EngineScript Site Exporter WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Current Version

Description

A WordPress plugin that exports your entire site, including files and the database, as a secure, downloadable EngineScript-compatible ZIP archive.

EngineScript Site Exporter provides WordPress administrators with a straightforward, secure way to export their entire website. With a single click, you can create a complete backup of your site's files and the database, perfect for site migrations, backups, or local development environments.

Key Features

• One-Click Export: Create a complete site backup with just one click
• EngineScript Archive Format: Creates the combined ZIP format accepted by EngineScript's current vhost-import.sh
• Database Export: Includes a gzip-compressed database dump in your export
• Automatic Cleanup: Exports are automatically deleted after 5 minutes to save disk space
• Secure Downloads: All exports use WordPress security tokens for protected access
• WP-CLI Integration: Requires WP-CLI for efficient database exports
• Export Management: Download or manually delete export files as needed
• EngineScript Import Compatibility: Produces the archive layout used by EngineScript's import tools

EngineScript Integration

This plugin does not detect or require an EngineScript server. It can run on standard WordPress installations, while the generated archive format is designed for the EngineScript LEMP server import workflow:

• Compatible Exports: Exports use the ZIP container expected by EngineScript's site import tools
• Streamlined Migrations: Export from any WordPress site and import directly to an EngineScript-powered server
• Format Optimization: The bundle layout matches EngineScript's manifest.txt plus compressed database/files archive format

The export format matches EngineScript's canonical combined site archive:

manifest.txt
database/<site>_db_<timestamp>.sql.gz
files/<site>_files_<timestamp>.tar.gz

The downloaded ZIP is named <site>_enginescript_site_export_<timestamp>.zip.

Installation

1. Download the plugin ZIP file
2. Log in to your WordPress admin panel
3. Go to Plugins → Add New
4. Click the "Upload Plugin" button at the top of the page
5. Choose the downloaded ZIP file and click "Install Now"
6. After installation, click "Activate Plugin"

Usage

Creating a Site Export

1. Navigate to Tools → Site Exporter in your WordPress admin
2. Click the "Export Site" button
3. Wait for the export process to complete
4. When finished, use the "Download Export File" button to save your backup

Managing Export Files

• Download: Click the "Download Export File" button next to any export
• Delete: Click "Delete Export File" to remove an export you no longer need
• Auto-Cleanup: Exports are automatically deleted after 5 minutes

Requirements

• WordPress 6.8 or higher
• PHP 8.2 or higher
• Write access to a private WordPress temporary directory. If your host's temp directory is inside the WordPress web root, configure WP_TEMP_DIR to a non-public writable path.
• WP-CLI installed at /usr/local/bin/wp or /usr/bin/wp for database exports. To use another trusted executable, define SSE_WP_CLI_PATH or filter sse_wp_cli_path; local paths must pass ownership and permission checks.

Security Features

EngineScript Site Exporter is built with security as a priority:

• Export Authentication: Only authorized administrators can create and download exports; multisite exports require a network-capable administrator
• Secure Downloads: All downloads are validated with WordPress nonces
• Request Validation: WordPress nonce validation for all admin actions
• Path Traversal Protection: Comprehensive file path validation
• Private Export Storage: Exports are staged in random private directories with 0700 directories and 0600 files
• Automatic Deletion: Exports are automatically cleaned up after 5 minutes
• Security Headers: Implements proper headers for download operations
• Secure File Handling: Uses WordPress Filesystem API for file operations

Frequently Asked Questions

How large of a site can I export?

The plugin is designed to work with most WordPress sites, but very large sites (multiple GB) may encounter timeout or memory limitations depending on your hosting environment.

Where are the export files stored?

Exports are staged in WordPress' temporary directory under: <temp-dir>/enginescript-site-exporter-exports/

Each export is written inside a random private child directory. For security, the plugin refuses to export if the export directory resolves inside the WordPress web root. Configure WP_TEMP_DIR to a private writable path if your host's default temporary directory is public.

Why do export files disappear after 5 minutes?

For security and disk space considerations, all exports are automatically deleted after 5 minutes. This ensures sensitive site data isn't left stored indefinitely.

Can I create multiple exports?

Yes, you can create as many exports as needed. Each export is staged in its own random private directory.

Does this include my themes and plugins?

Yes, the export includes your entire WordPress installation: themes, plugins, uploads, and the complete database.

Can I use this plugin with non-EngineScript servers?

Absolutely. The plugin does not require an EngineScript server; it creates an archive format designed for EngineScript's importer.

Changelog

See the CHANGELOG.md file for a complete list of changes.

License

This plugin is licensed under the GPL v3 or later.

Credits

EngineScript Site Exporter is developed and maintained by EngineScript.

Support

For support, feature requests, or bug reports, please create an issue on our GitHub repository.