resolver for domain records.
    73 
    74 Delivery webhooks authenticate using provider signatures or configured secrets. Mailgun requires its HTTP Webhook Signing Key and HTTPS.
     15**155 modules. 90 free. 65 more with Pro.**
     16
     17PowerSuite Modular Admin Toolkit brings admin, content, media, login, and email tools into one searchable dashboard. Enable only what you need; save favorites and configurations for repeatable setup.
     18
     19= 🚀 Start Free, Add Pro When Needed =
     20
     21Your **90 free modules** need no PowerSuite account, license, or trial. The **65 paid modules** require the separate Pro add-on; their code is not bundled here.
     22
     23[Explore WP Powersuite Premium](https://wppowersuite.com) for forms, backups, advanced login protection, custom fields, media tools, and client branding. Keep this free plugin active alongside Pro.
     24
     25= ✅ All 90 Free Modules =
     26
     27* **404 Redirect:** Fallback redirects for unknown URLs.
     28* **Admin Logo:** Brand admin bar/sidebar.
     29* **Ads.txt Manager:** Manage advertising inventory files.
     30* **Alpine.js Enqueue:** Load Alpine.js where needed.
     31* **Analytics Integration:** Consent-aware GA4 pageview tracking.
     32* **Auto Image Upload Rename:** Clean uploaded image filenames.
     33* **Auto Set Featured Image:** Choose first content image.
     34* **Auto Table of Contents:** Build heading-based contents lists.
     35* **AVIF Upload:** Upload server-supported AVIF images.
     36* **Block Usernames:** Restrict registration usernames.
     37* **Block Video Uploads:** Restrict videos by role.
     38* **Breadcrumbs:** Display breadcrumb navigation.
     39* **Change Post Type:** Convert content between types.
     40* **Clean User Profile Screen:** Simplify user profile screens.
     41* **Compact Tables:** Compact admin list tables.
     42* **Content Expiration:** Schedule content unpublishing.
     43* **Content Report Widget:** Dashboard content/user counts.
     44* **Custom Admin Footer Text:** Customize dashboard footer text.
     45* **Custom Body Class:** Add custom CSS classes.
     46* **Custom Excerpt Length:** Customize excerpt length/text.
     47* **Custom Login Logo:** Brand the login screen.
     48* **Custom Login Logo Link:** Customize login-logo destination.
     49* **Customizer Reset:** Back up/reset/import/export settings.
     50* **Dashboard Columns:** Arrange dashboard widget columns.
     51* **Default Featured Image:** Provide fallback post thumbnails.
     52* **Disable Application Passwords:** Block application-password authentication; affects integrations.
     53* **Disable Author Archives:** Disable public author archives.
     54* **Disable Auto-Update Emails:** Suppress update notification emails.
     55* **Disable Comments:** Disable site-wide comments.
     56* **Disable Core Sitemap:** Disable WordPress's generated sitemap.
     57* **Disable Dashboard Widgets:** Remove selected dashboard widgets.
     58* **Disable Dashicons on Frontend:** Remove guest Dashicons; check compatibility.
     59* **Disable Drag and Drop:** Discourage dragging, not secure protection.
     60* **Disable File Editing:** Disable browser-based code editors.
     61* **Disable Gutenberg:** Select classic editing by type.
     62* **Disable Heartbeat:** Reduce background Heartbeat requests.
     63* **Disable Keyboard Keys:** Discourage shortcuts, not secure protection.
     64* **Disable oEmbed Auto-Embeds:** Disable automatic link embedding.
     65* **Disable Password Reset:** Restrict resets; arrange alternative recovery.
     66* **Disable Post Auto-Save:** Disable autosaves; save manually.
     67* **Disable REST API:** Restrict anonymous core REST endpoints.
     68* **Disable Right Click:** Discourage right-click, not secure protection.
     69* **Disable RSS Feeds:** Disable public RSS feeds.
     70* **Disable Site Search:** Disable general searches; retain type-scoped searches.
     71* **Disable Text Selection:** Discourage selection, not secure protection.
     72* **Disable Thumbnail Generation:** Skip selected new thumbnail sizes.
     73* **Disable Trackbacks/Pingbacks:** Disable trackbacks and pingbacks.
     74* **Disable WordPress Emojis:** Use device-native emoji rendering.
     75* **Disable XML-RPC:** Disable legacy XML-RPC access.
     76* **Display Active Plugins First:** Group active plugins first.
     77* **Download Plugin as ZIP:** Export installed plugin ZIPs.
     78* **Download Theme as ZIP:** Export installed theme ZIPs.
     79* **Duplicate Menu:** Copy menus and items.
     80* **Duplicate Post Type:** Duplicate posts/pages/custom content.
     81* **Email Delivery:** Route email through SMTP/providers.
     82* **Email Obfuscator:** Encode visible email addresses.
     83* **External Permalinks:** Link entries to external destinations.
     84* **Featured Image Column:** Preview thumbnails in content tables.
     85* **Footer Timezone Display:** Show site time/timezone.
     86* **Force SSL Admin:** Require working HTTPS for admin.
     87* **Generic Login Errors:** Standardize failed-login messages.
     88* **Google Sign-in:** Google login; optional registration.
     89* **Hide Admin Bar:** Hide toolbar by role.
     90* **Hide Author URLs:** Obfuscate public author slugs.
     91* **Hide Update Notifications:** Hide notices; still apply updates.
     92* **Hide WP Version:** Remove public version disclosures.
     93* **Image Sizes Panel:** Inspect image sizes/URLs.
     94* **Last Login Column:** Display users' last logins.
     95* **Limit Media Upload Size:** Cap media upload size.
     96* **Local User Avatar:** Use local profile photos.
     97* **Media Library Infinite Scroll:** Scroll-load media; respects user preference.
     98* **Open All External Links in New Tab:** Open external links separately.
     99* **Open Menu Links in New Tab:** Open selected menu links separately.
     100* **Post Views Counter:** Count/display content views.
     101* **Publish Missed Scheduled Posts:** Publish overdue scheduled content.
     102* **Reading Time Calculator:** Estimate article reading time.
     103* **Regenerate Thumbnails:** Rebuild attachment image sizes.
     104* **Registration Date Column:** Show/sort account registration dates.
     105* **Remove Admin Bar Items:** Hide selected toolbar items.
     106* **Remove Query Strings:** Remove local asset version parameters.
     107* **Remove Shortlink:** Remove shortlink markup.
     108* **Remove Unused Themes and Plugins:** Delete inactive themes/plugins.
     109* **Remove Version from Scripts:** Hide core asset version markers.
     110* **Robots.txt Manager:** Manage virtual robots.txt directives.
     111* **Search Visibility Warning:** Flag discouraged search indexing.
     112* **Storage Monitor:** Display dashboard disk usage.
     113* **SVG Upload:** Administrator-only sanitized SVG/SVGZ uploads.
     114* **User Role Body Class:** Add role-based CSS classes.
     115* **Username Body Class:** Expose current username/ID in body classes.
     116* **Wider Admin Menu:** Widen the dashboard sidebar.
     117
     118= ⭐ All 65 Pro Add-On Modules =
     119
     120Available separately through WP PowerSuite Pro:
     121
     122* **404 Error Log:** Record missing-page requests/referrers.
     123* **Accessibility Widget:** Visitor adjustments; not WCAG certification.
     124* **Activity Log:** Record dashboard/user activity.
     125* **Admin Color Customizer:** Customize dashboard color schemes.
     126* **Admin Columns Customizer:** Configure admin table columns.
     127* **Admin Login Alerts:** Email administrator login alerts.
     128* **Admin Menu Organizer:** Reorder/rename/hide admin menus.
     129* **AI Alt Text Generator:** Generate reviewable AI image descriptions.
     130* **AI Forms:** Manual/AI-assisted forms and entries.
     131* **AI Summarize:** Open external AI summary prompts.
     132* **Alphabet Avatars:** Create letter-based profile images.
     133* **AVIF Conversion:** Generate AVIF image copies.
     134* **Backup & Restore:** Back up/restore local files/database.
     135* **Broken Link Checker:** Scan content for broken links.
     136* **Bulk Page Creator:** Generate pages from CSV.
     137* **Categorize Media:** Organize media into folders.
     138* **Change Login URL:** Customize the login address.
     139* **Cloudflare Turnstile:** Cloudflare form bot checks.
     140* **Code Snippet:** Manage code snippets with conditions.
     141* **Coming Soon & Maintenance:** Show temporary landing pages.
     142* **Custom Admin CSS:** Style dashboard with CSS.
     143* **Custom Fields:** Create post/term custom fields.
     144* **Custom Image Sizes:** Register additional image dimensions.
     145* **Custom Post Order:** Reorder content in supported queries.
     146* **Custom Post Type Builder:** Build post types/taxonomies.
     147* **Custom Taxonomy Order:** Reorder supported taxonomy displays.
     148* **Customize WordPress Emails:** Brand core email notifications.
     149* **Database Cleanup:** Review/delete selected database clutter.
     150* **Debug Mode Toggle:** Control debugging and logging.
     151* **Disable All Updates:** Pause updates; patch manually.
     152* **Download Media Library:** Export media ZIP archives.
     153* **Email Logs:** Review delivery records/resend.
     154* **Email Reports:** Schedule activity/delivery summaries.
     155* **Facebook Sign In:** Configure Facebook account login.
     156* **Floating Social Share:** Add social sharing links.
     157* **GitHub Sign-in:** Configure GitHub account login.
     158* **Google reCAPTCHA:** Google form bot checks.
     159* **Gutenberg Block Control:** Restrict available editor blocks.
     160* **Header & Footer Code:** Insert site-wide code snippets.
     161* **Hide Admin Notices:** Collect notices in toolbar.
     162* **IP Allow & Block List:** Restrict site access by IP.
     163* **Limit Login Attempts:** Lock out repeated login failures.
     164* **Login as User:** Authorized user-session switching.
     165* **Login ID Type:** Choose username/email login.
     166* **Login Page Customizer:** Style the login page.
     167* **Login Session Manager:** Manage active login sessions.
     168* **Magic Login:** Passwordless links/one-time codes.
     169* **Media Rename Manager:** Rename files/update supported references.
     170* **Media Replacement:** Replace existing attachment files.
     171* **Options Page Builder:** Build custom settings screens.
     172* **Password Protection:** Password-protect the whole site.
     173* **Redirect After Login:** Set post-login destinations.
     174* **Redirect Manager:** Manage redirects and patterns.
     175* **Security Headers:** Configure browser security headers.
     176* **Share Draft Preview Links:** Share expiring draft previews.
     177* **Show IDs:** Show content/user IDs.
     178* **Simple CAPTCHA:** Local form CAPTCHA challenges.
     179* **System Summary:** Inspect environment/site health.
     180* **Temporary Login:** Issue expiring access links.
     181* **Two-Factor Authentication (2FA):** Require additional login verification.
     182* **Unused Media Finder:** Review potentially unused media.
     183* **URL Shortener:** Create on-site short links.
     184* **Username Changer:** Change validated account usernames.
     185* **WebP Conversion:** Convert uploads to WebP.
     186* **WP Config Editor:** Edit configuration with backups.
     187
     188= 💡 Before You Enable Modules =
     189
     190Test sensitive changes on staging and keep independent backups. Avoid overlapping features; use either WebP or AVIF Conversion. Disabled modules skip feature logic, but shared core still loads. AI generation requires your provider account; charges are separate. Manual form building needs no AI provider.
     191
     192= 🔎 Privacy, External Services & Licenses =
     193
     194Free modules make no licensing requests. Configured integrations, remote images/imports, and submitted feedback contact the recipients below. Disabled modules do not contact these services. Alpine.js is bundled.
     195
     196**Email Delivery**
     197
     198Configured PHP mail/SMTP/providers receive message content, sender/recipients, reply-to, attachments, and credentials for mail and Test email. Test connection authenticates SMTP without sending; API checks request account/domain/sender/permission data. Emailit/Bird retrieve recent messages; SendLayer retrieves delivery events, potentially exposing account mail information. Netcore/turboSMTP POST synthetic `connection-test` requests with invalid sender/recipient addresses, without customer content. Maileroo checks its key locally; use Test email for delivery verification.
     199
     200Entered SMTP hosts override defaults below. Relays receive mail/credentials; API User-Agent includes plugin/version. Servers receive your IP/HTTP information. Gmail/Microsoft authorization exchanges code, credentials, callback URL, and later refresh tokens. SES webhooks fetch SNS certificates/subscription-confirmation URLs with tokens. Domain checks query DNS. Delivery webhooks verify signatures/secrets; Mailgun requires its HTTP Webhook Signing Key and HTTPS.
    75201
    76202* Other SMTP host you enter: the email content goes to that host. Use that host's own Terms and Privacy Policy.
    … …  
    97223* Mail.baby (InterServer): API `https://api.mailbaby.net`; SMTP `relay.mailbaby.net`. [Terms](https://www.interserver.net/terms-of-service.html) and [Privacy](https://www.interserver.net/privacy-policy.html).
    98224
    99 = Email failure alerts: Slack and Discord =
    100 
    101 Enabled failure alerts send site name, provider name, and redacted error to your configured chat webhook after final delivery failure, at most once per 15 minutes. Errors may retain message-specific information; chat alerts exclude email bodies/attachments. Email alerts also use your selected mail connection and configured recipient, falling back to the admin email.
    102 
    103 Slack uses hooks.slack.com: [Terms](https://slack.com/main-services-agreement) and [Privacy](https://slack.com/trust/privacy/privacy-policy).
    104 
    105 Discord uses discord.com or discordapp.com: [Terms](https://discord.com/terms) and [Privacy](https://discord.com/privacy).
    106 
    107 A developer can explicitly allow another HTTPS webhook host. Review that recipient's Terms and Privacy Policy before configuring it.
    108 
    109 = Customizer image imports =
    110 
    111 Importing Customizer settings with image downloads requests URLs from the import and creates Media Library attachments. Each host receives the URL, server IP, and HTTP request information. Hosts are arbitrary; review their Terms and Privacy Policy before importing.
    112 
    113 = Admin Logo images from configured hosts =
    114 
    115 Admin Logo displays configured admin-bar/menu image URLs. External hosts receive direct browser requests on settings previews and pages displaying the logo, including front-end admin bars: image URL, viewer IP, browser information, and policy-permitted referrer. Images are not copied into the Media Library. Hosts are arbitrary; review their Terms and Privacy Policy before configuring them.
    116 
    117 = Gravatar avatar images =
    118 
    119 Automattic's Gravatar supplies default WordPress avatars. Enabled Local User Avatar prepares a profile-editor fallback; Remove Admin Bar Items requests avatars when replacing the account greeting. Unless another avatar filter overrides them, browsers request `https://secure.gravatar.com/avatar/`, sending the profile email's hash, size/default/rating options, and initials if selected. Gravatar receives viewer IP, browser information, and policy-permitted referrer. The profile-editor fallback can render even with Show Avatars off, a local upload, or a hidden preview. [Terms](https://wordpress.com/tos/) and [Privacy](https://automattic.com/privacy/).
    120 
    121 = Optional deactivation feedback =
    122 
    123 "Submit & Deactivate" stores feedback and a diagnostic snapshot locally (up to 50 records), including site/admin details, plugins/theme, enabled modules, browser/environment, and recent errors.
    124 
    125 It sends WP PowerSuite your reason/comments, site URL/hash, administrator/submitting-user emails, plugin/WordPress/PHP/database versions, theme, installed/active plugins, enabled modules, license status (not key), browser/OS, language, user role, hosting/server, memory, cache/CDN, HTTPS, and cron information at `https://wppowersuite.com/wp-json/licensor/deactivation-feedback` to investigate issues and improve the plugin. Automatic diagnostics exclude raw errors, log excerpts, local user IDs, passwords, API keys, and license keys. The recipient receives server IP and normal HTTP information. [Terms](https://wppowersuite.com/terms-of-service/) and [Privacy](https://wppowersuite.com/privacy-policy/).
    126 
    127 Sharing is optional. "Skip & Deactivate" collects/sends nothing; opening/closing the dialog sends nothing. Developers can override/disable the recipient via constants/filters and must disclose replacement recipients and their Terms/Privacy before collecting feedback.
    128 
    129 The separate "You may contact me by email about this feedback" checkbox defaults checked. Submissions include this yes/no preference; uncheck to decline follow-up. It neither sends email nor subscribes you to marketing. Skip sends no contact permission.
    130 
    131 = Google Sign-In =
    132 
    133 Enabled Google Sign-In requires your OAuth Client ID/Secret. Clicking sign-in opens `https://accounts.google.com`; after approval, your site sends authorization code, client ID/secret, and callback URL to `https://oauth2.googleapis.com/token`, then uses the access token at `https://openidconnect.googleapis.com/v1/userinfo` for email, display name, and profile-image URL to sign in/create a local account.
    134 
    135 Social sign-in and its CAPTCHA gate use separate first-party HttpOnly browser-binding cookies, expiring after ten minutes and cleared on matching verification. They are not sent to providers or used for tracking. Use HTTPS in production.
    136 
    137 Google avatar URL storage defaults enabled. While sign-in is enabled/configured, later avatar views can load saved images directly from their host, including for viewers not signing in; local uploads can override them. Hosts receive image URL, viewer IP, browser information, and policy-permitted referrer. Images are not copied into the Media Library. Disabling new URL storage does not remove saved URLs.
    138 
    139 This service is provided by Google: [Terms](https://policies.google.com/terms) and [Privacy](https://policies.google.com/privacy).
    140 
    141 = Facebook and GitHub Sign-In =
    142 
    143 This plugin ships a shared OAuth HTTP helper that can request access tokens and user profiles from Facebook Graph and GitHub. Google Sign-In in this free plugin uses that helper. Facebook and GitHub sign-in modules ship in the separate Pro add-on; the helper that performs the token and profile requests is part of this plugin.
    144 
    145 Requests require the matching module installed, enabled, and configured with your OAuth application. Choosing sign-in opens provider authorization with application ID, callback URL, permissions, and security state. After approval, your site exchanges authorization code/application credentials for an access token, then retrieves account ID, name, permitted email, and profile image to sign in/create a WordPress account. No WordPress password is sent. GitHub may request `GET /user/emails` with that token and `user:email` permission; see [API documentation](https://docs.github.com/en/rest/users/emails#list-email-addresses-for-the-authenticated-user).
    146 
    147 Facebook uses `https://www.facebook.com` for authorization and `https://graph.facebook.com` for token and profile requests: [Terms](https://www.facebook.com/legal/terms) and [Privacy](https://www.facebook.com/privacy/policy/).
    148 
    149 GitHub uses `https://github.com` for authorization and tokens, and `https://api.github.com` for profile and email requests: [Terms](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service) and [Privacy](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement).
    150 
    151 = Google Analytics 4 =
    152 
    153 Enabled Analytics Integration requires a GA4 Measurement ID. Default Consent Mode waits for a CMP's analytics-storage consent or the `wppsmodule_allow_analytics` filter (default false) before requesting scripts/sending pageviews. Disabling Consent Mode allows immediate tracking unless that filter blocks it.
    154 
    155 On each included front-end page view, the visitor's browser requests `https://www.googletagmanager.com/gtag/js` and then sends the Measurement ID, page URL, and standard GA4 event data to Google Analytics (`https://www.google-analytics.com` / `https://analytics.google.com`).
    156 
    157 This service is provided by Google: [Terms](https://policies.google.com/terms) and [Privacy](https://policies.google.com/privacy).
    158 
    159 = Google reCAPTCHA =
    160 
    161 This integration requires the separate Pro add-on. The free plugin's admin script still contains the Test connection loader. Enabled reCAPTCHA loads `https://www.google.com/recaptcha/api.js` and related `https://www.gstatic.com` assets when you click Test connection. Protected front-end forms exchange browser tokens with Google; your site posts the token and secret key to `https://www.google.com/recaptcha/api/siteverify` for anti-spam verification.
    162 
    163 This service is provided by Google: [Terms](https://policies.google.com/terms) and [Privacy](https://policies.google.com/privacy).
    164 
    165 = Cloudflare Turnstile =
    166 
    167 This integration requires the separate Pro add-on. The free plugin's admin script still contains the Test connection loader. Enabled Turnstile loads `https://challenges.cloudflare.com/turnstile/v0/api.js` when you click Test connection. Protected front-end forms exchange browser tokens with Cloudflare; your site posts the token and secret key to `https://challenges.cloudflare.com/turnstile/v0/siteverify` for anti-spam verification.
    168 
    169 This service is provided by Cloudflare: [Terms](https://www.cloudflare.com/website-terms/) and [Privacy](https://www.cloudflare.com/privacypolicy/).
    170 
    171 == Bundled libraries and source code ==
    172 
    173 Alpine.js 3.17.2 is bundled as minified production JavaScript from the official npm package. Source code, license, and build instructions are available at https://github.com/alpinejs/alpine.
    174 
    175 SVG Upload includes svg-sanitize 1.0.0 (GPLv2 or later), with a prefixed PHP namespace to avoid plugin conflicts. Its source and license are available at https://github.com/darylldoyle/svg-sanitizer and in modules/svg-upload/includes/svg-sanitize. Sanitization runs locally. External resources, unsafe CSS and active content are removed; SVG files with ambiguous IDs, excessive complexity or invalid reference graphs are rejected.
     225**Email failure alerts**
     226
     227After final failure, optional chat alerts send site/provider names and redacted errors, at most every 15 minutes. Errors may retain message-specific information, but exclude bodies/attachments. Email alerts use configured recipients/connection, falling back to admin email. Slack: hooks.slack.com ([Terms](https://slack.com/main-services-agreement), [Privacy](https://slack.com/trust/privacy/privacy-policy)). Discord: discord.com/discordapp.com ([Terms](https://discord.com/terms), [Privacy](https://discord.com/privacy)). Developers may allow other HTTPS hosts; review their policies.
     228
     229**Remote images and imports**
     230
     231Customizer image imports download supplied URLs into Media Library; hosts receive URL, server IP, and HTTP information. Admin Logo URLs load directly in previews/admin bars, including front-end bars; no local copy. External image hosts receive URL, viewer IP/browser and policy-permitted referrer. Review arbitrary hosts' Terms/Privacy.
     232
     233Gravatar fallback: Local User Avatar profile previews and Remove Admin Bar Items account greetings may request `https://secure.gravatar.com/avatar/` unless overridden. Requests include profile-email hash, size/default/rating and selected initials; hosts receive viewer IP/browser/referrer. Fallback previews can load despite disabled avatars, local uploads, or hidden previews. [Terms](https://wordpress.com/tos/), [Privacy](https://automattic.com/privacy/).
     234
     235**Optional deactivation feedback**
     236
     237"Submit & Deactivate" stores up to 50 local snapshots: reason/comments, site/admin details, plugins/theme, modules, environment/browser, and recent errors.
     238
     239It sends reason/comments, site URL/hash, admin/submitting-user emails, plugin/WordPress/PHP/database versions, theme, installed/active plugins, modules, license status (not key), browser/OS, language/role, hosting/server, memory/cache/CDN, HTTPS/cron details to `https://wppowersuite.com/wp-json/licensor/deactivation-feedback` for troubleshooting/improvements. Automatic diagnostics exclude raw errors/logs, local user IDs, passwords, API/license keys; recipient receives server IP/HTTP information. [Terms](https://wppowersuite.com/terms-of-service/), [Privacy](https://wppowersuite.com/privacy-policy/).
     240
     241"Skip & Deactivate" collects/sends nothing; opening/closing sends nothing. Contact-permission checkbox defaults checked; its yes/no value permits follow-up, not marketing subscription or immediate email. Uncheck to decline; Skip sends no permission. Developers overriding/disabling recipients through constants/filters must disclose replacements and policies before collection.
     242
     243**Social sign-in**
     244
     245Google Sign-In requires OAuth credentials. Clicking sign-in authorizes at `https://accounts.google.com`; approval exchanges code, client ID/secret and callback URL at `https://oauth2.googleapis.com/token`, then retrieves email/name/avatar using the access token at `https://openidconnect.googleapis.com/v1/userinfo` to sign in/create accounts.
     246
     247Sign-in/CAPTCHA browser-binding cookies are first-party HttpOnly, expire after ten minutes, clear on matching verification, and are neither shared with providers nor tracking cookies. Use HTTPS.
     248
     249Google avatar URL storage defaults enabled. Saved external images load during later avatar views while sign-in is enabled/configured, including non-signing-in viewers. Local uploads can override; images aren't copied locally. Disabling storage doesn't remove saved URLs. Hosts receive image URL, IP/browser/referrer. Google: [Terms](https://policies.google.com/terms), [Privacy](https://policies.google.com/privacy).
     250
     251Facebook/GitHub modules require Pro; the shared OAuth HTTP helper ships free. Installed/enabled/configured modules authorize with application ID, callback, permissions/state; approval exchanges authorization code/credentials for tokens, then account ID/name/permitted email/avatar for login/registration. No WordPress passwords are sent. GitHub's authenticated `GET /user/emails` uses `user:email`: [API documentation](https://docs.github.com/en/rest/users/emails#list-email-addresses-for-the-authenticated-user).
     252
     253Facebook: `https://www.facebook.com`, `https://graph.facebook.com` ([Terms](https://www.facebook.com/legal/terms), [Privacy](https://www.facebook.com/privacy/policy/)). GitHub: `https://github.com`, `https://api.github.com` ([Terms](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service), [Privacy](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement)).
     254
     255**Analytics and bot checks**
     256
     257Configured GA4 waits for CMP analytics consent or `wppsmodule_allow_analytics` (default false). Disabling Consent Mode allows immediate tracking unless blocked by that filter. Included pageviews request `https://www.googletagmanager.com/gtag/js`, then send Measurement ID, URL and standard events to `https://www.google-analytics.com` / `https://analytics.google.com`. Google Terms/Privacy above apply.
     258
     259reCAPTCHA/Turnstile require Pro; their Test connection loaders remain in the free admin script. Enabled connection tests load provider scripts; protected forms obtain browser tokens and send tokens/secrets server-side for verification.
     260
     261reCAPTCHA: `https://www.google.com/recaptcha/api.js`, `https://www.gstatic.com`, `https://www.google.com/recaptcha/api/siteverify`. Google Terms/Privacy above apply.
     262
     263Turnstile: `https://challenges.cloudflare.com/turnstile/v0/api.js`, `https://challenges.cloudflare.com/turnstile/v0/siteverify`. [Terms](https://www.cloudflare.com/website-terms/), [Privacy](https://www.cloudflare.com/privacypolicy/).
     264
     265**Bundled libraries**
     266
     267Alpine.js 3.17.2: minified official npm distribution; [source/license/build instructions](https://github.com/alpinejs/alpine).
     268
     269SVG Upload: prefixed svg-sanitize 1.0.0, GPLv2+; [source/license](https://github.com/darylldoyle/svg-sanitizer), also in `modules/svg-upload/includes/svg-sanitize`. Local sanitization removes external resources, unsafe CSS/active content; ambiguous IDs, excessive complexity and invalid reference graphs are rejected.
    176270
    177271== Installation ==
    … …  
    212306= Does PowerSuite send data off my site? =
    213307
    214 Configured integrations, remote images, selected imports, and feedback you submit can contact external services. The free plugin makes no licensing requests. See Privacy and External services for the data involved and provider policies.
     308Configured integrations, remote images, selected imports, and feedback you submit can contact external services. The free plugin makes no licensing requests. See Privacy, External Services & Licenses at the bottom of the Description for details and provider policies.
    215309
    216310= Where can I get help? =
    217311
    218312Use the Support tab on this WordPress.org listing for the free plugin, or your Pro support channel for the paid add-on. Include the affected module and steps to reproduce the issue. Never post credentials, license keys, private exports, or customer data.
    219 
    220 = Which 90 modules are included free? =
    221 
    222 Every module below is included in this download. Enable only the tools your site needs; no PowerSuite license is required.
    223 
    224 * **404 Redirect:** Redirect unknown URLs to a chosen fallback destination.
    225 * **Admin Logo:** Add your logo to the admin bar or sidebar.
    226 * **Ads.txt Manager:** Manage ads.txt and app-ads.txt advertising inventory files.
    227 * **Alpine.js Enqueue:** Load Alpine.js on the front end, in admin, or both.
    228 * **Analytics Integration:** Connect Google Analytics 4 with consent-mode defaults and role exclusions.
    229 * **Auto Image Upload Rename:** Clean uploaded image filenames and add a unique identifier.
    230 * **Auto Set Featured Image:** Use the first content image when a featured image is missing.
    231 * **Auto Table of Contents:** Create a clickable contents list from article headings.
    232 * **AVIF Upload:** Allow AVIF uploads when your server supports the format.
    233 * **Block Usernames:** Block specified usernames during account registration.
    234 * **Block Video Uploads:** Restrict video uploads for selected user roles.
    235 * **Breadcrumbs:** Add breadcrumb navigation to content pages.
    236 * **Change Post Type:** Convert content between posts, pages, and other post types.
    237 * **Clean User Profile Screen:** Hide unnecessary fields from user profiles.
    238 * **Compact Tables:** Fit more items into admin content list tables.
    239 * **Content Expiration:** Automatically unpublish content after a chosen date.
    240 * **Content Report Widget:** See content and user counts on your dashboard.
    241 * **Custom Admin Footer Text:** Replace the text in the dashboard footer.
    242 * **Custom Body Class:** Add CSS classes site-wide or to individual content items.
    243 * **Custom Excerpt Length:** Set excerpt word counts and read-more text.
    244 * **Custom Login Logo:** Display your logo on the WordPress login page.
    245 * **Custom Login Logo Link:** Set the destination of the login-page logo link.
    246 * **Customizer Reset:** Back up, reset, export, or import theme Customizer settings.
    247 * **Dashboard Columns:** Choose the number of dashboard widget columns.
    248 * **Default Featured Image:** Set a fallback image for posts without a featured image.
    249 * **Disable Application Passwords:** Block application-password authentication. Integrations using these credentials will stop working while enabled.
    250 * **Disable Author Archives:** Turn off public author archive pages.
    251 * **Disable Auto-Update Emails:** Stop core, plugin, or theme update notification emails.
    252 * **Disable Comments:** Disable commenting across your site.
    253 * **Disable Core Sitemap:** Turn off WordPress's default sitemap when another tool handles it.
    254 * **Disable Dashboard Widgets:** Remove selected widgets from the dashboard and Screen Options.
    255 * **Disable Dashicons on Frontend:** Remove Dashicons styles for visitors; check themes and builders that use these icons.
    256 * **Disable Drag and Drop:** Discourage dragging page content for selected roles; not secure copy protection.
    257 * **Disable File Editing:** Remove WordPress's built-in theme and plugin file editors.
    258 * **Disable Gutenberg:** Use the classic editor for selected post types.
    259 * **Disable Heartbeat:** Reduce or disable WordPress Heartbeat requests in selected areas.
    260 * **Disable Keyboard Keys:** Discourage selected keyboard shortcuts for chosen roles; not secure copy protection.
    261 * **Disable oEmbed Auto-Embeds:** Stop automatic link embedding and related embed code.
    262 * **Disable Password Reset:** Disable public password-reset requests; arrange another recovery method before enabling.
    263 * **Disable Post Auto-Save:** Stop editor autosaves; content must be saved manually.
    264 * **Disable REST API:** Restrict anonymous core REST endpoints while leaving third-party routes and authenticated access untouched.
    265 * **Disable Right Click:** Discourage right-click actions for selected roles; not secure copy protection.
    266 * **Disable RSS Feeds:** Turn off public RSS feeds.
    267 * **Disable Site Search:** Disable general front-end and REST content searches while retaining post-type-scoped searches.
    268 * **Disable Text Selection:** Discourage text selection for selected roles; not secure copy protection.
    269 * **Disable Thumbnail Generation:** Skip all or selected image sizes on new uploads.
    270 * **Disable Trackbacks/Pingbacks:** Disable trackback and pingback functionality.
    271 * **Disable WordPress Emojis:** Remove WordPress emoji scripts and use device-native emoji rendering.
    272 * **Disable XML-RPC:** Disable XML-RPC; check any legacy publishing integrations first.
    273 * **Display Active Plugins First:** Group active plugins ahead of inactive plugins on the Plugins screen.
    274 * **Download Plugin as ZIP:** Download an installed plugin as a ZIP archive.
    275 * **Download Theme as ZIP:** Download an installed theme as a ZIP archive.
    276 * **Duplicate Menu:** Copy a navigation menu and its items.
    277 * **Duplicate Post Type:** Duplicate posts, pages, and custom post type entries.
    278 * **Email Delivery:** Route WordPress email through SMTP or supported providers, with multiple connections and fallback delivery.
    279 * **Email Obfuscator:** Encode visible email addresses and mailto links to discourage basic scraping.
    280 * **External Permalinks:** Link content entries to external destinations.
    281 * **Featured Image Column:** Show featured-image thumbnails in supported content list tables.
    282 * **Footer Timezone Display:** Display the site's current time and timezone in the admin footer.
    283 * **Force SSL Admin:** Require HTTPS for login and dashboard access; your site needs working HTTPS.
    284 * **Generic Login Errors:** Use a consistent error message for failed logins.
    285 * **Google Sign-in:** Add Google login with optional new-user registration; requires Google application credentials.
    286 * **Hide Admin Bar:** Hide the front-end toolbar for selected roles.
    287 * **Hide Author URLs:** Use obfuscated author slugs while keeping author archives accessible.
    288 * **Hide Update Notifications:** Hide update notices without replacing your responsibility to apply updates.
    289 * **Hide WP Version:** Remove version information from generator output and the admin footer.
    290 * **Image Sizes Panel:** View available image sizes and copy their URLs.
    291 * **Last Login Column:** Show each user's last login time in the Users table.
    292 * **Limit Media Upload Size:** Set a maximum permitted upload size.
    293 * **Local User Avatar:** Use uploaded profile photos instead of Gravatar.
    294 * **Media Library Infinite Scroll:** Load more media while scrolling, respecting each user's preference.
    295 * **Open All External Links in New Tab:** Open external content links in new tabs with appropriate rel attributes.
    296 * **Open Menu Links in New Tab:** Open selected custom navigation links in new tabs.
    297 * **Post Views Counter:** Count and display content views with repeat-visit handling.
    298 * **Publish Missed Scheduled Posts:** Check for overdue scheduled posts and publish them through periodic checks.
    299 * **Reading Time Calculator:** Display estimated reading time automatically or with a shortcode.
    300 * **Regenerate Thumbnails:** Rebuild image sizes for selected attachments or the media library.
    301 * **Registration Date Column:** Show and sort user registration dates in the Users table.
    302 * **Remove Admin Bar Items:** Hide unwanted WordPress toolbar items.
    303 * **Remove Query Strings:** Remove version query parameters from local front-end CSS and JavaScript URLs.
    304 * **Remove Shortlink:** Remove the default shortlink tag from page markup.
    305 * **Remove Unused Themes and Plugins:** Delete inactive themes and plugins; review selections before removal.
    306 * **Remove Version from Scripts:** Remove core WordPress version markers while keeping theme and plugin cache-busting versions.
    307 * **Robots.txt Manager:** Manage your site's virtual robots.txt and crawler directives.
    308 * **Search Visibility Warning:** Show a toolbar reminder when search-engine indexing is discouraged.
    309 * **Storage Monitor:** Display disk usage on the dashboard.
    310 * **SVG Upload:** Allow administrator-only SVG and SVGZ uploads with local sanitization.
    311 * **User Role Body Class:** Add role-based CSS classes for styling.
    312 * **Username Body Class:** Add the logged-in username and user ID as body classes; these appear in that user's page source.
    313 * **Wider Admin Menu:** Increase the width of the dashboard sidebar.
    314 
    315 = Which 65 modules are available in the separate Pro add-on? =
    316 
    317 These modules are not included in the WordPress.org download. Install the paid WP PowerSuite Pro add-on alongside this free plugin to add them to your Control Center. External providers may require separate accounts or charges.
    318 
    319 * **404 Error Log:** Record missing-page requests, referrers, and counts to help plan redirects.
    320 * **Accessibility Widget:** Offer visitor display and navigation adjustments; not a substitute for accessible design or a WCAG audit.
    321 * **Activity Log:** Record important user and dashboard activity for troubleshooting.
    322 * **Admin Color Customizer:** Customize dashboard colors with presets, role mapping, and previews.
    323 * **Admin Columns Customizer:** Customize columns in supported content, media, comment, user, and taxonomy tables.
    324 * **Admin Login Alerts:** Send an email when an administrator logs in.
    325 * **Admin Menu Organizer:** Reorder, rename, or hide dashboard menu items.
    326 * **AI Alt Text Generator:** Generate suggested image alt text using your configured AI provider, with review and background processing.
    327 * **AI Forms:** Build forms manually or with AI assistance, including entries, notifications, uploads, and spam protection.
    328 * **AI Summarize:** Offer links that open AI services with a page-summary prompt; no on-site AI API call is required.
    329 * **Alphabet Avatars:** Create letter-based profile images with custom colors.
    330 * **AVIF Conversion:** Generate AVIF copies of JPEG and PNG uploads; use instead of WebP Conversion, not alongside it.
    331 * **Backup & Restore:** Create and restore local database and file backups, with history and logs.
    332 * **Broken Link Checker:** Scan published content for broken links in batches and export results.
    333 * **Bulk Page Creator:** Create multiple pages from CSV data and a template.
    334 * **Categorize Media:** Organize media with a folder-style tree and drag-and-drop assignment.
    335 * **Change Login URL:** Choose a custom login address; retain a recovery route and bookmark the new URL.
    336 * **Cloudflare Turnstile:** Add Cloudflare bot checks to supported logins and forms; requires provider configuration.
    337 * **Code Snippet:** Manage HTML, CSS, JavaScript, and PHP snippets with conditions, revisions, and import/export.
    338 * **Coming Soon & Maintenance:** Show a temporary landing page while allowing selected users to access the site.
    339 * **Custom Admin CSS:** Apply custom CSS to the WordPress dashboard.
    340 * **Custom Fields:** Add fields to posts and taxonomy terms and display their values in supported layouts.
    341 * **Custom Image Sizes:** Register additional image dimensions for your site's layouts.
    342 * **Custom Post Order:** Reorder posts and apply the order in supported queries.
    343 * **Custom Post Type Builder:** Create and manage custom post types and taxonomies without editing code.
    344 * **Custom Taxonomy Order:** Reorder taxonomy terms for supported displays and queries.
    345 * **Customize WordPress Emails:** Customize core email templates, sender settings, and notification types.
    346 * **Database Cleanup:** Review and clean revisions, transients, and orphaned data; back up before deleting.
    347 * **Debug Mode Toggle:** Control WordPress debugging and logging from the dashboard.
    348 * **Disable All Updates:** Pause selected automatic updates; maintain a manual security-update schedule.
    349 * **Download Media Library:** Export media in ZIP archives, with date and supported folder filtering.
    350 * **Email Logs:** Review sent-email records, delivery status, retention settings, and resend options.
    351 * **Email Reports:** Receive scheduled summaries of supported activity and delivery statistics.
    352 * **Facebook Sign In:** Add Facebook login using your configured Meta application.
    353 * **Floating Social Share:** Add floating, inline, or shortcode-based sharing links without embedded tracking widgets.
    354 * **GitHub Sign-in:** Add GitHub login with optional registration using your configured GitHub application.
    355 * **Google reCAPTCHA:** Add Google anti-bot checks to supported forms and login screens.
    356 * **Gutenberg Block Control:** Limit which blocks are available in the editor.
    357 * **Header & Footer Code:** Insert site-wide header, body, and footer code snippets.
    358 * **Hide Admin Notices:** Collect admin notices into a toolbar panel instead of displaying them throughout the dashboard.
    359 * **IP Allow & Block List:** Allow or block site access by IP address, including login and admin access.
    360 * **Limit Login Attempts:** Apply temporary lockouts after repeated failed sign-ins.
    361 * **Login as User:** Switch into another user's session for authorized support, with a return-to-admin option.
    362 * **Login ID Type:** Choose whether users sign in with a username, email address, or either.
    363 * **Login Page Customizer:** Customize login-page colors, background, and layout.
    364 * **Login Session Manager:** Review active sessions, force logouts, and configure role-based session limits.
    365 * **Magic Login:** Offer passwordless login links and one-time codes with optional registration.
    366 * **Media Rename Manager:** Rename existing media and update supported references; check custom integrations after renaming.
    367 * **Media Replacement:** Replace an attachment's file while retaining its attachment ID and supported existing URLs.
    368 * **Options Page Builder:** Create custom settings pages with a range of field types.
    369 * **Password Protection:** Place the site behind a shared password for previews or staging.
    370 * **Redirect After Login:** Configure destinations users reach after signing in.
    371 * **Redirect Manager:** Manage exact, pattern, and regular-expression redirects with bulk tools and import/export.
    372 * **Security Headers:** Configure browser security headers, including optional HSTS and content policies; test compatibility first.
    373 * **Share Draft Preview Links:** Share expiring draft-preview URLs with people who do not have a login.
    374 * **Show IDs:** Display content and user IDs in supported list tables.
    375 * **Simple CAPTCHA:** Add locally processed math, prompt, or image challenges without an external CAPTCHA account.
    376 * **System Summary:** Review environment, update, storage, and site-health information on the dashboard.
    377 * **Temporary Login:** Create expiring login links for authorized support or temporary access.
    378 * **Two-Factor Authentication (2FA):** Require an additional verification step for selected user roles.
    379 * **Unused Media Finder:** Identify potentially unused media for review before deletion; keep backups and verify custom layouts.
    380 * **URL Shortener:** Create on-site short links with click counts, optional expiry, and password protection.
    381 * **Username Changer:** Change account usernames with validity and uniqueness checks.
    382 * **WebP Conversion:** Convert JPEG and PNG uploads to WebP; use instead of AVIF Conversion, not alongside it.
    383 * **WP Config Editor:** Edit supported wp-config.php settings with backup-before-save safeguards.
    384 
    385 See [WP Powersuite Premium](https://wppowersuite.com) for Pro features and pricing. Your free modules continue to work without purchasing Pro.
    386313
    387314== Screenshots ==

  • powersuite-modular-admin-toolkit/trunk/readme.txt

    r3735491 r3735510  
    1313== Description ==
    1414
    15 PowerSuite Modular Admin Toolkit brings everyday WordPress tasks into one searchable dashboard. Customize your admin area, manage content and media, improve login workflows, and configure email delivery. Enable only the tools your site needs.
    16 
    17 **155 modules across Free and Pro: 90 free modules in this download, plus 65 additional modules in the separate, paid WP PowerSuite Pro add-on.**
    18 
    19 Start with the 90 free modules. No PowerSuite account, license key, or trial period is required. Add Pro when you need tools such as forms, backups, advanced login protection, custom fields, and client branding. Pro's module code is supplied by the separate add-on, not bundled as locked features in this free plugin.
    20 
    21 = Included free: 90 everyday tools =
    22 
    23 * **A cleaner dashboard:** add an admin logo, adjust dashboard columns, hide unwanted widgets, and simplify the admin bar.
    24 * **Faster content tasks:** duplicate posts and menus, change post types, publish missed scheduled posts, and set content expiration.
    25 * **Media essentials:** sanitize SVG uploads, regenerate thumbnails, set default featured images, and control upload sizes.
    26 * **Login and user tools:** configure Google Sign-In, block selected usernames, use generic login errors, and show last-login and registration dates.
    27 * **Site and content navigation:** edit robots.txt and ads.txt, set a fallback redirect for 404 pages, and add breadcrumbs, a table of contents, reading time, or post-view counts.
    28 * **WordPress behavior controls:** disable emojis, front-end Dashicons, comments, or XML-RPC when your site does not need them.
    29 * **Email delivery:** connect SMTP or a supported email provider, send test emails, and configure fallback delivery and failure alerts.
    30 
    31 = One place to manage your tools =
    32 
    33 Find modules by name or category, filter Free and Pro, and save favorites for quick access. Use the Quick Launcher to find tools from other admin screens. Save presets or import and export settings for repeatable setup; keep exported files private.
    34 
    35 Disabled modules do not run their feature logic, though the shared dashboard and core still load as needed. You choose which modules to enable.
    36 
    37 = Add Pro: 65 more tools for growing sites =
    38 
    39 Need more than the essentials? **WP PowerSuite Pro adds 65 modules** to the same Control Center. Keep the free plugin active and install Pro alongside it.
    40 
    41 * **Build forms and capture inquiries:** create forms manually or with AI assistance, manage entries, and configure notifications and webhooks. Generate image alternative text with AI, too.
    42 * **Add login protection and support access:** use two-factor authentication, failed-login limits, a custom login URL, session management, and temporary login links.
    43 * **Build more flexible websites:** create custom post types, taxonomies, custom fields, and options pages; reorder content; and generate pages from CSV templates.
    44 * **Take control of your media:** organize the Media Library into folders, replace attachments, rename files, add image sizes, and choose WebP or AVIF conversion on supported servers.
    45 * **Maintain and troubleshoot your site:** create and restore local backups, clean selected database data, check broken links, review activity and email logs, and manage advanced redirects.
    46 * **Customize client projects:** manage code snippets, header and footer code, custom admin CSS, menus, and list-table columns. Brand login pages and use white-label names, branding, and support links.
    47 
    48 **Ready for the additional tools? [Explore WP Powersuite Premium](https://wppowersuite.com) for Pro features and pricing.** The free plugin remains usable on its own.
    49 
    50 AI generation requires a supported provider connection; provider charges and data policies are separate from Pro. Manual form building does not require an AI provider. See the Pro readme for its service disclosures.
    51 
    52 = Get started =
    53 
    54 Install the free plugin, open **PowerSuite > Modules**, and enable your first tool. Each module with configuration options has its own settings. Start with a few tools and test the changes before adding more.
    55 
    56 Use staging for sensitive changes and avoid overlapping features in other plugins. Keep independent backups; this toolkit does not replace a complete security solution. Optional external integrations may require provider accounts and paid plans. Their data use is explained below.
    57 
    58 == Privacy ==
    59 
    60 The free plugin makes no licensing requests. Enabled integrations, displayed avatars/logos, selected image imports, and explicitly submitted feedback can contact services as detailed below. Disabled modules do not contact these services. Alpine.js is bundled, not CDN-hosted.
    61 
    62 == External services ==
    63 
    64 = Email Delivery =
    65 
    66 Email Delivery uses configured PHP mail, SMTP, or an email provider. WordPress mail and Test email send subject, body, sender, recipients, reply-to, attachments, and authentication information through that connection.
    67 
    68 Test connection uses configured credentials. SMTP connects/authenticates without sending mail. API checks request account, permission, domain, or sender information. Emailit and Bird request a recent message record; SendLayer requests a recent delivery-event record. Responses can expose existing account mail information. Netcore and turboSMTP POST synthetic send requests with intentionally invalid sender/recipient addresses and subject/body `connection-test` to check authentication, without customer messages or attachments. Maileroo only checks locally for a sending key; Test email verifies delivery.
    69 
    70 For provider SMTP delivery, an empty host uses the default relay below; an entered host overrides it. The relay receives mail content and SMTP credentials. API User-Agent headers include plugin name/version. Servers receive connection information, including your server's IP.
    71 
    72 Connecting Gmail/Microsoft sends authorization code, application credentials, and callback URL to the provider's token endpoint; later sends may refresh tokens there. Configured SES event webhooks fetch SNS signing certificates and verified subscription-confirmation URLs containing subscription tokens. Sender-domain health checks query your DNS resolver for domain records.
    73 
    74 Delivery webhooks authenticate using provider signatures or configured secrets. Mailgun requires its HTTP Webhook Signing Key and HTTPS.
     15**155 modules. 90 free. 65 more with Pro.**
     16
     17PowerSuite Modular Admin Toolkit brings admin, content, media, login, and email tools into one searchable dashboard. Enable only what you need; save favorites and configurations for repeatable setup.
     18
     19= 🚀 Start Free, Add Pro When Needed =
     20
     21Your **90 free modules** need no PowerSuite account, license, or trial. The **65 paid modules** require the separate Pro add-on; their code is not bundled here.
     22
     23[Explore WP Powersuite Premium](https://wppowersuite.com) for forms, backups, advanced login protection, custom fields, media tools, and client branding. Keep this free plugin active alongside Pro.
     24
     25= ✅ All 90 Free Modules =
     26
     27* **404 Redirect:** Fallback redirects for unknown URLs.
     28* **Admin Logo:** Brand admin bar/sidebar.
     29* **Ads.txt Manager:** Manage advertising inventory files.
     30* **Alpine.js Enqueue:** Load Alpine.js where needed.
     31* **Analytics Integration:** Consent-aware GA4 pageview tracking.
     32* **Auto Image Upload Rename:** Clean uploaded image filenames.
     33* **Auto Set Featured Image:** Choose first content image.
     34* **Auto Table of Contents:** Build heading-based contents lists.
     35* **AVIF Upload:** Upload server-supported AVIF images.
     36* **Block Usernames:** Restrict registration usernames.
     37* **Block Video Uploads:** Restrict videos by role.
     38* **Breadcrumbs:** Display breadcrumb navigation.
     39* **Change Post Type:** Convert content between types.
     40* **Clean User Profile Screen:** Simplify user profile screens.
     41* **Compact Tables:** Compact admin list tables.
     42* **Content Expiration:** Schedule content unpublishing.
     43* **Content Report Widget:** Dashboard content/user counts.
     44* **Custom Admin Footer Text:** Customize dashboard footer text.
     45* **Custom Body Class:** Add custom CSS classes.
     46* **Custom Excerpt Length:** Customize excerpt length/text.
     47* **Custom Login Logo:** Brand the login screen.
     48* **Custom Login Logo Link:** Customize login-logo destination.
     49* **Customizer Reset:** Back up/reset/import/export settings.
     50* **Dashboard Columns:** Arrange dashboard widget columns.
     51* **Default Featured Image:** Provide fallback post thumbnails.
     52* **Disable Application Passwords:** Block application-password authentication; affects integrations.
     53* **Disable Author Archives:** Disable public author archives.
     54* **Disable Auto-Update Emails:** Suppress update notification emails.
     55* **Disable Comments:** Disable site-wide comments.
     56* **Disable Core Sitemap:** Disable WordPress's generated sitemap.
     57* **Disable Dashboard Widgets:** Remove selected dashboard widgets.
     58* **Disable Dashicons on Frontend:** Remove guest Dashicons; check compatibility.
     59* **Disable Drag and Drop:** Discourage dragging, not secure protection.
     60* **Disable File Editing:** Disable browser-based code editors.
     61* **Disable Gutenberg:** Select classic editing by type.
     62* **Disable Heartbeat:** Reduce background Heartbeat requests.
     63* **Disable Keyboard Keys:** Discourage shortcuts, not secure protection.
     64* **Disable oEmbed Auto-Embeds:** Disable automatic link embedding.
     65* **Disable Password Reset:** Restrict resets; arrange alternative recovery.
     66* **Disable Post Auto-Save:** Disable autosaves; save manually.
     67* **Disable REST API:** Restrict anonymous core REST endpoints.
     68* **Disable Right Click:** Discourage right-click, not secure protection.
     69* **Disable RSS Feeds:** Disable public RSS feeds.
     70* **Disable Site Search:** Disable general searches; retain type-scoped searches.
     71* **Disable Text Selection:** Discourage selection, not secure protection.
     72* **Disable Thumbnail Generation:** Skip selected new thumbnail sizes.
     73* **Disable Trackbacks/Pingbacks:** Disable trackbacks and pingbacks.
     74* **Disable WordPress Emojis:** Use device-native emoji rendering.
     75* **Disable XML-RPC:** Disable legacy XML-RPC access.
     76* **Display Active Plugins First:** Group active plugins first.
     77* **Download Plugin as ZIP:** Export installed plugin ZIPs.
     78* **Download Theme as ZIP:** Export installed theme ZIPs.
     79* **Duplicate Menu:** Copy menus and items.
     80* **Duplicate Post Type:** Duplicate posts/pages/custom content.
     81* **Email Delivery:** Route email through SMTP/providers.
     82* **Email Obfuscator:** Encode visible email addresses.
     83* **External Permalinks:** Link entries to external destinations.
     84* **Featured Image Column:** Preview thumbnails in content tables.
     85* **Footer Timezone Display:** Show site time/timezone.
     86* **Force SSL Admin:** Require working HTTPS for admin.
     87* **Generic Login Errors:** Standardize failed-login messages.
     88* **Google Sign-in:** Google login; optional registration.
     89* **Hide Admin Bar:** Hide toolbar by role.
     90* **Hide Author URLs:** Obfuscate public author slugs.
     91* **Hide Update Notifications:** Hide notices; still apply updates.
     92* **Hide WP Version:** Remove public version disclosures.
     93* **Image Sizes Panel:** Inspect image sizes/URLs.
     94* **Last Login Column:** Display users' last logins.
     95* **Limit Media Upload Size:** Cap media upload size.
     96* **Local User Avatar:** Use local profile photos.
     97* **Media Library Infinite Scroll:** Scroll-load media; respects user preference.
     98* **Open All External Links in New Tab:** Open external links separately.
     99* **Open Menu Links in New Tab:** Open selected menu links separately.
     100* **Post Views Counter:** Count/display content views.
     101* **Publish Missed Scheduled Posts:** Publish overdue scheduled content.
     102* **Reading Time Calculator:** Estimate article reading time.
     103* **Regenerate Thumbnails:** Rebuild attachment image sizes.
     104* **Registration Date Column:** Show/sort account registration dates.
     105* **Remove Admin Bar Items:** Hide selected toolbar items.
     106* **Remove Query Strings:** Remove local asset version parameters.
     107* **Remove Shortlink:** Remove shortlink markup.
     108* **Remove Unused Themes and Plugins:** Delete inactive themes/plugins.
     109* **Remove Version from Scripts:** Hide core asset version markers.
     110* **Robots.txt Manager:** Manage virtual robots.txt directives.
     111* **Search Visibility Warning:** Flag discouraged search indexing.
     112* **Storage Monitor:** Display dashboard disk usage.
     113* **SVG Upload:** Administrator-only sanitized SVG/SVGZ uploads.
     114* **User Role Body Class:** Add role-based CSS classes.
     115* **Username Body Class:** Expose current username/ID in body classes.
     116* **Wider Admin Menu:** Widen the dashboard sidebar.
     117
     118= ⭐ All 65 Pro Add-On Modules =
     119
     120Available separately through WP PowerSuite Pro:
     121
     122* **404 Error Log:** Record missing-page requests/referrers.
     123* **Accessibility Widget:** Visitor adjustments; not WCAG certification.
     124* **Activity Log:** Record dashboard/user activity.
     125* **Admin Color Customizer:** Customize dashboard color schemes.
     126* **Admin Columns Customizer:** Configure admin table columns.
     127* **Admin Login Alerts:** Email administrator login alerts.
     128* **Admin Menu Organizer:** Reorder/rename/hide admin menus.
     129* **AI Alt Text Generator:** Generate reviewable AI image descriptions.
     130* **AI Forms:** Manual/AI-assisted forms and entries.
     131* **AI Summarize:** Open external AI summary prompts.
     132* **Alphabet Avatars:** Create letter-based profile images.
     133* **AVIF Conversion:** Generate AVIF image copies.
     134* **Backup & Restore:** Back up/restore local files/database.
     135* **Broken Link Checker:** Scan content for broken links.
     136* **Bulk Page Creator:** Generate pages from CSV.
     137* **Categorize Media:** Organize media into folders.
     138* **Change Login URL:** Customize the login address.
     139* **Cloudflare Turnstile:** Cloudflare form bot checks.
     140* **Code Snippet:** Manage code snippets with conditions.
     141* **Coming Soon & Maintenance:** Show temporary landing pages.
     142* **Custom Admin CSS:** Style dashboard with CSS.
     143* **Custom Fields:** Create post/term custom fields.
     144* **Custom Image Sizes:** Register additional image dimensions.
     145* **Custom Post Order:** Reorder content in supported queries.
     146* **Custom Post Type Builder:** Build post types/taxonomies.
     147* **Custom Taxonomy Order:** Reorder supported taxonomy displays.
     148* **Customize WordPress Emails:** Brand core email notifications.
     149* **Database Cleanup:** Review/delete selected database clutter.
     150* **Debug Mode Toggle:** Control debugging and logging.
     151* **Disable All Updates:** Pause updates; patch manually.
     152* **Download Media Library:** Export media ZIP archives.
     153* **Email Logs:** Review delivery records/resend.
     154* **Email Reports:** Schedule activity/delivery summaries.
     155* **Facebook Sign In:** Configure Facebook account login.
     156* **Floating Social Share:** Add social sharing links.
     157* **GitHub Sign-in:** Configure GitHub account login.
     158* **Google reCAPTCHA:** Google form bot checks.
     159* **Gutenberg Block Control:** Restrict available editor blocks.
     160* **Header & Footer Code:** Insert site-wide code snippets.
     161* **Hide Admin Notices:** Collect notices in toolbar.
     162* **IP Allow & Block List:** Restrict site access by IP.
     163* **Limit Login Attempts:** Lock out repeated login failures.
     164* **Login as User:** Authorized user-session switching.
     165* **Login ID Type:** Choose username/email login.
     166* **Login Page Customizer:** Style the login page.
     167* **Login Session Manager:** Manage active login sessions.
     168* **Magic Login:** Passwordless links/one-time codes.
     169* **Media Rename Manager:** Rename files/update supported references.
     170* **Media Replacement:** Replace existing attachment files.
     171* **Options Page Builder:** Build custom settings screens.
     172* **Password Protection:** Password-protect the whole site.
     173* **Redirect After Login:** Set post-login destinations.
     174* **Redirect Manager:** Manage redirects and patterns.
     175* **Security Headers:** Configure browser security headers.
     176* **Share Draft Preview Links:** Share expiring draft previews.
     177* **Show IDs:** Show content/user IDs.
     178* **Simple CAPTCHA:** Local form CAPTCHA challenges.
     179* **System Summary:** Inspect environment/site health.
     180* **Temporary Login:** Issue expiring access links.
     181* **Two-Factor Authentication (2FA):** Require additional login verification.
     182* **Unused Media Finder:** Review potentially unused media.
     183* **URL Shortener:** Create on-site short links.
     184* **Username Changer:** Change validated account usernames.
     185* **WebP Conversion:** Convert uploads to WebP.
     186* **WP Config Editor:** Edit configuration with backups.
     187
     188= 💡 Before You Enable Modules =
     189
     190Test sensitive changes on staging and keep independent backups. Avoid overlapping features; use either WebP or AVIF Conversion. Disabled modules skip feature logic, but shared core still loads. AI generation requires your provider account; charges are separate. Manual form building needs no AI provider.
     191
     192= 🔎 Privacy, External Services & Licenses =
     193
     194Free modules make no licensing requests. Configured integrations, remote images/imports, and submitted feedback contact the recipients below. Disabled modules do not contact these services. Alpine.js is bundled.
     195
     196**Email Delivery**
     197
     198Configured PHP mail/SMTP/providers receive message content, sender/recipients, reply-to, attachments, and credentials for mail and Test email. Test connection authenticates SMTP without sending; API checks request account/domain/sender/permission data. Emailit/Bird retrieve recent messages; SendLayer retrieves delivery events, potentially exposing account mail information. Netcore/turboSMTP POST synthetic `connection-test` requests with invalid sender/recipient addresses, without customer content. Maileroo checks its key locally; use Test email for delivery verification.
     199
     200Entered SMTP hosts override defaults below. Relays receive mail/credentials; API User-Agent includes plugin/version. Servers receive your IP/HTTP information. Gmail/Microsoft authorization exchanges code, credentials, callback URL, and later refresh tokens. SES webhooks fetch SNS certificates/subscription-confirmation URLs with tokens. Domain checks query DNS. Delivery webhooks verify signatures/secrets; Mailgun requires its HTTP Webhook Signing Key and HTTPS.
    75201
    76202* Other SMTP host you enter: the email content goes to that host. Use that host's own Terms and Privacy Policy.
    … …  
    97223* Mail.baby (InterServer): API `https://api.mailbaby.net`; SMTP `relay.mailbaby.net`. [Terms](https://www.interserver.net/terms-of-service.html) and [Privacy](https://www.interserver.net/privacy-policy.html).
    98224
    99 = Email failure alerts: Slack and Discord =
    100 
    101 Enabled failure alerts send site name, provider name, and redacted error to your configured chat webhook after final delivery failure, at most once per 15 minutes. Errors may retain message-specific information; chat alerts exclude email bodies/attachments. Email alerts also use your selected mail connection and configured recipient, falling back to the admin email.
    102 
    103 Slack uses hooks.slack.com: [Terms](https://slack.com/main-services-agreement) and [Privacy](https://slack.com/trust/privacy/privacy-policy).
    104 
    105 Discord uses discord.com or discordapp.com: [Terms](https://discord.com/terms) and [Privacy](https://discord.com/privacy).
    106 
    107 A developer can explicitly allow another HTTPS webhook host. Review that recipient's Terms and Privacy Policy before configuring it.
    108 
    109 = Customizer image imports =
    110 
    111 Importing Customizer settings with image downloads requests URLs from the import and creates Media Library attachments. Each host receives the URL, server IP, and HTTP request information. Hosts are arbitrary; review their Terms and Privacy Policy before importing.
    112 
    113 = Admin Logo images from configured hosts =
    114 
    115 Admin Logo displays configured admin-bar/menu image URLs. External hosts receive direct browser requests on settings previews and pages displaying the logo, including front-end admin bars: image URL, viewer IP, browser information, and policy-permitted referrer. Images are not copied into the Media Library. Hosts are arbitrary; review their Terms and Privacy Policy before configuring them.
    116 
    117 = Gravatar avatar images =
    118 
    119 Automattic's Gravatar supplies default WordPress avatars. Enabled Local User Avatar prepares a profile-editor fallback; Remove Admin Bar Items requests avatars when replacing the account greeting. Unless another avatar filter overrides them, browsers request `https://secure.gravatar.com/avatar/`, sending the profile email's hash, size/default/rating options, and initials if selected. Gravatar receives viewer IP, browser information, and policy-permitted referrer. The profile-editor fallback can render even with Show Avatars off, a local upload, or a hidden preview. [Terms](https://wordpress.com/tos/) and [Privacy](https://automattic.com/privacy/).
    120 
    121 = Optional deactivation feedback =
    122 
    123 "Submit & Deactivate" stores feedback and a diagnostic snapshot locally (up to 50 records), including site/admin details, plugins/theme, enabled modules, browser/environment, and recent errors.
    124 
    125 It sends WP PowerSuite your reason/comments, site URL/hash, administrator/submitting-user emails, plugin/WordPress/PHP/database versions, theme, installed/active plugins, enabled modules, license status (not key), browser/OS, language, user role, hosting/server, memory, cache/CDN, HTTPS, and cron information at `https://wppowersuite.com/wp-json/licensor/deactivation-feedback` to investigate issues and improve the plugin. Automatic diagnostics exclude raw errors, log excerpts, local user IDs, passwords, API keys, and license keys. The recipient receives server IP and normal HTTP information. [Terms](https://wppowersuite.com/terms-of-service/) and [Privacy](https://wppowersuite.com/privacy-policy/).
    126 
    127 Sharing is optional. "Skip & Deactivate" collects/sends nothing; opening/closing the dialog sends nothing. Developers can override/disable the recipient via constants/filters and must disclose replacement recipients and their Terms/Privacy before collecting feedback.
    128 
    129 The separate "You may contact me by email about this feedback" checkbox defaults checked. Submissions include this yes/no preference; uncheck to decline follow-up. It neither sends email nor subscribes you to marketing. Skip sends no contact permission.
    130 
    131 = Google Sign-In =
    132 
    133 Enabled Google Sign-In requires your OAuth Client ID/Secret. Clicking sign-in opens `https://accounts.google.com`; after approval, your site sends authorization code, client ID/secret, and callback URL to `https://oauth2.googleapis.com/token`, then uses the access token at `https://openidconnect.googleapis.com/v1/userinfo` for email, display name, and profile-image URL to sign in/create a local account.
    134 
    135 Social sign-in and its CAPTCHA gate use separate first-party HttpOnly browser-binding cookies, expiring after ten minutes and cleared on matching verification. They are not sent to providers or used for tracking. Use HTTPS in production.
    136 
    137 Google avatar URL storage defaults enabled. While sign-in is enabled/configured, later avatar views can load saved images directly from their host, including for viewers not signing in; local uploads can override them. Hosts receive image URL, viewer IP, browser information, and policy-permitted referrer. Images are not copied into the Media Library. Disabling new URL storage does not remove saved URLs.
    138 
    139 This service is provided by Google: [Terms](https://policies.google.com/terms) and [Privacy](https://policies.google.com/privacy).
    140 
    141 = Facebook and GitHub Sign-In =
    142 
    143 This plugin ships a shared OAuth HTTP helper that can request access tokens and user profiles from Facebook Graph and GitHub. Google Sign-In in this free plugin uses that helper. Facebook and GitHub sign-in modules ship in the separate Pro add-on; the helper that performs the token and profile requests is part of this plugin.
    144 
    145 Requests require the matching module installed, enabled, and configured with your OAuth application. Choosing sign-in opens provider authorization with application ID, callback URL, permissions, and security state. After approval, your site exchanges authorization code/application credentials for an access token, then retrieves account ID, name, permitted email, and profile image to sign in/create a WordPress account. No WordPress password is sent. GitHub may request `GET /user/emails` with that token and `user:email` permission; see [API documentation](https://docs.github.com/en/rest/users/emails#list-email-addresses-for-the-authenticated-user).
    146 
    147 Facebook uses `https://www.facebook.com` for authorization and `https://graph.facebook.com` for token and profile requests: [Terms](https://www.facebook.com/legal/terms) and [Privacy](https://www.facebook.com/privacy/policy/).
    148 
    149 GitHub uses `https://github.com` for authorization and tokens, and `https://api.github.com` for profile and email requests: [Terms](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service) and [Privacy](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement).
    150 
    151 = Google Analytics 4 =
    152 
    153 Enabled Analytics Integration requires a GA4 Measurement ID. Default Consent Mode waits for a CMP's analytics-storage consent or the `wppsmodule_allow_analytics` filter (default false) before requesting scripts/sending pageviews. Disabling Consent Mode allows immediate tracking unless that filter blocks it.
    154 
    155 On each included front-end page view, the visitor's browser requests `https://www.googletagmanager.com/gtag/js` and then sends the Measurement ID, page URL, and standard GA4 event data to Google Analytics (`https://www.google-analytics.com` / `https://analytics.google.com`).
    156 
    157 This service is provided by Google: [Terms](https://policies.google.com/terms) and [Privacy](https://policies.google.com/privacy).
    158 
    159 = Google reCAPTCHA =
    160 
    161 This integration requires the separate Pro add-on. The free plugin's admin script still contains the Test connection loader. Enabled reCAPTCHA loads `https://www.google.com/recaptcha/api.js` and related `https://www.gstatic.com` assets when you click Test connection. Protected front-end forms exchange browser tokens with Google; your site posts the token and secret key to `https://www.google.com/recaptcha/api/siteverify` for anti-spam verification.
    162 
    163 This service is provided by Google: [Terms](https://policies.google.com/terms) and [Privacy](https://policies.google.com/privacy).
    164 
    165 = Cloudflare Turnstile =
    166 
    167 This integration requires the separate Pro add-on. The free plugin's admin script still contains the Test connection loader. Enabled Turnstile loads `https://challenges.cloudflare.com/turnstile/v0/api.js` when you click Test connection. Protected front-end forms exchange browser tokens with Cloudflare; your site posts the token and secret key to `https://challenges.cloudflare.com/turnstile/v0/siteverify` for anti-spam verification.
    168 
    169 This service is provided by Cloudflare: [Terms](https://www.cloudflare.com/website-terms/) and [Privacy](https://www.cloudflare.com/privacypolicy/).
    170 
    171 == Bundled libraries and source code ==
    172 
    173 Alpine.js 3.17.2 is bundled as minified production JavaScript from the official npm package. Source code, license, and build instructions are available at https://github.com/alpinejs/alpine.
    174 
    175 SVG Upload includes svg-sanitize 1.0.0 (GPLv2 or later), with a prefixed PHP namespace to avoid plugin conflicts. Its source and license are available at https://github.com/darylldoyle/svg-sanitizer and in modules/svg-upload/includes/svg-sanitize. Sanitization runs locally. External resources, unsafe CSS and active content are removed; SVG files with ambiguous IDs, excessive complexity or invalid reference graphs are rejected.
     225**Email failure alerts**
     226
     227After final failure, optional chat alerts send site/provider names and redacted errors, at most every 15 minutes. Errors may retain message-specific information, but exclude bodies/attachments. Email alerts use configured recipients/connection, falling back to admin email. Slack: hooks.slack.com ([Terms](https://slack.com/main-services-agreement), [Privacy](https://slack.com/trust/privacy/privacy-policy)). Discord: discord.com/discordapp.com ([Terms](https://discord.com/terms), [Privacy](https://discord.com/privacy)). Developers may allow other HTTPS hosts; review their policies.
     228
     229**Remote images and imports**
     230
     231Customizer image imports download supplied URLs into Media Library; hosts receive URL, server IP, and HTTP information. Admin Logo URLs load directly in previews/admin bars, including front-end bars; no local copy. External image hosts receive URL, viewer IP/browser and policy-permitted referrer. Review arbitrary hosts' Terms/Privacy.
     232
     233Gravatar fallback: Local User Avatar profile previews and Remove Admin Bar Items account greetings may request `https://secure.gravatar.com/avatar/` unless overridden. Requests include profile-email hash, size/default/rating and selected initials; hosts receive viewer IP/browser/referrer. Fallback previews can load despite disabled avatars, local uploads, or hidden previews. [Terms](https://wordpress.com/tos/), [Privacy](https://automattic.com/privacy/).
     234
     235**Optional deactivation feedback**
     236
     237"Submit & Deactivate" stores up to 50 local snapshots: reason/comments, site/admin details, plugins/theme, modules, environment/browser, and recent errors.
     238
     239It sends reason/comments, site URL/hash, admin/submitting-user emails, plugin/WordPress/PHP/database versions, theme, installed/active plugins, modules, license status (not key), browser/OS, language/role, hosting/server, memory/cache/CDN, HTTPS/cron details to `https://wppowersuite.com/wp-json/licensor/deactivation-feedback` for troubleshooting/improvements. Automatic diagnostics exclude raw errors/logs, local user IDs, passwords, API/license keys; recipient receives server IP/HTTP information. [Terms](https://wppowersuite.com/terms-of-service/), [Privacy](https://wppowersuite.com/privacy-policy/).
     240
     241"Skip & Deactivate" collects/sends nothing; opening/closing sends nothing. Contact-permission checkbox defaults checked; its yes/no value permits follow-up, not marketing subscription or immediate email. Uncheck to decline; Skip sends no permission. Developers overriding/disabling recipients through constants/filters must disclose replacements and policies before collection.
     242
     243**Social sign-in**
     244
     245Google Sign-In requires OAuth credentials. Clicking sign-in authorizes at `https://accounts.google.com`; approval exchanges code, client ID/secret and callback URL at `https://oauth2.googleapis.com/token`, then retrieves email/name/avatar using the access token at `https://openidconnect.googleapis.com/v1/userinfo` to sign in/create accounts.
     246
     247Sign-in/CAPTCHA browser-binding cookies are first-party HttpOnly, expire after ten minutes, clear on matching verification, and are neither shared with providers nor tracking cookies. Use HTTPS.
     248
     249Google avatar URL storage defaults enabled. Saved external images load during later avatar views while sign-in is enabled/configured, including non-signing-in viewers. Local uploads can override; images aren't copied locally. Disabling storage doesn't remove saved URLs. Hosts receive image URL, IP/browser/referrer. Google: [Terms](https://policies.google.com/terms), [Privacy](https://policies.google.com/privacy).
     250
     251Facebook/GitHub modules require Pro; the shared OAuth HTTP helper ships free. Installed/enabled/configured modules authorize with application ID, callback, permissions/state; approval exchanges authorization code/credentials for tokens, then account ID/name/permitted email/avatar for login/registration. No WordPress passwords are sent. GitHub's authenticated `GET /user/emails` uses `user:email`: [API documentation](https://docs.github.com/en/rest/users/emails#list-email-addresses-for-the-authenticated-user).
     252
     253Facebook: `https://www.facebook.com`, `https://graph.facebook.com` ([Terms](https://www.facebook.com/legal/terms), [Privacy](https://www.facebook.com/privacy/policy/)). GitHub: `https://github.com`, `https://api.github.com` ([Terms](https://docs.github.com/en/site-policy/github-terms/github-terms-of-service), [Privacy](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement)).
     254
     255**Analytics and bot checks**
     256
     257Configured GA4 waits for CMP analytics consent or `wppsmodule_allow_analytics` (default false). Disabling Consent Mode allows immediate tracking unless blocked by that filter. Included pageviews request `https://www.googletagmanager.com/gtag/js`, then send Measurement ID, URL and standard events to `https://www.google-analytics.com` / `https://analytics.google.com`. Google Terms/Privacy above apply.
     258
     259reCAPTCHA/Turnstile require Pro; their Test connection loaders remain in the free admin script. Enabled connection tests load provider scripts; protected forms obtain browser tokens and send tokens/secrets server-side for verification.
     260
     261reCAPTCHA: `https://www.google.com/recaptcha/api.js`, `https://www.gstatic.com`, `https://www.google.com/recaptcha/api/siteverify`. Google Terms/Privacy above apply.
     262
     263Turnstile: `https://challenges.cloudflare.com/turnstile/v0/api.js`, `https://challenges.cloudflare.com/turnstile/v0/siteverify`. [Terms](https://www.cloudflare.com/website-terms/), [Privacy](https://www.cloudflare.com/privacypolicy/).
     264
     265**Bundled libraries**
     266
     267Alpine.js 3.17.2: minified official npm distribution; [source/license/build instructions](https://github.com/alpinejs/alpine).
     268
     269SVG Upload: prefixed svg-sanitize 1.0.0, GPLv2+; [source/license](https://github.com/darylldoyle/svg-sanitizer), also in `modules/svg-upload/includes/svg-sanitize`. Local sanitization removes external resources, unsafe CSS/active content; ambiguous IDs, excessive complexity and invalid reference graphs are rejected.
    176270
    177271== Installation ==
    … …  
    212306= Does PowerSuite send data off my site? =
    213307
    214 Configured integrations, remote images, selected imports, and feedback you submit can contact external services. The free plugin makes no licensing requests. See Privacy and External services for the data involved and provider policies.
     308Configured integrations, remote images, selected imports, and feedback you submit can contact external services. The free plugin makes no licensing requests. See Privacy, External Services & Licenses at the bottom of the Description for details and provider policies.
    215309
    216310= Where can I get help? =
    217311
    218312Use the Support tab on this WordPress.org listing for the free plugin, or your Pro support channel for the paid add-on. Include the affected module and steps to reproduce the issue. Never post credentials, license keys, private exports, or customer data.
    219 
    220 = Which 90 modules are included free? =
    221 
    222 Every module below is included in this download. Enable only the tools your site needs; no PowerSuite license is required.
    223 
    224 * **404 Redirect:** Redirect unknown URLs to a chosen fallback destination.
    225 * **Admin Logo:** Add your logo to the admin bar or sidebar.
    226 * **Ads.txt Manager:** Manage ads.txt and app-ads.txt advertising inventory files.
    227 * **Alpine.js Enqueue:** Load Alpine.js on the front end, in admin, or both.
    228 * **Analytics Integration:** Connect Google Analytics 4 with consent-mode defaults and role exclusions.
    229 * **Auto Image Upload Rename:** Clean uploaded image filenames and add a unique identifier.
    230 * **Auto Set Featured Image:** Use the first content image when a featured image is missing.
    231 * **Auto Table of Contents:** Create a clickable contents list from article headings.
    232 * **AVIF Upload:** Allow AVIF uploads when your server supports the format.
    233 * **Block Usernames:** Block specified usernames during account registration.
    234 * **Block Video Uploads:** Restrict video uploads for selected user roles.
    235 * **Breadcrumbs:** Add breadcrumb navigation to content pages.
    236 * **Change Post Type:** Convert content between posts, pages, and other post types.
    237 * **Clean User Profile Screen:** Hide unnecessary fields from user profiles.
    238 * **Compact Tables:** Fit more items into admin content list tables.
    239 * **Content Expiration:** Automatically unpublish content after a chosen date.
    240 * **Content Report Widget:** See content and user counts on your dashboard.
    241 * **Custom Admin Footer Text:** Replace the text in the dashboard footer.
    242 * **Custom Body Class:** Add CSS classes site-wide or to individual content items.
    243 * **Custom Excerpt Length:** Set excerpt word counts and read-more text.
    244 * **Custom Login Logo:** Display your logo on the WordPress login page.
    245 * **Custom Login Logo Link:** Set the destination of the login-page logo link.
    246 * **Customizer Reset:** Back up, reset, export, or import theme Customizer settings.
    247 * **Dashboard Columns:** Choose the number of dashboard widget columns.
    248 * **Default Featured Image:** Set a fallback image for posts without a featured image.
    249 * **Disable Application Passwords:** Block application-password authentication. Integrations using these credentials will stop working while enabled.
    250 * **Disable Author Archives:** Turn off public author archive pages.
    251 * **Disable Auto-Update Emails:** Stop core, plugin, or theme update notification emails.
    252 * **Disable Comments:** Disable commenting across your site.
    253 * **Disable Core Sitemap:** Turn off WordPress's default sitemap when another tool handles it.
    254 * **Disable Dashboard Widgets:** Remove selected widgets from the dashboard and Screen Options.
    255 * **Disable Dashicons on Frontend:** Remove Dashicons styles for visitors; check themes and builders that use these icons.
    256 * **Disable Drag and Drop:** Discourage dragging page content for selected roles; not secure copy protection.
    257 * **Disable File Editing:** Remove WordPress's built-in theme and plugin file editors.
    258 * **Disable Gutenberg:** Use the classic editor for selected post types.
    259 * **Disable Heartbeat:** Reduce or disable WordPress Heartbeat requests in selected areas.
    260 * **Disable Keyboard Keys:** Discourage selected keyboard shortcuts for chosen roles; not secure copy protection.
    261 * **Disable oEmbed Auto-Embeds:** Stop automatic link embedding and related embed code.
    262 * **Disable Password Reset:** Disable public password-reset requests; arrange another recovery method before enabling.
    263 * **Disable Post Auto-Save:** Stop editor autosaves; content must be saved manually.
    264 * **Disable REST API:** Restrict anonymous core REST endpoints while leaving third-party routes and authenticated access untouched.
    265 * **Disable Right Click:** Discourage right-click actions for selected roles; not secure copy protection.
    266 * **Disable RSS Feeds:** Turn off public RSS feeds.
    267 * **Disable Site Search:** Disable general front-end and REST content searches while retaining post-type-scoped searches.
    268 * **Disable Text Selection:** Discourage text selection for selected roles; not secure copy protection.
    269 * **Disable Thumbnail Generation:** Skip all or selected image sizes on new uploads.
    270 * **Disable Trackbacks/Pingbacks:** Disable trackback and pingback functionality.
    271 * **Disable WordPress Emojis:** Remove WordPress emoji scripts and use device-native emoji rendering.
    272 * **Disable XML-RPC:** Disable XML-RPC; check any legacy publishing integrations first.
    273 * **Display Active Plugins First:** Group active plugins ahead of inactive plugins on the Plugins screen.
    274 * **Download Plugin as ZIP:** Download an installed plugin as a ZIP archive.
    275 * **Download Theme as ZIP:** Download an installed theme as a ZIP archive.
    276 * **Duplicate Menu:** Copy a navigation menu and its items.
    277 * **Duplicate Post Type:** Duplicate posts, pages, and custom post type entries.
    278 * **Email Delivery:** Route WordPress email through SMTP or supported providers, with multiple connections and fallback delivery.
    279 * **Email Obfuscator:** Encode visible email addresses and mailto links to discourage basic scraping.
    280 * **External Permalinks:** Link content entries to external destinations.
    281 * **Featured Image Column:** Show featured-image thumbnails in supported content list tables.
    282 * **Footer Timezone Display:** Display the site's current time and timezone in the admin footer.
    283 * **Force SSL Admin:** Require HTTPS for login and dashboard access; your site needs working HTTPS.
    284 * **Generic Login Errors:** Use a consistent error message for failed logins.
    285 * **Google Sign-in:** Add Google login with optional new-user registration; requires Google application credentials.
    286 * **Hide Admin Bar:** Hide the front-end toolbar for selected roles.
    287 * **Hide Author URLs:** Use obfuscated author slugs while keeping author archives accessible.
    288 * **Hide Update Notifications:** Hide update notices without replacing your responsibility to apply updates.
    289 * **Hide WP Version:** Remove version information from generator output and the admin footer.
    290 * **Image Sizes Panel:** View available image sizes and copy their URLs.
    291 * **Last Login Column:** Show each user's last login time in the Users table.
    292 * **Limit Media Upload Size:** Set a maximum permitted upload size.
    293 * **Local User Avatar:** Use uploaded profile photos instead of Gravatar.
    294 * **Media Library Infinite Scroll:** Load more media while scrolling, respecting each user's preference.
    295 * **Open All External Links in New Tab:** Open external content links in new tabs with appropriate rel attributes.
    296 * **Open Menu Links in New Tab:** Open selected custom navigation links in new tabs.
    297 * **Post Views Counter:** Count and display content views with repeat-visit handling.
    298 * **Publish Missed Scheduled Posts:** Check for overdue scheduled posts and publish them through periodic checks.
    299 * **Reading Time Calculator:** Display estimated reading time automatically or with a shortcode.
    300 * **Regenerate Thumbnails:** Rebuild image sizes for selected attachments or the media library.
    301 * **Registration Date Column:** Show and sort user registration dates in the Users table.
    302 * **Remove Admin Bar Items:** Hide unwanted WordPress toolbar items.
    303 * **Remove Query Strings:** Remove version query parameters from local front-end CSS and JavaScript URLs.
    304 * **Remove Shortlink:** Remove the default shortlink tag from page markup.
    305 * **Remove Unused Themes and Plugins:** Delete inactive themes and plugins; review selections before removal.
    306 * **Remove Version from Scripts:** Remove core WordPress version markers while keeping theme and plugin cache-busting versions.
    307 * **Robots.txt Manager:** Manage your site's virtual robots.txt and crawler directives.
    308 * **Search Visibility Warning:** Show a toolbar reminder when search-engine indexing is discouraged.
    309 * **Storage Monitor:** Display disk usage on the dashboard.
    310 * **SVG Upload:** Allow administrator-only SVG and SVGZ uploads with local sanitization.
    311 * **User Role Body Class:** Add role-based CSS classes for styling.
    312 * **Username Body Class:** Add the logged-in username and user ID as body classes; these appear in that user's page source.
    313 * **Wider Admin Menu:** Increase the width of the dashboard sidebar.
    314 
    315 = Which 65 modules are available in the separate Pro add-on? =
    316 
    317 These modules are not included in the WordPress.org download. Install the paid WP PowerSuite Pro add-on alongside this free plugin to add them to your Control Center. External providers may require separate accounts or charges.
    318 
    319 * **404 Error Log:** Record missing-page requests, referrers, and counts to help plan redirects.
    320 * **Accessibility Widget:** Offer visitor display and navigation adjustments; not a substitute for accessible design or a WCAG audit.
    321 * **Activity Log:** Record important user and dashboard activity for troubleshooting.
    322 * **Admin Color Customizer:** Customize dashboard colors with presets, role mapping, and previews.
    323 * **Admin Columns Customizer:** Customize columns in supported content, media, comment, user, and taxonomy tables.
    324 * **Admin Login Alerts:** Send an email when an administrator logs in.
    325 * **Admin Menu Organizer:** Reorder, rename, or hide dashboard menu items.
    326 * **AI Alt Text Generator:** Generate suggested image alt text using your configured AI provider, with review and background processing.
    327 * **AI Forms:** Build forms manually or with AI assistance, including entries, notifications, uploads, and spam protection.
    328 * **AI Summarize:** Offer links that open AI services with a page-summary prompt; no on-site AI API call is required.
    329 * **Alphabet Avatars:** Create letter-based profile images with custom colors.
    330 * **AVIF Conversion:** Generate AVIF copies of JPEG and PNG uploads; use instead of WebP Conversion, not alongside it.
    331 * **Backup & Restore:** Create and restore local database and file backups, with history and logs.
    332 * **Broken Link Checker:** Scan published content for broken links in batches and export results.
    333 * **Bulk Page Creator:** Create multiple pages from CSV data and a template.
    334 * **Categorize Media:** Organize media with a folder-style tree and drag-and-drop assignment.
    335 * **Change Login URL:** Choose a custom login address; retain a recovery route and bookmark the new URL.
    336 * **Cloudflare Turnstile:** Add Cloudflare bot checks to supported logins and forms; requires provider configuration.
    337 * **Code Snippet:** Manage HTML, CSS, JavaScript, and PHP snippets with conditions, revisions, and import/export.
    338 * **Coming Soon & Maintenance:** Show a temporary landing page while allowing selected users to access the site.
    339 * **Custom Admin CSS:** Apply custom CSS to the WordPress dashboard.
    340 * **Custom Fields:** Add fields to posts and taxonomy terms and display their values in supported layouts.
    341 * **Custom Image Sizes:** Register additional image dimensions for your site's layouts.
    342 * **Custom Post Order:** Reorder posts and apply the order in supported queries.
    343 * **Custom Post Type Builder:** Create and manage custom post types and taxonomies without editing code.
    344 * **Custom Taxonomy Order:** Reorder taxonomy terms for supported displays and queries.
    345 * **Customize WordPress Emails:** Customize core email templates, sender settings, and notification types.
    346 * **Database Cleanup:** Review and clean revisions, transients, and orphaned data; back up before deleting.
    347 * **Debug Mode Toggle:** Control WordPress debugging and logging from the dashboard.
    348 * **Disable All Updates:** Pause selected automatic updates; maintain a manual security-update schedule.
    349 * **Download Media Library:** Export media in ZIP archives, with date and supported folder filtering.
    350 * **Email Logs:** Review sent-email records, delivery status, retention settings, and resend options.
    351 * **Email Reports:** Receive scheduled summaries of supported activity and delivery statistics.
    352 * **Facebook Sign In:** Add Facebook login using your configured Meta application.
    353 * **Floating Social Share:** Add floating, inline, or shortcode-based sharing links without embedded tracking widgets.
    354 * **GitHub Sign-in:** Add GitHub login with optional registration using your configured GitHub application.
    355 * **Google reCAPTCHA:** Add Google anti-bot checks to supported forms and login screens.
    356 * **Gutenberg Block Control:** Limit which blocks are available in the editor.
    357 * **Header & Footer Code:** Insert site-wide header, body, and footer code snippets.
    358 * **Hide Admin Notices:** Collect admin notices into a toolbar panel instead of displaying them throughout the dashboard.
    359 * **IP Allow & Block List:** Allow or block site access by IP address, including login and admin access.
    360 * **Limit Login Attempts:** Apply temporary lockouts after repeated failed sign-ins.
    361 * **Login as User:** Switch into another user's session for authorized support, with a return-to-admin option.
    362 * **Login ID Type:** Choose whether users sign in with a username, email address, or either.
    363 * **Login Page Customizer:** Customize login-page colors, background, and layout.
    364 * **Login Session Manager:** Review active sessions, force logouts, and configure role-based session limits.
    365 * **Magic Login:** Offer passwordless login links and one-time codes with optional registration.
    366 * **Media Rename Manager:** Rename existing media and update supported references; check custom integrations after renaming.
    367 * **Media Replacement:** Replace an attachment's file while retaining its attachment ID and supported existing URLs.
    368 * **Options Page Builder:** Create custom settings pages with a range of field types.
    369 * **Password Protection:** Place the site behind a shared password for previews or staging.
    370 * **Redirect After Login:** Configure destinations users reach after signing in.
    371 * **Redirect Manager:** Manage exact, pattern, and regular-expression redirects with bulk tools and import/export.
    372 * **Security Headers:** Configure browser security headers, including optional HSTS and content policies; test compatibility first.
    373 * **Share Draft Preview Links:** Share expiring draft-preview URLs with people who do not have a login.
    374 * **Show IDs:** Display content and user IDs in supported list tables.
    375 * **Simple CAPTCHA:** Add locally processed math, prompt, or image challenges without an external CAPTCHA account.
    376 * **System Summary:** Review environment, update, storage, and site-health information on the dashboard.
    377 * **Temporary Login:** Create expiring login links for authorized support or temporary access.
    378 * **Two-Factor Authentication (2FA):** Require an additional verification step for selected user roles.
    379 * **Unused Media Finder:** Identify potentially unused media for review before deletion; keep backups and verify custom layouts.
    380 * **URL Shortener:** Create on-site short links with click counts, optional expiry, and password protection.
    381 * **Username Changer:** Change account usernames with validity and uniqueness checks.
    382 * **WebP Conversion:** Convert JPEG and PNG uploads to WebP; use instead of AVIF Conversion, not alongside it.
    383 * **WP Config Editor:** Edit supported wp-config.php settings with backup-before-save safeguards.
    384 
    385 See [WP Powersuite Premium](https://wppowersuite.com) for Pro features and pricing. Your free modules continue to work without purchasing Pro.
    386313
    387314== Screenshots ==
Note: See TracChangeset for help on using the changeset viewer.