WP Manifestindependent plugin directory
manifest / updates / secure-database-backup

Secure Database Backup

Secure database backup solution with access controls

by kian babaabady · github.com/kianbabai/secure-database-backup

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/kianbabai/secure-database-backup/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/kianbabai/secure-database-backup ↗

Secure Backup System for WordPress

A secure database backup solution with multiple layers of protection and access controls.

Features

  • 🔒 Secure Access Controls
    • WordPress authentication required
    • Nonce-protected URLs
    • Secret key authorization
    • User capability checks
  • 🛡️ Security Measures
    • .htaccess protection for backups
    • File permission hardening
    • Path traversal prevention
    • SQL injection protection
  • 💾 Backup Features
    • GZIP compressed backups
    • Chunked data processing for large tables
    • Automatic directory creation
    • Downloadable backup files

Installation

  1. Download the plugin ZIP file
  2. Go to Plugins > Add New in WordPress admin
  3. Click Upload Plugin and select the ZIP file
  4. Activate the plugin through the Plugins menu

Configuration

  1. Go to Settings > General
  2. Find the Secure Backup Settings section
  3. Copy the generated backup URL (bookmark this - it will only show once)
  4. Optional: Add IP whitelisting in plugin code

Usage

  1. Access Backup URL

    • Use the generated URL while logged in as admin
    • Backup will automatically download as .sql.gz file

  2. Backup Storage

    • Backups are stored in /wp-content/backups/
    • Protected by .htaccess rules
    • Files automatically deleted after 30 days

Security Recommendations

  1. 🔑 Secret Key Management

    • Regenerate secret key periodically
    • Never share backup URLs
    • Use HTTPS exclusively

  2. 🛡️ Server Configuration

    • Implement IP whitelisting
    • Set up rate limiting
    • Monitor backup directory access

  3. 🔄 Maintenance

    • Test backups regularly
    • Keep plugin updated
    • Review access logs

Troubleshooting

Common Issues:

  • 403 Forbidden: Verify user permissions and secret key
  • Directory creation failed: Check wp-content permissions (0750+)
  • Empty backups: Ensure database user has SELECT privileges
  • Timeout errors: Increase PHP max_execution_time

Disclaimer

Always test backups in a staging environment before relying on them for production use. The developers are not responsible for any data loss.

Changelog

1.0.0 (2025-02-18)

  • Initial release with core backup functionality
  • Security layers implementation
  • WordPress settings integration