WP Force Repair WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA #10 in Security

WP Force Repair is a specialized recovery and debugging tool designed to fix broken WordPress sites. It allows you to safely force re-install plugins/themes, repair core files, optimize your database, and inspect system health.

Features

• Force Install/Update: Re-install existing plugins/themes or install new ones, forcibly overwriting existing files to fix corruption.

• Core Manager:

  • Force Re-install Core: Safely replaces wp-admin and wp-includes while keeping wp-content and wp-config.php safe.
  • Deep Integrity Scan: Scans root directory AND subfolders (like wp-content, plugins) for suspicious files.
  • Smart Protection: Prevents accidental quarantine of essential WP folders (wp-content, uploads, etc.).
  • Quarantine System: Isolate suspicious files to wp-content/uploads/wfr-quarantine/, with auto-cleanup of empty folders.
  • File Viewer: Inspect suspicious files directly within the dashboard before deleting or quarantining.

• System Tools:

  • Flush Permalinks: Fixes 404 errors by resetting rewrite rules.
  • Regenerate .htaccess: Recreates your .htaccess file with a backup.
  • Regenerate Salt Keys: Refreshes security keys in wp-config.php and forces a logout for all users.
  • Comment Cleanup: Bulk delete Spam, Trash, or Pending comments.
  • Connection Tester: Debugs PHP loopback requests and cURL availability.
  • Reset Permissions: Recursively fixes file (644) and folder (755) permissions.

• Database Health (New):

  • Overview: View all database tables with size, row count, and overhead.
  • Plugin Detection: Identifies which plugin owns each table (with links to WP Repo).
  • Optimization: Optimize tables to reduce overhead and improve performance.
  • Cleanup: Delete tables left behind by old plugins.

• Plugin & Theme Manager:

  • Toggle Status: Activate or Deactivate plugins/themes directly from the list.
  • Force Update: Re-install any plugin/theme from the official repository.

• Backup Manager:

  • Dedicated Tab: Backup Manager has its own tab in the dashboard navigation.
  • Full File Backup: Download your entire WordPress root directory as a ZIP (smartly excludes backups and node_modules).
  • Database Dump: Export your full database (SQL) using fast mysqldump or robust PHP fallback mode.
  • Stored Backups List: View, download, or delete all backups currently stored on the server.
  • Secure Downloads: Backup files are protected from direct URL access; downloads are served securely via the plugin's REST API.
  • Post-Backup Actions: Choose to delete the backup from the server immediately or keep it for later retrieval.

• Native UI: A clean, familiar interface built with React that integrates seamlessly with the standard WordPress dashboard.

Security

WP Force Repair is an admin-only tool (manage_options capability required on every endpoint). Additional hardening includes:

• Atomic config writes — wp-config.php is updated via temp-file + rename() to prevent corruption under concurrent access.
• Credential-safe DB dumps — mysqldump uses a chmod 600 temp credentials file so the database password is never visible in the system process list.
• Path traversal protection — All file-path parameters (file viewer, quarantine, scan) are validated with realpath() boundary checks.
• SVG safety — SVG files are rendered as syntax-highlighted code, not as images, preventing embedded JS execution.
• Quarantine isolation — Quarantined files are renamed with a random suffix, chmod 600, and protected by .htaccess / web.config deny rules.
• Backup downloads — Backup files are served through an authenticated REST endpoint, never via direct URL.

Installation

1. Download the latest wp-force-repair.zip from our GitHub Releases Page.
2. Go to WordPress Dashboard -> Plugins -> Add New -> Upload Plugin.
3. Upload the zip file and click Install Now.
4. Activate the plugin.

Contributing

Documentation

• 📖 User Guide & FAQ: detailed instructions on how to use every feature.
• 👨‍💻 Developer Guide: for those who want to contribute code.

Roadmap

We have exciting plans for the future of WP Force Repair, including deeper Database repair tools.

👉 View the full ROADMAP.md

Credits

Author: Ajith R N
Website: ajithrn.com