WP Site Migrator

A secure, modern WordPress migration plugin with encrypted backups, WooCommerce-aware sync, staging environment management, and modular cloud storage.

Built from scratch as a security-hardened replacement for All-in-One WP Migration.

Features

🔒 Security First

• AES-256-GCM encrypted backups with PBKDF2 key derivation
• HMAC-SHA256 integrity verification on every backup
• CSPRNG for all identifiers — no uniqid(), no rand()
• WordPress nonces on every endpoint (REST + AJAX)
• Rate limiting per user via transients
• Zip-slip protection during extraction
• Symlink exclusion to prevent filesystem escape

📦 Smart Backup Engine

• Selective export — choose database, media, plugins, themes independently
• Streamed SQL export/import — handles multi-GB databases without memory issues
• Chunked file encryption — encrypt archives of any size
• Automatic integrity manifest — every backup is cryptographically signed
• Progress tracking via REST API

🔄 WooCommerce Intelligence

• Bi-directional product sync with SKU-based matching
• Conflict detection with configurable strategies (source wins, target wins, skip)
• Price auditor — compare pricing between staging and production
• Order preservation — selective export supporting both HPOS and legacy orders
• Diff reporting — see exactly what will change before syncing

🌐 Environment-Aware Staging

• Automatic environment detection (production, staging, local)
• Payment gateway mode switching — auto-toggle test/sandbox on staging import
• Plugin dependency scanning — detects 15+ API-dependent plugins (Stripe, Razorpay, PayPal, Cashfree, WP Mail SMTP, etc.)
• Import prompts — warns about missing plugins and required API keys
• Email suppression — auto-disables customer emails on staging
• Search engine blocking — auto-sets robots.txt on staging
• Config generation — produces environment-specific wp-config.php snippets

☁️ Modular Cloud Storage

• Local filesystem with .htaccess protection and 0600 permissions
• AWS S3 (and S3-compatible: DigitalOcean Spaces, MinIO, Backblaze B2)
• No external SDK required — uses WordPress HTTP API with AWS SigV4 signing
• Pluggable StorageInterface — add custom adapters

🖥️ WP-CLI Support

# Export
wp site-migrator export
wp site-migrator export --no-media --encrypt

# Import
wp site-migrator import /path/to/backup.smbackup
wp site-migrator import /path/to/backup.smbackup --password=secret

Requirements

• PHP 8.1+
• WordPress 6.0+
• OpenSSL extension (for encryption)
• ZipArchive extension

Installation

As a WordPress Plugin (standard)

1. Download the wp-site-migrator directory
2. Upload to wp-content/plugins/
3. Activate in WP Admin → Plugins

Via Composer

composer require kalakavya/wp-site-migrator

Architecture

wp-site-migrator/
├── wp-site-migrator.php          # Bootstrap (PHP version check + PSR-4 autoloader)
├── composer.json                  # PSR-4 autoloading
├── uninstall.php                  # Safe cleanup
├── src/
│   ├── Plugin.php                 # Singleton orchestrator
│   ├── Security/
│   │   ├── Encryption.php         # AES-256-GCM (string + file)
│   │   ├── Integrity.php          # HMAC-SHA256 (string + file + manifest)
│   │   ├── AccessControl.php      # Capability + nonce + rate limiting
│   │   └── SecretManager.php      # CSPRNG key management
│   ├── Backup/
│   │   ├── BackupManager.php      # Export/import orchestrator
│   │   ├── Archiver.php           # ZIP with security checks
│   │   ├── DatabaseExporter.php   # Batched SQL export
│   │   └── DatabaseImporter.php   # Streamed SQL import
│   ├── Storage/
│   │   ├── StorageInterface.php   # Pluggable contract
│   │   ├── LocalStorage.php       # Filesystem adapter
│   │   └── S3Storage.php          # AWS S3 / compatible
│   ├── Migration/
│   │   ├── URLRewriter.php        # Serialization-safe URL replacement
│   │   ├── ConfigSwapper.php      # wp-config + table prefix + API keys
│   │   ├── EnvironmentProfile.php # Staging/production profiles
│   │   └── PluginDependencyDetector.php # API plugin scanner
│   ├── WooCommerce/
│   │   ├── ProductSync.php        # Bi-directional product sync
│   │   ├── OrderPreserver.php     # Order export with HPOS support
│   │   └── PriceAuditor.php       # Price comparison engine
│   └── Admin/
│       ├── AdminPage.php          # WP Admin UI
│       └── RestController.php     # REST API (7 endpoints)
├── assets/
│   ├── css/admin.css
│   └── js/admin.js                # wp.apiFetch + environment dashboard
└── tests/
    ├── bootstrap.php
    └── Unit/
        ├── EncryptionTest.php     # 10 test cases
        ├── IntegrityTest.php      # 8 test cases
        ├── SecretManagerTest.php  # 3 test cases
        └── URLRewriterTest.php   # 4 test cases

REST API Endpoints

All endpoints require export capability and WordPress REST nonce authentication.

Import/Export Lifecycle

Export

1. Scan environment → capture payment gateways, API plugins, environment type
2. Export database (batched, memory-safe)
3. Collect files (selective: media, plugins, themes)
4. Create ZIP archive (with zip-slip protection, symlink exclusion)
5. Sign with HMAC-SHA256 integrity manifest
6. Optionally encrypt with AES-256-GCM
7. Store to configured backend (local / S3)

Import

1. Verify integrity manifest (HMAC)
2. Decrypt if encrypted (PBKDF2 + AES-256-GCM)
3. Extract archive (with zip-slip validation)
4. Read source environment profile
5. Check plugin dependencies — warn about missing API plugins
6. Rewrite URLs (handles serialized PHP, JSON-escaped, protocol-relative)
7. Rewrite table prefixes if different
8. Import database
9. Restore files
10. Auto-configure environment — switch payment gateways, emails, debug flags
11. Flush caches

Security Comparison

License

GPL-3.0-or-later