ExeebitExeebit
phpinfo() WP logo
phpinfo() WP
phpinfo() WP: The Complete Guidev8.0

Every screen and setting, explained in plain language.

You do not need to be a developer. If you can log in to wp-admin, you can use this plugin to inspect, grade, and optimize your server.

Getting Started

What the Plugin Does

Your WordPress site runs on top of a server. The server has settings that decide how much memory your site gets, how long a task may run, how fast pages are built, and how safe the site is. Most people never see these settings until something breaks.

Key Details & Telemetry
  • phpinfo() WP shows you those settings, grades them, tells you what is wrong in normal words, and for many problems gives you a button that fixes it directly from wp-admin.
  • Each screen is marked Free or Pro. Each section tells you what the screen is for, where to find it, how to read it, and what to do when something looks wrong.
How to Read This Guide
You do not need to read it top to bottom. Open your dashboard, see what is flagged, and jump straight to that section. If you are new, review 'Words You Will See' and 'What This Plugin Changes' first - they take 5 minutes and save you from surprises.
Getting Started

Words You Will See (Glossary)

Plain-language definitions of technical terms used throughout WordPress server administration and phpinfo() WP.

WordPlain Meaning
PHPThe programming language WordPress is written in. Your server runs PHP every time someone opens a page.
PHP versionWhich release of PHP your server runs. Old versions stop receiving security fixes.
memory_limitThe maximum amount of memory one request may use. If a task needs more, it stops with an error.
HostThe company that runs your server (for example your hosting provider).
Host-lockedA setting your host has fixed. You cannot change it from WordPress.
OPcacheA PHP feature that keeps compiled code in memory so it does not need to be rebuilt on every visit.
Object cacheA store (Redis or Memcached) that remembers database answers so the database is asked less often.
AutoloadSettings that WordPress loads from the database on every single page view.
TransientA temporary piece of saved data. Expired ones are leftovers that can be safely deleted.
TTFBTime to First Byte. How long the visitor waits before the server starts answering.
WP-CronWordPress's built-in task scheduler. It publishes scheduled posts, sends emails, and runs background jobs.
.htaccessA settings file used by Apache web servers.
.user.iniA settings file used by PHP on Nginx, LiteSpeed, and PHP-FPM setups.
EOLEnd of life. The date after which a software version gets no more fixes.
Getting Started

What This Plugin Changes on Your Server

Most screens only read information. Some screens can change things. Here is exactly what the plugin touches, so nothing surprises you.

ActionWhat It Touches
Auto-Fix on the Config GraderWrites PHP settings to .htaccess (Apache) or .user.ini (Nginx, LiteSpeed, PHP-FPM)
PHP Config Editor and snippetsEdits the same two files. Saves a backup first (htaccess-phpinfo.txt or userini-phpinfo.txt)
Security Headers Auto-FixAdds rules to .htaccess on Apache and LiteSpeed. On Nginx it only shows you text to copy
Permissions Auto-FixChanges file and folder permissions on disk, including wp-config.php
Troubleshooting ModeAdds a temporary file to wp-content/mu-plugins
Purge Expired TransientsDeletes rows in the database
Flush Object Cache, Reset OPcacheClears cached data. Your site may be slightly slower for a moment while cache refills
Clear LogEmpties the error log file
Enable LoggingTurns on debug logging in WordPress
Run Now, Delete Event, Purge HookRuns or removes scheduled WP-Cron tasks
Before You Press Any Auto-Fix Button
1. Make a backup of your site and database. 2. Make a Config Snapshot (Pro) if available. 3. Change one thing at a time, then open your site in an incognito tab to verify it loads.
Part 1 · Speed & Dials• Section 1
Free + Pro data

1. Server Overview Dashboard

Where:phpinfo() WP > Dashboard

This is the first screen you see. It answers one question: is my server in good shape right now?

Key Details & Telemetry
  • Health grade, A+ to F: One clear letter grade for the entire server.
  • Two separate scores: One for things you can fix inside WordPress, one for limits your host controls. A low grade caused only by host limits is not your fault.
  • Peak RAM meter: How much memory your heaviest recent request used compared to your memory_limit.
  • Database autoload gauge: How large the data is that WordPress loads on every visit.
  • Server software and database version: LiteSpeed, Nginx, Apache, MySQL, or MariaDB with EOL support status.
  • Outbound API summary: External services your site talks to (Stripe, PayPal, WP.org).
  • Triage cards: The most urgent problems with 1-click Auto-Fix or Review buttons.

Do this in one minute

  1. Open phpinfo() WP > Dashboard.
  2. Check the grade and ensure Peak RAM is under 75%.
  3. Click Auto-Fix or Review on any flagged card.
How to Read the Health Grade
GradeMeaningWhat to Do
A+ / ASettings well tuned, memory safe, autoload under 400 KBNothing. Check again once a week.
B / CTight memory, autoload 400-800 KB, or minor setting warningOpen top triage card and follow advice.
D / FPHP past EOL, memory exhausted, or display_errors exposes server pathsFix the top card first today.
Part 1 · Speed & Dials• Section 2
Pro

2. Config Grader and 1-Click Auto-Fix

Where:phpinfo() WP > Performance > Config Grader

PHP settings decide how much your site may do at once. If they are too low, imports fail, uploads stall, and large menus lose items. The Config Grader checks 30+ settings including memory_limit, max_execution_time, upload_max_filesize, post_max_size, max_input_vars, and display_errors.

Key Details & Telemetry
  • Judges your site contextually: WooCommerce stores with Elementor or WP All Import need around 512M memory. A blog with 15 plugins runs fine on 128M or 256M. The grader inspects active plugins and tailors benchmarks.
  • Apache writes to .htaccess; Nginx/LiteSpeed/PHP-FPM write to .user.ini.
  • Automated rollback: Tests your site after each edit. If a 500 server error is triggered, it restores the previous file immediately.
  • Revert button available on any setting at any time.
Config Statuses Explained
StatusMeaningWhat to Do
PassSetting is fine for your siteLeave it alone.
Warn / FixableLower than recommended (e.g. max_input_vars=1000 loses menu items)Click Auto-Fix.
FailActive risk (e.g. display_errors exposes filesystem paths to visitors)Click Auto-Fix now.
Host-LockedHost fixed this value at server levelSee Host-Locked details below.
Understanding Host-Locked
Host-Locked does NOT mean bad. It means you cannot change it from WordPress. If your site has no memory exhaustion errors, a locked 128M/256M limit is fine. If imports fail, click 'Copy Diagnostic Report for Your Host' and send it to your host's support team.
PHP-FPM .user.ini Cache Notice
PHP-FPM caches .user.ini for about 5 minutes. After Auto-Fix, wait 5 minutes before checking whether the new value is active.
Part 1 · Speed & Dials• Section 3
Pro

3. OPcache Performance & Script Browser

Where:phpinfo() WP > Performance > OPcache

Without OPcache, PHP reads and compiles dozens of WordPress files on every page view. With OPcache, compiled code stays in RAM and is reused, delivering a huge server speedup.

Key Details & Telemetry
  • Hit rate: How often PHP found code already in memory. Higher is better.
  • Memory cards: Total memory given to OPcache, used, free, and wasted memory.
  • Cached scripts vs. max keys: Example: 4,200 files cached out of 10,000 maximum.
  • Reset OPcache button: Empties and rebuilds compiled opcode cache.
  • Cached scripts browser: Searchable list of all cached files with memory footprint and hit count.
OPcache Benchmarks
ResultMeaningWhat to Do
Hit rate > 95%Healthy compiled executionNothing needed.
Hit rate 80%-94%Cache filling up or excessive wasted memoryClick Reset OPcache. If it stays low, ask host to raise opcache.memory_consumption to 256M.
Disabled / Not InstalledPHP recompiles files on every requestSet opcache.enable=1 in php.ini or contact host.
When to Reset OPcache
Reset when you updated code or a plugin and the old behavior still appears. Note that page loads will be slightly slower for a moment while the cache repopulates.
Part 1 · Speed & Dials• Section 4
Pro

4. Persistent Object Cache (Redis & Memcached)

Where:phpinfo() WP > Performance > Object Cache

By default WordPress asks the database the same queries on every page. An object cache keeps answers in fast memory across visits. Essential for WooCommerce, membership portals, and high-traffic sites.

Key Details & Telemetry
  • Checks two essentials: 1) PHP Redis/Memcached extension installed on server, and 2) wp-content/object-cache.php drop-in present.
  • Hit and miss percentages tracked in real time.
  • Flush Object Cache button to wipe stale database keys.
  • 1-click link to install companion Redis plugin if extension exists but drop-in is missing.
Object Cache Statuses
StatusMeaningWhat to Do
Connected & ActiveQueries successfully cached in memoryNothing needed.
Extension Available, Drop-in MissingServer has Redis, but WP is not connectedClick 'Install Redis Plugin' in the banner.
Not ActiveEvery query hits disk databaseFine for small blogs; enable Redis with host for stores.
When to Flush
Flush only if settings or products look out of date after editing. Do NOT flush on an automated schedule, as it forces the database to rebuild cache on visitor requests.
Part 1 · Speed & Dials• Section 5
Pro

5. Database Health & Autoload Cleaner

Where:phpinfo() WP > Performance > Database

On every page view WordPress loads all rows from the wp_options table where autoload = 'yes'. Bloated or leftover transient data in autoload slows down every single visitor.

Key Details & Telemetry
  • Total autoload gauge: Green under 400 KB, yellow from 400 to 800 KB, red above 800 KB.
  • Top autoloaded options: Identifies the biggest database rows and the plugin that created them.
  • Expired transients counter with 1-click safe purge button.
  • Missing indexes scanner: Detects database tables lacking foreign/primary indexes that cause table scans.
  • Database engine (InnoDB/MyISAM) and storage footprint breakdown.
Autoload Size Benchmarks
Autoload SizeMeaningWhat to Do
Under 400 KBOptimal performanceNo action required.
400 to 800 KBStarting to slow TTFBPurge expired transients, inspect top options.
Over 800 KBSevere delay on every page requestPurge transients now and clean orphan plugin options.
Safety Rule for Database Cleaning
Purging EXPIRED transients is 100% safe (they are useless leftovers). Do NOT delete option rows by hand unless you are certain they belong to an uninstalled plugin. Always back up your database first.
Part 1 · Speed & Dials• Section 6
Pro

6. External API Health Monitor

Where:phpinfo() WP > Performance > API Monitor

Plugins frequently call external APIs: payment gateways (Stripe/PayPal), shipping calculators, email marketing, and license servers. If an outside service lags, your checkout or admin freezes.

Key Details & Telemetry
  • Full log of every outbound external domain called by WordPress.
  • Total request count, average latency, and slowest peak response time.
  • Identifies HTTP timeouts and 5xx API failures.
  • Sortable table: Sort by slowest response to catch sporadic freezes.
API Latency Benchmarks
Average TimeMeaningWhat to Do
Under 0.5 sFast & responsiveNo action needed.
0.5 to 2.0 sNoticeable delayCheck if the calling plugin has async/cron settings.
Over 2.0 s or TimeoutsAPI call blocks customer checkout/page loadIdentify plugin, review settings, or switch integrations.
Part 2 · Hardening & Core• Section 7
Free

7. PHP EOL Timeline & Support Tracker

Where:phpinfo() WP > Security & Core > PHP EOL

PHP versions receive 2 years of active development followed by 2 years of security fixes. Once End of Life (EOL) is reached, zero security patches are issued. Running an EOL version leaves your server vulnerable to known exploits.

Key Details & Telemetry
  • Interactive timeline of PHP versions with official release and EOL dates.
  • Prominent 'YOU' badge highlighting the version active on your server right now.
  • Status indicators: Supported, EOL in < 90 Days, or End of Life.
  • Days remaining in support window or days since official abandonment.
  • 1-click launch to the PHP Compatibility Scanner.
Action by Support Status
StatusMeaning & What to Do
SupportedPHP version actively receives security updates. No action required.
EOL in < 90 DaysSupport ending soon. Run the Compatibility Scanner now so you are prepared.
End of LifeNo security patches. Run scanner, replace obsolete plugins, and upgrade PHP in hosting panel.
Part 2 · Hardening & Core• Section 8
Free

8. PHP Compatibility Scanner (Zero False Alarms)

Where:phpinfo() WP > Security & Core > PHP Compatibility

Upgrading PHP is critical, but old plugins can crash your site on a modern runtime. The scanner checks all installed plugins and themes before you flip the switch at your host.

Key Details & Telemetry
  • Pure in-WordPress static scanner: Does not require exec(), shell access, or external command-line tools.
  • Smart guard & polyfill detection: Eliminates false alarms from dormant shims and version switches.
  • Background scanner with real-time progress bar for large sites.
  • Detailed report: Exact file path, line number, issue severity, and code snippet.

How to use it

  1. Select your target PHP version (e.g. PHP 8.3 or 8.4).
  2. Click 'Run Scan' and let the progress bar complete.
  3. Inspect flagged items: Deprecation notices vs breaking fatal errors.
  4. Update or replace breaking plugins before changing PHP in hosting panel.
Scan Results Interpreted
ResultMeaningWhat to Do
Fully CompatibleNo breaking syntax or removed functionsSafe to change PHP version at host.
Deprecation NoticesWorks today, but syntax will be removed in futureCheck for plugin updates; ensure display_errors is off.
Breaking Change / FatalRemoved function called. Site will crash on that PHPUpdate or replace that plugin before switching PHP.
Part 2 · Hardening & Core• Section 9
Free

9. Update Guard: Plugin & Theme Pre-Update Scanner

Where:phpinfo() WP > Security & Core > Update Guard (Plugins tab)

Pressing 'Update Now' in WordPress is always a risk. Update Guard evaluates pending plugin and theme updates before installation to prevent breaking changes.

Key Details & Telemetry
  • Verifies minimum PHP and WordPress requirements against your live server.
  • Parses changelogs for risk indicators: database migrations, major rewrites, and breaking API changes.
  • Flags abandoned plugins with no updates in over 2 years.
  • Provides a plain-language risk verdict for every pending update.
Update Guard Verdicts
VerdictMeaningWhat to Do
Safe to updateMatches server specs, routine patchUpdate normally.
Update with cautionMajor version jump or database changesBack up first, update during off-peak hours.
Risky, review firstRequires higher PHP/WP or plugin is abandonedDo not update yet. Upgrade server or find replacement.
Part 2 · Hardening & Core• Section 10
Pro

10. Core Readiness Audit

Where:phpinfo() WP > Security & Core > Update Guard > Core Audit tab

Major WordPress releases deprecate or remove old core functions. If an installed plugin still relies on a deleted core function, upgrading WordPress causes fatal crashes.

Key Details & Telemetry
  • Select your upcoming WordPress target version (e.g. WP 6.7 or 6.8).
  • Scans all plugins for removed core WordPress APIs and hook changes.
  • Returns exact plugin name, file path, line number, and modern API replacement.
Core Scan Verdicts
ResultWhat to Do
Core ReadyAll plugins compatible with target WordPress release. Safe to update.
Deprecated Function NotedSafe to update now. Keep plugin updated before next major cycle.
Removed Core API CallDo NOT update WordPress yet. Update the affected plugin first.
Part 2 · Hardening & Core• Section 11
Pro

11. Update History & 60-Second Post-Update Health Check

Where:phpinfo() WP > Security & Core > Update Guard > History tab

Some updates install successfully but quietly break loopback requests or background cron. This screen records every update and runs an automated 60-second health check after each installation.

Key Details & Telemetry
  • Complete historical audit log: Core, plugin, and theme updates with old/new versions, timestamp, and user.
  • Automated post-update tests: 1) Loopback request integrity, 2) Error log delta (new fatal errors), and 3) WP-Cron execution.
  • Manual 'Run Health Check Now' button for on-demand diagnostics anytime.
Post-Update Health Check Results
ResultMeaningWhat to Do
Healthy (3 of 3)Update settled cleanly with zero issuesNo action required.
WarningSite is up, but new notices or warnings loggedReview error log delta to verify severity.
FailedFatal errors or broken loopback detectedUse Troubleshooting Mode or roll back plugin version.
Part 2 · Hardening & Core• Section 12
Pro

12. Permissions Audit and 1-Click Repair

Where:phpinfo() WP > Security & Core > Permissions Audit

File permissions decide who can read, write, or execute files on your host. Open permissions (777) allow malicious scripts to overwrite files; overly strict permissions break updates and uploads.

Key Details & Telemetry
  • Inspects wp-config.php (should be 0600, 0640, or 0644).
  • Audits /wp-admin, /wp-includes, /wp-content, /uploads, /plugins, and /themes.
  • Flags any world-writable 777 folders or files in high-contrast red.
  • Verifies file owner matches the user PHP runs under (prevents FTP prompt errors).
  • 1-Click Auto-Fix sets folders to 0755, files to 0644, and wp-config.php to 0600.
Important Host Check After Auto-Fix
After running Permissions Auto-Fix, test your site immediately in a private window. On rare shared hosts where PHP runs as a different user than the file owner, a strict 0600 wp-config.php can become unreadable. If that happens, contact your host.
Part 2 · Hardening & Core• Section 13
Pro

13. Security Headers Auditor & 1-Click Fix

Where:phpinfo() WP > Security & Core > Security Headers

HTTP security headers instruct visitor browsers how to handle scripts, frames, and certificates safely, defending against clickjacking, cross-site scripting (XSS), and content-type sniffing.

Key Details & Telemetry
  • Audits 6 core headers: HSTS (Strict-Transport-Security), X-Content-Type-Options, X-Frame-Options, CSP (Content-Security-Policy), Referrer-Policy, and Permissions-Policy.
  • Performs real live HTTP request to your homepage to evaluate active headers.
  • Auto-Fix writes safe rules to .htaccess on Apache/LiteSpeed, or provides copy-ready nginx.conf snippets.
  • Built-in 1-Click Revert restores original configuration instantly.
Header Audit Grades
GradeMeaningWhat to Do
A+ / AAll core security headers active and verifiedNo action required.
B / CHTTPS active, but protective headers missingClick Auto-Fix Missing Headers.
FZero security headers deployedClick Auto-Fix Missing Headers.
Caution with HSTS and CSP
HSTS: Only enable when HTTPS is completely working across your entire domain, as browsers will refuse plain HTTP. CSP: A very strict policy can block external scripts (chat widgets, Stripe checkout). Test your checkout after enabling.
Part 2 · Hardening & Core• Section 14
Pro

14. SSL Certificate Monitor & Expiry Alert

Where:phpinfo() WP > Security & Core > SSL Monitor

When your SSL certificate expires, browsers show an alarming full-screen security warning, causing immediate traffic and revenue drop. This screen monitors certificate validity and renewal status.

Key Details & Telemetry
  • Real-time countdown of days until certificate expiration.
  • Certificate issuer (Let's Encrypt, Cloudflare, DigiCert, Sectigo) and validity window.
  • Domain SAN match verification (ensures certificate covers both www and non-www).
  • HTTPS 301 permanent redirect validation.
  • Mixed content scanner (flags http:// images or scripts breaking the green padlock).
  • Multi-domain monitoring (Pro): Add staging, checkout, or client subdomains.
SSL Status Breakdown
StatusMeaningWhat to Do
> 30 Days RemainingCertificate healthy & validNo action required.
< 14 Days RemainingAutomated renewal has not triggeredTrigger manual renewal in hosting panel or Cloudflare.
Expired or MismatchVisitors blocked by browser warningRenew or reinstall certificate immediately.
Part 3 · Diagnostics• Section 15
Free

15. In-Admin phpinfo() Viewer

Where:phpinfo() WP > Page Audit Tools > phpinfo() Viewer

The native PHP phpinfo() function dumps every raw server setting into an unstyled text page. This viewer renders the same authoritative telemetry inside wp-admin with live search and category jump navigation.

Key Details & Telemetry
  • Real-time search: Type 'curl', 'imagick', or 'memory_limit' to filter instantly.
  • Quick jump menu: Jump straight to Core, OPcache, Session, PDO, or cURL.
  • Replaces dangerous standalone info.php or phpinfo.php files on your host.
Security Reminder
If you ever uploaded an info.php or test.php file to your web root, DELETE IT immediately. Public phpinfo files leak server secrets to attackers. This viewer provides the same data securely restricted to site administrators.
Part 3 · Diagnostics• Section 16
Free

16. PHP Config Editor & Snippet Library

Where:phpinfo() WP > Page Audit Tools > PHP Config Editor

Editing .htaccess or .user.ini manually over FTP carries high risk: a single syntax typo can trigger a white screen or 500 Internal Server Error. The editor adds safety guardrails and automated backups.

Key Details & Telemetry
  • Automated backup created before every write (htaccess-phpinfo.txt or userini-phpinfo.txt).
  • Automatic rollback: Restores previous working file if syntax error causes a server fault.
  • 1-Click Restore button allows immediate rollback anytime.
  • Snippet library: 1-click GZIP/Brotli compression, browser caching expires headers, security headers, and aggressive crawler bot blockers.
After Adding Snippets
After adding caching or compression snippets, purge your caching plugin and CDN cache, then verify page loading in an incognito window.
Part 3 · Diagnostics• Section 17
Free

17. Safe Troubleshooting Mode

Where:phpinfo() WP > Page Audit Tools > Troubleshooting

Standard debugging advice asks you to disable all plugins and switch to a default theme, which breaks live sites for customers. Troubleshooting Mode isolates plugin debugging exclusively to your logged-in administrator session.

Key Details & Telemetry
  • Uses a temporary must-use plugin (wp-content/mu-plugins) that applies strictly to your session.
  • Visitors, customers, and other administrators see the normal, functioning website without interruption.
  • Step-by-step conflict isolation: Plugins are turned off in your session; turn them back on one by one to pinpoint the culprit.
  • 1-Click 'Stop Troubleshooting Mode' removes the mu-plugin cleanly.

How to isolate a conflicting plugin

  1. Click 'Start Troubleshooting Mode' (a notification confirms only your session is isolated).
  2. Verify if the issue persists with all plugins disabled.
  3. Enable plugins one by one from the admin bar control panel.
  4. The moment the bug reappears, the last activated plugin is the cause.
  5. Click 'Stop Troubleshooting Mode' to restore your normal session.
Part 3 · Diagnostics• Section 18
Free

18. Basic Info & Server Environment

Where:phpinfo() WP > Page Audit Tools > Basic Info

When opening a support ticket with a plugin author or hosting provider, they always request your environment details. This screen aggregates every relevant spec into a single structured summary.

Key Details & Telemetry
  • WordPress core specs: Site URL, home URL, active theme, child theme status.
  • Active vs installed plugins ratio (e.g. 18 of 24 active).
  • Live debug mode status (WP_DEBUG, WP_DEBUG_LOG).
  • Disk storage utilization for /uploads, /themes, and /plugins folders.
  • PHP runtime, memory usage, cURL version, and web server software.
Part 3 · Diagnostics• Section 19
Free

19. PHP Extensions Catalog & Audit

Where:phpinfo() WP > Page Audit Tools > Extensions

WordPress and WooCommerce require specific compiled PHP extensions. Missing extensions cause silent failures, broken image generation, or failed payment webhooks.

Key Details & Telemetry
  • Audits 21 essential extensions: curl, dom, exif, fileinfo, gd, hash, iconv, imagick, intl, json, mbstring, mysqli, openssl, pcre, pdo_mysql, SimpleXML, sodium, xml, xmlreader, zip, and zlib.
  • Missing extensions flagged in high-contrast red cards with an explanation of what breaks.
  • Live search box to query optional extensions like redis, bcmath, or soap.
Extension Impact
ExtensionImpact If MissingAction
imagick / intlWP falls back to slower GD; localized currency formatting limitedAsk host to install php-imagick and php-intl.
curl / openssl / zipUpdates, plugin installs, and Stripe/PayPal webhooks failContact host immediately to compile extensions.
Part 3 · Diagnostics• Section 20
Pro

20. Config Snapshots & Host Drift Tracker

Where:phpinfo() WP > Page Audit Tools > Config Snapshots

Hosting providers often update server software, migrate containers, or lower resource limits without notifying customers. Snapshots allow you to capture baseline configurations and detect host drift.

Key Details & Telemetry
  • Take manual snapshots before migrations or major updates, plus weekly automated baseline capture.
  • Visual Diff Comparator: Compare any two snapshots or your baseline against live server settings.
  • Color-coded drift analysis: Green for improved settings, red for regressive limits.
Drift Statuses
StatusMeaningWhat to Do
Zero DriftLive server matches baseline snapshotNo action required.
Minor DriftNon-critical change (e.g. max_input_time 60 -> 30)Review whether site is affected.
Regressive DriftKey limit lowered (e.g. memory dropped 512M -> 128M)Copy diff report and escalate to host support.
Part 4 · Logs & Intelligence• Section 21
Free

21. Operations Log & Audit Trail

Where:phpinfo() WP > Reports & Logs > Operations Log

A complete operational log recording every action executed through phpinfo() WP: Auto-Fixes, configuration edits, snapshot captures, and troubleshooting sessions.

Key Details & Telemetry
  • Tracks timestamp, executed action, user administrator, and event severity.
  • Severity tags: INFO (routine), WARNING (minor issue), and CRITICAL (safety rollback triggered).
  • Filter by Server & Config or Settings Changes.
Part 4 · Logs & Intelligence• Section 22
Pro

22. Admin Security Activity Log & Login Tracker

Where:phpinfo() WP > Reports & Logs > Admin Log

Tracks who logged in, what was modified, and alerts to brute-force intrusion attempts.

Key Details & Telemetry
  • Authentication sentinel: Successful logins, failed attempts, logouts, password resets with real client IP resolution (even behind Cloudflare).
  • Plugin & theme lifecycle: Activations, deactivations, installations, updates, and deletions.
  • Core settings & users: Role elevations, URL changes, user registrations.
  • Multi-filter controls and 1-click CSV export for compliance and client billing.
Security Patterns
PatternMeaningWhat to Do
Normal LoginsAuthorized administrator activityNo action needed.
Burst of Failed LoginsAutomated brute-force password guessingEnforce strong passwords, add 2FA, block IP.
Unexpected Admin Role ElevationPotential site compromiseInspect user account immediately, reset passwords, check plugins.
Part 4 · Logs & Intelligence• Section 23
Pro

23. Live PHP Error Log Viewer & Diagnostics

Where:phpinfo() WP > Reports & Logs > Error Log

When a page shows a critical error or white screen, the exact cause is written to the PHP error log. Traditional debugging requires FTP/SSH access; this tool reads and filters logs directly in wp-admin.

Key Details & Telemetry
  • Autodetects debug.log, server error logs, and PHP-FPM log files.
  • 1-Click 'Enable Logging' toggles WP_DEBUG_LOG without manually editing wp-config.php.
  • Instant live search by plugin name, file path, date, or fatal keyword.
  • Severity highlighting: Red for fatal crashes, yellow for warnings, gray for notices.
  • Clear Log button to empty oversized files instantly.
  • Plain-language stack trace explanations.
Part 4 · Logs & Intelligence• Section 24
Pro

24. WP-Cron Monitor & Scheduled Task Manager

Where:phpinfo() WP > Reports & Logs > WP-Cron Monitor

WordPress uses WP-Cron to publish scheduled posts, process WooCommerce subscription renewals, send emails, and generate backups. If cron fails, background tasks stall without visible errors.

Key Details & Telemetry
  • Highlights overdue tasks in high-visibility yellow or red.
  • Detects whether DISABLE_WP_CRON is enabled and whether a server-level system cron is active.
  • Orphan hooks detector: Identifies scheduled tasks left behind by deleted plugins.
  • Task controls: 'Run Now' to execute stuck tasks, 'Delete Event', and 'Purge Hook'.
Part 4 · Logs & Intelligence• Section 25
Pro

25. Email Deliverability Suite (SPF, DKIM, DMARC)

Where:phpinfo() WP > Reports & Logs > Mail

If password reset emails or customer receipts land in spam, missing domain DNS records are usually responsible. Modern providers (Google/Yahoo) reject unauthenticated emails.

Key Details & Telemetry
  • Audits 4 essential DNS authentication records: SPF, DKIM, DMARC, and MX.
  • Detects whether WordPress uses plain PHP mail() (high spam score) or an authenticated SMTP/API gateway.
  • Form audit: Verifies contact forms (WPForms, Gravity Forms, CF7, Formidable) use From addresses matching your domain.
  • Test Email tool: Sends real test emails from wp-admin to verify deliverability.
Part 4 · Logs & Intelligence• Section 26
Pro

26. Real-Time Alerts & Weekly Health Digest

Where:phpinfo() WP > Reports & Logs > Alerts

You should not need to log into wp-admin every single day to know if server limits drifted or an SSL certificate is expiring.

Key Details & Telemetry
  • Multi-channel notifications: Email, Slack incoming webhooks, Discord webhooks, and custom JSON endpoints.
  • Configurable alert triggers: PHP EOL, server config drift, OPcache saturation, and SSL expiry (30, 14, 7-day warnings).
  • Weekly executive health digest delivered every Monday morning.
  • 1-Click 'Test Webhook' and 'Test Email' to verify delivery instantly.
Part 4 · Logs & Intelligence• Section 27
Pro

27. Client Audit Reports & White-Labeling

Where:phpinfo() WP > Reports & Logs > Audit Report

For agencies and freelancers maintaining client websites, this generates a polished executive health audit report proving maintenance value.

Key Details & Telemetry
  • Consolidates Config Grader score, PHP EOL status, security headers, database autoload health, OPcache, and SSL into one page.
  • Print / Save as PDF with dedicated print-optimized stylesheet.
  • Full white-labeling (Unlimited & Lifetime plans): Custom agency name, logo from Media Library, custom brand accent color, and custom footer copyright.
Part 4 · Logs & Intelligence• Section 28
Free

28. Admin Bar Health Scoreboard

Where:Top WordPress admin toolbar across every wp-admin screen

Monitor server health and memory headroom without having to navigate to the plugin dashboard.

Key Details & Telemetry
  • Color-coded pill in admin toolbar showing server health grade and current peak RAM usage.
  • Hover dropdown panel: Health grade, uptime streak, peak memory vs limit, OPcache hit rate with 1-click 'Flush OPcache' button, and top urgent triage issue.
  • 'Copy Markdown System Spec' copies full server telemetry ready for support tickets.
  • Dashboard widget on the main WordPress admin dashboard.
Playbooks & Checklists

Your 5-Minute Weekly Check

A quick routine to ensure your WordPress host and server operations stay in peak condition.

  1. Open phpinfo() WP > Dashboard. Note the overall health grade.
  2. Open the top triage card. Fix it with 1-click Auto-Fix or note why you are leaving it.
  3. Review Update Guard before pressing any plugin or theme update button.
  4. Skim the Admin Security Log for unrecognized logins or failed authentication bursts.
  5. Verify SSL countdown has > 30 days and WP-Cron has 0 overdue tasks.
Playbooks & Checklists

Before You Change Your PHP Version

Safe step-by-step checklist to upgrade PHP runtimes without white screens or downtime.

  1. Check the PHP EOL screen to confirm your current version is approaching or past EOL.
  2. Run the PHP Compatibility Scanner targeting the new PHP version (e.g. 8.3 or 8.4).
  3. Update or replace every plugin flagged in red for breaking syntax.
  4. Take a Config Snapshot and create a full database/site backup.
  5. Switch the PHP version in your hosting control panel.
  6. Open homepage, wp-admin login, and main forms in an incognito window. Check Live Error Log.
Playbooks & Checklists

My Site Just Broke After an Update

Emergency troubleshooting procedure when an update triggers fatal errors or crashes.

  1. Open Update History and review the automated 60-second post-update health check.
  2. Open Live PHP Error Log and search for the updated plugin's name to see the fatal trace.
  3. Start Troubleshooting Mode to isolate the issue to your admin session without affecting visitors.
  4. Roll back the plugin to the previous working version or contact the author with the exact error line.
Playbooks & Checklists

My Site Is Running Slow

Step-by-step performance triage to identify server bottlenecks and database drag.

  1. Check Dashboard for Peak RAM meter and database Autoload gauge.
  2. Open OPcache. Verify the hit rate is above 95%.
  3. Open Database screen. Purge expired transients and check largest autoload rows.
  4. Open External API Monitor. Check if a third-party gateway or license server is timing out.
  5. Open Object Cache. If running WooCommerce, verify Redis persistent caching is active.
Playbooks & Checklists

Emails Are Not Arriving

Diagnose password reset, order notification, and form email delivery issues.

  1. Open Mail screen and audit SPF, DKIM, DMARC, and MX records.
  2. Send a test email directly from wp-admin to test SMTP transport.
  3. If using plain PHP mail(), install an SMTP plugin connected to a dedicated sending provider.
  4. Ensure all contact forms use a 'From' address belonging to your verified domain (no @gmail.com addresses).
Playbooks & Checklists

When to Contact Your Host

Clear guidelines on when an issue requires hosting provider intervention vs what you control.

Key Details & Telemetry
  • Contact your host when a setting is Host-Locked and your site actually runs out of memory or execution time.
  • Contact your host when OPcache or Redis extensions are missing from the server runtime.
  • Contact your host when Config Snapshots reveal a regressive drift (e.g. host lowered your limits without notice).
  • On the Config Grader, click 'Copy Diagnostic Report for Your Host' and paste the formatted markdown directly into your support ticket.
Playbooks & Checklists
Free + Pro data

WP-CLI Headless Automation & Provisioning

Where:Terminal / SSH: wp phpinfowp

For DevOps, agencies, and CI/CD pipelines, phpinfo() WP provides native WP-CLI commands for zero-touch provisioning and headless license automation without logging into wp-admin.

Key Details & Telemetry
  • Headless license activation: Activate and bind Pro licenses during server provisioning or site cloning.
  • Zero-network wp-config.php constant support: Define PHPINFOWP_LICENSE_KEY in wp-config.php for instant, WAF-immune verification.
  • Scriptable exit codes: Ideal for Ansible, Trellis, Terminus, Docker, or bash deploy scripts.

How to automate via bash or SSH

  1. SSH into your server and navigate to your WordPress root directory.
  2. Run `wp phpinfowp license status` to check the current license tier.
  3. Run `wp phpinfowp license activate <key>` to unlock Pro diagnostics instantly.
  4. In automation scripts, check the return code ($?) — 0 on success, non-zero on invalid key.
Available WP-CLI Commands
CommandDescriptionExample
wp phpinfowp license activate <key>Validates and activates a Pro license key for the current site.wp phpinfowp license activate PIWP2-eyJ...
wp phpinfowp license deactivateDeactivates the active license and returns the site to Free tier.wp phpinfowp license deactivate
wp phpinfowp license statusDisplays license status, tier, registered email, and expiration in a formatted terminal table.wp phpinfowp license status
Docker & Staging Automation
Add define('PHPINFOWP_LICENSE_KEY', 'your-key'); to wp-config.php to automatically activate Pro during container initialization without running any commands or making network requests.
phpinfo() WP - a product by Exeebit · built by @s4gor · © 2026
DocsChangelogImpressumPrivacyTermsRefundFree pluginSupportContact