=== Clicks Admin Toolkit ===
Contributors: sykologicist
Tags: admin enhancements, duplicate post, svg upload, disable xmlrpc, limit login attempts
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.1.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

139+ toggleable WordPress admin modules for security, speed, SEO, SMTP, WooCommerce, and UX. One plugin. Zero overhead.

== Description ==

**Clicks Admin Toolkit packs 139+ individually toggleable administration modules into a single, high-speed dashboard — replacing 20 to 30 single-purpose plugins you would otherwise install on every WordPress website.**

Most WordPress admin toolkits give you 10 or 20 features and lock the rest behind a paywall. Clicks Admin Toolkit ships **139+ production-ready modules across 10 categories** — every single module is 100% free, with zero upsells, zero locked features, and zero nag banners.

= The Problem Clicks Admin Toolkit Solves =

A typical WordPress installation ends up with dozens of single-purpose plugins:

* One plugin to duplicate posts and pages
* One plugin to upload SVGs safely
* One plugin for SMTP email delivery
* One plugin to limit login attempts and block brute force attacks
* One plugin to disable emojis and clean the HTML head
* One plugin for maintenance mode and coming soon screens
* One plugin to hide the WordPress version generator
* One plugin for 301 redirects and 404 tracking
* One plugin for broken link checking
* One plugin for image WebP compression
* One plugin for WooCommerce currency switching and cart drawers
* ...and dozens more!

Each of those plugins loads its own CSS, JavaScript, admin menus, background queries, and update checkers on **every single request**. The result? A bloated, cluttered WordPress admin that takes seconds to respond, degrades server performance, and creates maintenance headaches.

**Clicks Admin Toolkit replaces them all with one lightweight suite that uses exactly one database query.**

= Zero-Overhead High-Performance Architecture =

* **Zero-Overhead Conditional Loading**: When a module is toggled OFF, its PHP file is never included, its class is never instantiated, and zero WordPress filter or action hooks are registered. Your server consumes literally zero CPU or RAM for inactive tools.
* **Single Autoloaded Database Record**: All 139+ module states and their configuration drawers are stored in one single `wp_options` row (`sasuite_settings`). Whether you enable 5 modules or all 139, the database footprint is identical: exactly one autoloaded row during WordPress bootstrap.
* **Pure Native WordPress APIs**: Built using native WordPress Media Library, Settings API, Transients API, and WP_Filesystem. No external dependencies, no jQuery bloat, and no arbitrary PHP execution engines.

= 7 Executive Dashboard Widgets (wp-admin/index.php) =

Clicks Admin Toolkit includes 7 real-time monitoring and management widgets embedded directly on your main WordPress dashboard:

1. **File Change & Integrity Radar**: Monitors core WordPress files, active themes, and plugins against SHA-256 baseline hashes with 1-click re-scan.
2. **Brute-Force & Login Security Radar**: Displays throttled brute-force IPs, failed login counts, and provides 1-click unblock actions.
3. **Outbound Mail Deliverability Monitor**: Tracks total dispatched vs failed emails, SMTP connectivity health, and links to detailed logs.
4. **Administrative Activity Stream**: Chronological audit trail showing post edits, user role updates, plugin toggles, and login events.
5. **Broken Links Sentinel**: Summarizes 404 links, broken external hyperlinks, and offers background crawler triggers.
6. **Database Health Inspector**: Real-time overview of database overhead, transient bloat, and 1-click optimization cleanup.
7. **REST API Traffic & Rate Limiter Monitor**: Live 24-hour counter of REST requests and blocked abusive scrapers.

= 1-Click Starter Preset Packs =

Get up and running in 2 seconds with curated, battle-tested configuration packs:

* **Agency Client Starter**: Cleans wp-admin, suppresses update nags for non-admins, enables duplicate post, clean filenames, and white-labels the backend.
* **Maximum Security Shield**: Enforces REST rate limiting, honeypot antispam, user enum blocking, XML-RPC disabling, login attempt limits, and file integrity scanning.
* **Speed & Core Web Vitals**: Strips emojis, head junk, and query strings; throttles Heartbeat; enables native image lazy-loading and script deferral.
* **High-Converting Store Pack**: Direct checkout, sticky buy bar, free shipping progress bar, low-stock alerts, and quick order notes.

= Complete Breakdown of All 139+ Modules by Category =

**Content & Media (22 modules)**

* Duplicate Post / Page / CPT — 1-click clone action for any post, page, or custom post type into draft status.
* Safe SVG Uploads & Sanitizer — Enables SVG uploads while purifying XML with DOMDocument to strip malicious scripts.
* Media File In-Place Replacement — Replace any image or media file in-place without changing its attachment ID or breaking links.
* Media Library Categories & Taxonomies — Adds category and tag organization with filter dropdowns to the WordPress Media Library.
* Restrict Media Library to Own Uploads — Non-administrators only see media files they uploaded themselves in the grid/modal.
* Drag & Drop Post Reordering — Intuitive AJAX-based drag-and-drop row sorting for posts, pages, and custom post types.
* Enable Page Excerpts — Adds native excerpt support and meta box to standard WordPress pages.
* External Links in New Tab — Automatically attaches target="_blank" and rel="noopener noreferrer" to external links.
* Automatic Image Alt & Title Fallback — Automatically populates empty image alt and title attributes using the parent post title.
* Clean Image Filename Sanitizer — Converts messy upload filenames (e.g. IMG_001.JPG) into clean, lowercase, SEO-friendly slugs.
* Scheduled Content Publishing Calendar — Visual interactive drag-and-drop calendar view for scheduled, draft, and published editorial posts.
* Bulk Image Compression & WebP Converter — Automatic on-upload compression with WebP generation and batch converter for existing media.
* Broken Link Checker & Crawler — Background WP-Cron crawler checking hyperlinks via non-blocking requests with 1-click unlink.
* 301/302 Redirect Manager & 404 Monitor — High-performance redirection engine with auto-redirects on post slug updates and 404 logging.
* Password-Protected Pages Enhancement — Replaces default lock screen with a branded layout, site logo, custom hint, and 24h cookie memory.
* Disable Gutenberg Per Post Type — Restore the Classic Editor selectively on specific post types while keeping Block Editor active elsewhere.
* Lightweight Social Share Buttons — Zero-dependency inline SVG share buttons (X, Facebook, LinkedIn, WhatsApp, Email) without tracking scripts.
* Reading Time Estimator Badge — Calculates word count and displays a clean reading duration badge on blog articles.
* Custom Post Status Manager — Registers editorial workflow statuses (In Review, Client Approved) with list table badges.
* Media EXIF & GPS Metadata Stripper — Automatically sanitizes uploaded photos by stripping private camera metadata and geolocation coordinates.
* Automatic Image Watermarking — Automatically apply an agency or store watermark logo to uploaded photos.
* Smart 404 Auto-Redirect to Closest Match — Automatically redirects broken URLs to the closest published post match using slug similarity.

**Admin UI & Menus (11 modules)**

* Admin Menu Organizer — Rename, reorder, hide menu items, or restrict specific menu links by user role.
* Admin Bar / Toolbar Cleaner — Hide WordPress logo, comment bubbles, update counters, and "Howdy" greeting.
* Custom Admin Favicon — Set a dedicated, custom favicon specifically for the WordPress admin dashboard.
* Custom Admin Columns Manager — Add Post ID, Featured Image Thumbnail, Word Count, and Slug columns to list tables.
* Show Last Modified Date & Author — Displays the last edited timestamp and editor username in all post list tables.
* Sticky List Table Headers — Keeps column headers fixed at the top of the viewport when scrolling long list tables.
* Wider Admin List Tables — Expands table layout to full width on modern widescreen (1080p/4K) monitors.
* Admin Footer Customizer — Change or remove "Thank you for creating with WordPress" text and version number.
* Admin Dark Mode — Sleek, modern dark mode theme toggle for the WordPress dashboard with high-contrast accents.
* Custom Admin Bar Quick Links — Add custom navigation links, documentation shortcuts, or client support links to the top bar.
* Admin Bookmark & Favorites Sidebar — Pin favorite admin pages with star icons for rapid navigation in a dedicated panel.

**Dashboard & Notices (11 modules)**

* Admin Notice Drawer — Collect all third-party plugin notices into a slide-out drawer or hide them entirely.
* Disable Admin Notices by User Role — Hide non-critical plugin notices for non-administrator roles (Editors, Authors, etc.).
* Disable Gutenberg Fullscreen by Default — Prevents the Block Editor from auto-maximizing, keeping the admin sidebar visible.
* Disable Default Dashboard Widgets — Turn off Welcome Panel, Quick Draft, WordPress Events, and Site Health default widgets.
* Custom Dashboard Message Widget — Create custom rich-text welcome boxes, onboarding guides, or announcements on dashboard.
* Highlight Duplicate Post Titles — Displays a visual warning badge on post list tables whenever two posts share the same title.
* Disable Gutenberg Block Directory — Prevents the block inserter from searching third-party plugin blocks from WordPress.org.
* Admin Quick Search in Toolbar — Instant live search input in the top admin bar to jump to any menu, setting, post, or page.
* Disable Core Update Nag for Non-Admins — Hides the "WordPress X.X is available" update banner for non-admin user roles.
* Quick Frontend/Backend Switcher — Adds an unobtrusive button for logged-in admins to jump between frontend and post editor.
* Custom Admin Broadcast Notice Creator — Broadcast dismissible announcement notices across the admin targeted by user role.

**Login, 2FA & Access (14 modules)**

* Custom Login URL (Rename wp-login.php) — Protects against automated brute force by mapping login to a secret slug.
* Custom Login Page Styler — Customize login logo, background color/image, button styling, and form borders safely.
* Limit Login Attempts & IP Lockout — Automatically lock out IP addresses after X failed attempts with custom lockout logs.
* Login with Email Only or Username Only — Enforce specific login identifier rules to prevent username guessing.
* Role-Based Login Redirects — Automatically redirect users to custom URLs (Shop, Dashboard) based on their role upon login.
* Role-Based Logout Redirects — Send users to a custom destination URL upon logging out.
* Two-Factor Authentication (2FA TOTP) — 100% free TOTP 2FA for Google Authenticator, Authy, and 1Password apps.
* Emergency 2FA One-Time Recovery Codes — Generates emergency backup recovery codes in case the authenticator app is lost.
* Hide "Lost your password?" & "Back to blog" — Clean login screen options to simplify the user interface.
* Auto-Logout Inactive User Sessions — Automatically log out inactive users after a configurable duration (e.g., 30 mins).
* Login Page reCAPTCHA & Cloudflare Turnstile — Integrates privacy-first Turnstile or reCAPTCHA v3 on Login and Registration forms.
* One-Time Secret Login / Magic Links — Generate cryptographic, single-use authentication links for contractor or client handoffs.
* Admin Login Lockout Countdown Display — Displays an animated real-time countdown timer on wp-login.php when an IP is throttled.
* Session Timeout & Inactivity Warning Modal — Displays interactive countdown modal before session expires with 1-click Stay Logged In button.

**Security & Hardening (15 modules)**

* Disable XML-RPC — Block xmlrpc.php to prevent pingback DDoS, trackback spam, and brute-force attacks.
* Hide WordPress Version — Strip the generator meta tag from <head>, RSS feeds, and script query strings.
* Disable File Editor — Disallow in-browser theme and plugin file editing (DISALLOW_FILE_EDIT).
* Anti-Spam Honeypot for Comments — Invisible honeypot field that catches automated bots without annoying user CAPTCHAs.
* Block Author Enumeration Scans — Block /?author=N scans and REST API user lookups that expose author usernames.
* Restrict REST API to Logged-in Users — Lock down REST API endpoints against scrapers while whitelisting core routes.
* Email Alert on Admin Login from New IP — Receive instant email notifications whenever an administrator logs in from a new IP.
* Obscure Login Error Messages — Displays a generic "Invalid credentials" error message on failed logins.
* Disable Self-Pingbacks & Trackbacks — Stop WordPress from sending pingbacks to its own internal links when publishing.
* Disable Application Passwords for Non-Admins — Turn off application password generation if API authorization is not needed.
* Content Security Policy (CSP) Manager — GUI to construct compliant Content-Security-Policy, X-Frame-Options, and referrer headers.
* File Change Detection & Integrity Monitor — Generates SHA-256 baselines of core, active theme, and plugins with change alerts.
* Right-Click & Copy Content Protection — Lightweight script disabling right-click context menu, text selection, and inspector shortcuts.
* REST API Rate Limiter & Abuse Protector — Monitors and throttles excessive requests to /wp-json/ returning HTTP 429 status.
* Disposable & Temporary Burner Email Blocker — Blocks account registrations and orders using burner disposable email domains.

**Performance & Cleaner (11 modules)**

* Disable Emojis & Styles — Remove core emoji scripts, styles, and DNS prefetch tags to save HTTP requests.
* Heartbeat API Frequency Controller — Adjust heartbeat frequency (60s, 120s) or disable it completely on frontend/dashboard.
* Limit or Disable Post Revisions — Set a custom max number of revisions (e.g. 3, 5) per post type to keep DB lean.
* Autosave Interval Modifier — Increase post autosave interval (e.g. 120s, 300s) to reduce continuous server write load.
* Clean Up <head> Junk — Remove RSD link, WLW manifest link, shortlinks, and adjacent post links.
* Disable RSS / Atom Feeds — Cleanly disable RSS feeds with a redirect to homepage if the site publishes no feeds.
* Defer Non-Essential JavaScript — Automatically attach defer attributes to selected frontend scripts to boost PageSpeed.
* Remove Query Strings from Static Assets — Strip ?ver=x.x.x from CSS/JS URLs to improve proxy and CDN caching.
* Disable Dashicons on Frontend — Prevents loading dashicons.min.css on public frontend for logged-out visitors.
* Disable Legacy jQuery Migrate — Removes jquery-migrate.min.js on modern themes that do not require legacy jQuery.
* Native Lazy Load Images & Iframes — Injects native loading="lazy" on all content images, post thumbnails, and iframes.

**WooCommerce Polish (19 modules)**

* Disable WooCommerce Marketplace Nags — Remove marketplace suggestions, inbox tips, and promotional banners in WP Admin.
* Show Product Thumbnail & SKU in Orders — Displays product thumbnail images and SKUs directly in the Orders admin table.
* Direct Checkout / Skip Cart Page — Redirect "Add to Cart" clicks directly to the Checkout page for frictionless purchasing.
* Auto-Complete Virtual & Downloadable Orders — Automatically mark virtual/downloadable orders as Completed upon payment.
* Hide Other Shipping when Free Shipping Active — Automatically clean up checkout options when free shipping is unlocked.
* Custom "Add to Cart" Button Text — Change button text globally or by product type (e.g., "Buy Now", "Order Today").
* One-Click "Empty Cart" Button — Add a 1-click "Empty Cart" button to the WooCommerce Cart page.
* Delete Expired Coupons & Abandoned Cart Transients — 1-click cleanup utility for expired promotions and abandoned cart records.
* Custom Currency Symbol & Position Modifier — Modify currency display formatting without touching code or filter hooks.
* Custom "Thank You" Redirection — Redirect customers to custom landing pages after purchasing specific items.
* WooCommerce Quick Order Notes — Adds an Order Notes column with inline modal to add private notes without leaving list.
* WooCommerce Low Stock Alert System — Dispatches automated email notifications to store administrators when inventory falls below threshold.
* WooCommerce Minimum Order Amount — Prevents checkout if cart subtotal is under threshold with cart notice.
* WooCommerce Sticky "Buy Now" Mobile Bar — Fixed checkout bar along the bottom of screens appearing after scrolling past Add to Cart.
* GeoIP Multi-Currency Switcher — Auto-detect customer country and convert prices seamlessly with floating currency selector.
* Free Shipping Progress Bar — Live calculated free shipping progress bar with real-time cart fragments calculation.
* Slide-Out Cart Drawer — Slide-out AJAX mini-cart drawer opening on Add to Cart with 1-click checkout.
* WooCommerce Test Order Generator — Generate 1-10 mock test orders in 1 click for testing fulfillment and webhooks.
* WooCommerce Custom Order Statuses — Registers custom order workflow statuses (Awaiting Pickup, Shipped via Courier).

**User Roles & Control (10 modules)**

* User Last Login Timestamp & IP Column — Adds a "Last Login" date and IP column to the WordPress Users list table.
* Force Password Change on Next Login — Flag specific users or roles to require a password update immediately on next login.
* Disable New User Registration Admin Email — Stop receiving notification emails every time a new user registers.
* Hide Admin Bar for Specific Roles — Turn off top admin bar on frontend for Subscribers, Customers, or Editors.
* Restrict /wp-admin/ Access by Role — Redirect non-admin users to frontend or account page if they attempt to access WP Admin.
* Secure 1-Click User Switcher — Allows administrators to safely view the site as another user with a Switch Back bar.
* Custom User Display Name Enforcer — Automatically format display names (First Name + Last Name) in public posts/comments.
* Terminate All Other Active Sessions — Allows admins to log out all other active sessions for any user account with one click.
* Prevent Password Reset for Restricted Roles — Disable password resets for non-admin accounts on closed membership portals.
* Default User Registration Role Override — Force specific default roles for newly registered accounts with verification.

**Email & Notifications (11 modules)**

* Built-in SMTP Mailer — Custom SMTP host, port, encryption, and authentication to guarantee email deliverability.
* Site-wide "From Name" & Email Override — Enforce a professional sender name and address across all outbound emails.
* Outbound Email Logger & Body Preview — Log all outbound wp_mail() emails with delivery status, headers, recipients, and subject.
* One-Click Live SMTP Test Email Sender — Instant SMTP diagnostic tool to test mail server connectivity and send test emails.
* Clean HTML Email Wrapper Template — Automatically wrap all default plain-text WordPress emails in a sleek HTML template.
* Disable Auto-Update Notification Emails — Stop receiving automated emails every time WordPress core, themes, or plugins update.
* Disable Comment Moderation Emails — Suppress comment notification emails to site administrators.
* Notify Admin on User Profile / Email Change — Send security alerts when any user email address or profile is modified.
* BCC Administrator on Specific System Emails — Automatically blind-copy site admins on important customer notifications.
* Custom Email Header & Logo Styler — Insert your agency or store logo into the header of outbound WordPress emails.
* Granular System Email Suppression — Suppress specific automated system emails (password resets, user registrations, core updates).

**Utilities & Maintenance (15 modules)**

* Stylish Maintenance & Coming Soon Mode — Activate a stylish maintenance screen with custom message and IP/Role whitelist.
* Password Protect Entire Website — Put the entire website behind a single master password with custom session expiry.
* System Health & Server Inspector — Complete overview of PHP memory limit, extensions, MySQL version, and limits.
* 1-Click Database & Transient Cleaner — 1-click cleanup for expired transients, spam comments, trash, and orphaned metadata.
* Safe Database Search & Replace Tool — Safe string search and replace utility with full serialized data handling and dry run.
* Admin Activity Audit Log — Log important admin events (plugin toggles, user edits, setting modifications).
* Floating Scroll to Top Button — Add a smooth, customizable back-to-top button in both Admin and public frontend.
* Clear Object Cache Quick Button — Instant cache-flushing action directly in the top admin toolbar.
* HTTP 503 Header for Maintenance Mode — Send proper HTTP 503 Service Unavailable headers during maintenance.
* Settings JSON Backup & Instant Import — Export the entire plugin configuration as a JSON file and import it anywhere in 1 second.
* Scheduled Database Cleanup (Cron) — Automated background maintenance for transients, spam, trashed posts, and orphaned metadata.
* Cookie Consent & GDPR Banner — Lightweight, accessible GDPR/CCPA cookie banner with customizable text and decline button.
* Multisite Network Module Synchronizer — For Multisite networks: push module configurations to all network sub-sites with 1 click.
* Automatic Plugin Rollback on Fatal Error — Automated failsafe against WSOD caused by faulty plugin updates with recovery alert.
* 1-Click Database Backup to GZ & Email — Create instant compressed database backups with optional dispatch to administrator email.

= Enterprise-Grade Security Built In =

Every single module strictly complies with WordPress.org coding standards:

* **HMAC SHA-256 Cryptographic Tokens** for user switching — mathematically prevents session hijacking and token spoofing.
* **DOMDocument XML Sanitizer** for SVG uploads — parses with LIBXML_NONET to neutralize XXE, SSRF, and embedded scripts.
* **WP_Filesystem API** for all disk operations — no risky functions like move_uploaded_file() or eval().
* **Strict Nonce & Permission Checks** on every AJAX action and setting save.
* **Complete Output Escaping** (esc_html, esc_attr, esc_url, wp_kses_post) across every rendered view.

= Who Is This Plugin For? =

* **Agencies & Freelancers**: Configure your preferred stack of admin tweaks once, export the JSON preset, and deploy across hundreds of client websites in seconds.
* **WooCommerce Merchants**: Speed up conversions with direct checkout, mobile sticky buy bars, free shipping progress bars, multi-currency pricing, and slide-out cart drawers.
* **Publishers & Bloggers**: Organize media with taxonomies, replace images in-place, plan content with a visual editorial calendar, and clean up post titles.
* **Security & Performance Enthusiasts**: Harden logins with 2FA TOTP, rename wp-login.php, throttle REST abuse, and eliminate script bloat.

= 100% Free. No Upsells. No Paywalls. =

Clicks Admin Toolkit is 100% free software under the GPLv2 license. There is no "Pro" version, no locked features, no trial periods, and no upgrade banners.

= Built by Clicks =

Clicks Admin Toolkit is developed and maintained by **Rayhan Bajwa** ([@rayhan.bajwa on Instagram](https://instagram.com/rayhan.bajwa)) and the team at **[Clicks](https://clicks.com.pk)** — a digital agency specializing in WordPress development, performance engineering, and WooCommerce enterprise solutions.

* **Website:** [clicks.com.pk](https://clicks.com.pk)
* **Instagram:** [@rayhan.bajwa](https://instagram.com/rayhan.bajwa)
* **Plugin Homepage:** [clicks.com.pk/clicks-admin-toolkit](https://clicks.com.pk/clicks-admin-toolkit)

== External services ==

This plugin conditionally connects to the following third-party services only if the administrator explicitly enables the respective module:

1. **Cloudflare Turnstile** (Optional — Login CAPTCHA module)
* **Domain:** `https://challenges.cloudflare.com`
* **Purpose:** Provides privacy-preserving bot and abuse protection on the login, registration, and lost password screens when Cloudflare Turnstile is selected in module settings.
* **Data sent:** Cryptographic challenge token, client IP address, and site verification key.
* **Terms of Service:** https://www.cloudflare.com/terms/
* **Privacy Policy:** https://www.cloudflare.com/privacypolicy/

2. **Google reCAPTCHA** (Optional — Login CAPTCHA module)
* **Domain:** `https://www.google.com`
* **Purpose:** Provides automated spam and bot protection on the login, registration, and lost password screens when Google reCAPTCHA is selected in module settings.
* **Data sent:** User interaction response token, client IP address, and site verification key.
* **Terms of Service:** https://policies.google.com/terms
* **Privacy Policy:** https://policies.google.com/privacy

== Installation ==

1. Upload the `clicks-admin-toolkit` folder to the `/wp-content/plugins/` directory, or install directly via **Plugins > Add New > Upload Plugin**.
2. Activate the plugin through the **Plugins** screen in WordPress.
3. Navigate to **Clicks Admin Toolkit** in your WordPress admin sidebar.
4. Toggle any of the 139+ modules ON, configure its options in the slide-out drawer, and click **Save Changes**.
5. Use **Ctrl+K** or the search bar to instantly find any tool.

== Frequently Asked Questions ==

= How many modules does Clicks Admin Toolkit include? =
Clicks Admin Toolkit includes 139+ individually toggleable modules across 10 categories: Content & Media (22), Admin UI & Menus (11), Dashboard & Notices (11), Login, 2FA & Access (14), Security & Hardening (15), Performance & Cleaner (11), WooCommerce Polish (19), User Roles & Control (10), Email & Notifications (11), and Utilities & Maintenance (15).

= Does activating dozens of modules slow down my site? =
No! The plugin uses a zero-overhead conditional loader. Disabled modules are never loaded into PHP memory — their files are never included and their hooks are never registered. All settings are stored in a single autoloaded database row, so enabling 1 module or 139 modules costs the exact same: one lightweight database query.

= Is it compatible with WooCommerce? =
Yes! Category 7 includes 19 dedicated WooCommerce modules (GeoIP multi-currency switcher, slide-out cart drawer, sticky buy bar, free shipping progress bar, direct checkout, custom order statuses, quick order notes, etc.). These modules only run when WooCommerce is active.

= Can I export my configuration and import it on another site? =
Yes! Use the built-in Settings Export & Import modal or 1-Click Starter Presets to copy your entire configuration as a JSON string and import it onto any WordPress site running Clicks Admin Toolkit.

= Does this plugin run arbitrary PHP code or use eval()? =
No. In strict compliance with WordPress.org security policies, this plugin does not use eval(), exec(), shell_exec(), move_uploaded_file(), or arbitrary code evaluation.

= Is PHP 8.x and WordPress 7.x supported? =
Yes! Fully tested and verified on PHP 7.4 through 8.3+ and WordPress 6.0 through 7.1+.

= What happens if I deactivate the plugin? =
All behaviors cleanly revert to WordPress defaults. No core files, tables, or posts are modified. Your settings remain safely preserved in the database if you reactivate later.

= Is there a paid or Pro version? =
No. All 139+ modules are 100% free and fully unlocked with zero restrictions, zero upsells, and zero advertisements.

== Screenshots ==

1. **Modular Dashboard with 139+ Tools** — All modules organized across 10 tabbed categories with instant toggle switches and configuration drawers.
2. **Native Media Library Configuration Drawers** — Slide-out option panels with WordPress Media Library pickers, color inputs, and live previews.
3. **Admin Notice Drawer & Bell Tray** — Floating notification bell that captures all third-party plugin nags and banners into a clean slide-out tray.
4. **Maintenance Mode & Site Password Gates** — Stylish frontend access screens with custom branding, HTTP 503 headers, and master password protection.
5. **Database Optimizer & Transient Cleaner** — One-click AJAX cleanup for expired transients, spam comments, trashed posts, and orphaned metadata.
6. **Built-in SMTP Mailer & Live Test Sender** — Complete outbound email configuration with SSL/TLS encryption and instant diagnostic test emails.

== Changelog ==

= 1.1.0 =
* Major expansion: Added 39 new production-grade modules, expanding the toolkit to 139+ tools.
* Added 7 Executive Dashboard Widgets on wp-admin: File Change Monitor, Login Radar, Outbound Mail Deliverability, Activity Stream, Broken Link Checker, Database Health Inspector, and REST Rate Limiter.
* Added 1-Click Starter Preset Packs: Agency Starter, Maximum Security Shield, Speed & Core Web Vitals, and High-Converting Store Pack.
* Added GeoIP Multi-Currency Switcher with live exchange rate sync and customizable currency flags.
* Added WooCommerce Conversions suite: Slide-Out Cart Drawer, Sticky Buy Now Bar, Free Shipping Progress Bar, Custom Order Statuses, and Quick Order Notes.
* Added Advanced Security modules: REST API Rate Limiter, File Integrity & Change Monitor, Disposable Email Blocker, Content Security Policy (CSP) Manager, and Session Timeout Inactivity Modal.
* Added Content & Workflow tools: Editorial Publishing Calendar, Smart 404 Auto-Redirects, 301/302 Redirect Manager, Broken Link Checker, and Image Lossless Compressor.
* Added Maintenance & Reliability tools: Automated Scheduled DB Optimizer, Database Backup & Snapshot Generator, and Plugin/Theme Auto-Rollback safeguard.
* Added interactive "What's New in v1.1.0" announcement modal with 1-click dismiss.
* Enhanced Limit Login Attempts with dedicated IP Whitelisting and lockout countdown on wp-login.php.
* Verified 100% WordPress.org coding standard compliance with zero security flags.

= 1.0.3 =
* Initial public release with 100+ free modular administration tools.
* 10 organized categories: Content, Admin UI, Dashboard, Login, Security, Performance, WooCommerce, Users, Email, Utilities.
* Zero-overhead conditional module loader — disabled modules are never loaded.
* Single autoloaded database row for all 100+ module configurations.
* DOMDocument SVG XML sanitizer with LIBXML_NONET XXE prevention.
* HMAC SHA-256 cryptographic tokens for secure user switching.
* Native WordPress Media Library integration for all image/asset fields.
* Full WordPress.org automated review compliance.
* PHP 7.4 – 8.3 and WordPress 6.0 – 7.1+ compatibility.

== Upgrade Notice ==

= 1.1.0 =
Major feature upgrade: 39 new modules (139+ total), 7 executive dashboard widgets, 1-click starter presets, GeoIP multi-currency switcher, slide-out cart drawer, REST rate limiter, and scheduled DB cleanup. Seamless upgrade with no breaking changes.

= 1.0.3 =
Initial stable release. Install to access 100+ zero-overhead modular WordPress administration, security, speed, and WooCommerce tools — all completely free.
