WP Manifestindependent plugin directory
manifest / updates / flashbackup

FlashBackup WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

Cron scheduled database backup using mysqldump for faster backup operation.

★ 0stars
v1.0.4latest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/samuelaguilera/flashbackup/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Update URI header), so new versions appear under Dashboard → Updates.

Description

Cron scheduled database backup using mysqldump for faster backup operation.

Using PHP to create database backups is a slow task that can easily exceed PHP's max execution time if your site database is a big one, there are solutions to perform the backup in batches using PHP, but mysqldump is way faster compared to any PHP based backup tool.

This plugin calls the mysqldump shell command, which is able to create a database backup file in only a few seconds, even for huge databases.

Requirements

  • PHP 7.0 or higher.
  • PHP's exec() function must be enabled. Some hosts may disable it.
  • mysqldump shell command must be installed on the server.
  • Optional: zip package must be installed on the server if you want to use zip compression.

Features

  • Backup files and the folder to store them have a partially random name, making them unique for each site and hard to guess.
  • An index.html file is added to the backups folder to prevent directory listing, also a .htaccess file (for Apache 2.4+ servers) is added blocking access to any web visitor.
  • Backup creation is automatically triggered daily by WordPress Cron. This can be customized using a filter.
  • Backups are rotated out every week. This can be customized using a filter.

Usage

  • Install and activate it as you do with any other plugin.
  • Enjoy! No settings!

Customization

The following filters are available:

flashbackup_compression

Possible values are, gz (default), zip, or empty for no compression.

flashbackup_rotate_time

Time in seconds to delete older backups. By default it's set to delete files older than a week.

flashbackup_interval

Cron event interval. By default set to daily, so one backup file per day is created. Other WordPress default values for this are: twicedaily, hourly, weekly

You can also use your own custom interval if you have created one.

For this filter to take effect you need to disable and enable the plugin again to delete the existing cron task and create the new one..

Releases

4 releases.

Tag
Published
v1.0.4 latest
Jun 29, 2024 2 years ago
Jun 29, 2024 2 years ago
Jan 19, 2023 3 years ago
Sep 16, 2022 4 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

FlashBackup 1.0.4 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.0.4
Findings
2
Worst severity
medium
Content hash
25de8fbb8e9cf81c92a5aefe…

Findings

  • medium Database password exposed on shell command line via exec

    information_disclosure

    create_backup concatenates DB_USER/DB_PASSWORD into a mysqldump command and passes it to exec(). Credentials appear in ps/audit logs; also eval_by_design shell usage for backups.

    flashbackup.php:138-151

  • low Backup uses exec/mysqldump by design

    eval_by_design

    Intentional shell-out for backups; gated by flashbackup_settings capability on settings UI and cron. Noted as attack-surface.

    flashbackup.php:124-151

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.