WP Manifestindependent plugin directory
manifest / admin / master-tools

Master Tools

All-in-one WordPress toolkit: file manager, database manager, code inserts, redirects, robots.txt/.htaccess editor and security hardening

by Serhii Kudelia · github.com/sergkievcity/master-tools

0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/sergkievcity/master-tools/archive/refs/heads/main.zip

Master Tools — WordPress Plugin

All-in-one webmaster toolkit: file manager, database manager, code inserts, redirects, robots.txt / .htaccess editor and security hardening.

Screenshots

File Manager File Manager — Standalone Mode Database Manager Database Manager — Standalone Mode Redirects Security Code Inserts

Why Master Tools?

Most WordPress sites end up installing 5–7 separate plugins to cover the basics: a file manager, a database tool, a redirect manager, a code insert plugin, a security hardener... Each one adds its own menu, its own settings page, its own update to maintain.

Master Tools replaces all of them with a single plugin that covers every day-to-day webmaster need — without the clutter.

Emergency Access — Standalone Mode

The File Manager and Database Manager include an optional standalone auth mode: a time-limited, token-protected URL that works even when WordPress itself is broken (white screen, login loop, plugin conflict).

  • Generates a unique gate file with a secure token
  • Token is stored in an HttpOnly, SameSite=Strict cookie
  • Automatically expires — enable only when you need it, disable when done

This is the feature that sets Master Tools apart from other all-in-one plugins.

Features

File Manager

Browse, edit, upload and delete files directly from the WordPress admin. Powered by Tiny File Manager 2.5.3.

Database Manager

Powered by Adminer 5.4.1. Manage tables, run queries and export data without leaving the admin panel.

Code Inserts

Inject arbitrary code into <head>, <body> (after the opening tag), or the footer of every page — useful for analytics scripts, tag managers, or custom CSS/JS.

Redirects

Create URL redirect rules with support for:

  • Plain URL matching
  • Regular expressions with capture group substitution ({1}, {2}, …)
  • Per-rule HTTP status codes (301, 302, 303, 307, 308)
  • Priority ordering
  • Global lowercase URL enforcement
  • Global trailing slash normalisation

robots.txt Editor

Override the default WordPress robots.txt with your own custom content.

.htaccess Editor

Edit your .htaccess file directly from the admin without FTP access.

Security Hardening

  • Custom login URL (replaces wp-login.php)
  • Login attempt limiting with configurable lockout duration
  • Force SSL for wp-admin
  • Disable automatic core, plugin, theme and translation updates
  • Disable XML-RPC
  • Disable REST API (unauthenticated access)
  • Disable RSS and Atom feeds
  • Disable comments site-wide
  • Disable the theme and plugin file editor
  • Removes the WordPress version generator tag from <head>

Installation

  1. Download the latest release zip from the Releases page.
  2. In WordPress admin go to Plugins → Add New → Upload Plugin.
  3. Upload the zip, then click Activate.

Or manually:

  1. Extract the zip and upload the master-tools folder to /wp-content/plugins/.
  2. Activate through the Plugins menu.
  3. Navigate to Master Tools in the admin sidebar.

Requirements

  • WordPress 6.0+
  • PHP 7.4+

Security

The File Manager and Database Manager are protected by multiple layers:

  1. WordPress authentication — only administrators (manage_options) can access these tools.
  2. Nonce verification on every request.
  3. An optional standalone auth mode — see Emergency Access above.

Third-party libraries

Library Version License
Adminer 5.4.1 Apache 2.0 / GPL 2
Tiny File Manager 2.5.3 MIT

License

GPLv2 or later — see LICENSE