Title: CSGaku Site State Check
Author: csgaku
Published: <strong>4. junija 2026</strong>
Last modified: 4. junija 2026

---

Tykače pytać

![](https://s.w.org/plugins/geopattern-icon/csgaku-site-state-check.svg)

# CSGaku Site State Check

 Wot [csgaku](https://profiles.wordpress.org/csgaku/)

[Sćahnyć](https://downloads.wordpress.org/plugin/csgaku-site-state-check.1.0.0.zip)

 * [Podrobnosće](https://hsb.wordpress.org/plugins/csgaku-site-state-check/#description)
 * [Pohódnoćenja](https://hsb.wordpress.org/plugins/csgaku-site-state-check/#reviews)
 *  [Instalacija](https://hsb.wordpress.org/plugins/csgaku-site-state-check/#installation)
 * [Wuwiće](https://hsb.wordpress.org/plugins/csgaku-site-state-check/#developers)

 [Podpěra](https://wordpress.org/support/plugin/csgaku-site-state-check/)

## Wopisanje

CSGaku Site State Check is a lightweight plugin for reviewing basic WordPress site
status from the admin area.

The plugin is designed for administrators and developers who want to check important
maintenance and security-related signals on demand. It does not automatically repair,
delete, or change site settings. It presents the current state so the site administrator
can decide what to review next.

CSGaku Site State Check does not use external API communication or external vulnerability
database lookups for its checks. It uses information available within the WordPress
site and server environment.

The plugin can run on PHP 7.4 or later, but PHP 8.2 or later is recommended.

Design principles:

 * No external API or external service communication for normal checks
 * No automatic repair
 * No automatic deletion
 * No automatic setting changes
 * No direct display of secret values or full file contents
 * Results organized by status and severity
 * Latest result, simple local history, and CSV export support

Main checks include:

 * PHP version
 * WordPress version
 * Site URL and home URL
 * SSL status
 * Sitemap
 * Debug settings
 * wp-config.php
 * .htaccess
 * index.php
 * wp-admin, wp-content, and wp-includes
 * Public access protection for debug.log
 * PHP execution prevention setting in uploads
 * wp-config.php structure and location
 * SALT constants
 * Administrator user count
 * Presence of the admin username
 * Older administrator accounts
 * Application passwords
 * Search engine visibility setting
 * XML-RPC status
 * Core, plugin, and theme update status
 * Inactive plugins
 * Unused theme candidates
 * 444 and 555 permissions under wp-content
 * uploads/YYYY/.htaccess and uploads/YYYY/MM/.htaccess

About obfuscation-related checks:

CSGaku Site State Check can review index.php for patterns that are sometimes associated
with obfuscation, such as base64, eval, gzinflate, long Base64-like strings, hex
escapes, and chr concatenation. If such patterns are found, they are shown as items
to review. They are not treated as final proof of malicious code by themselves.

About permissions:

The plugin checks 444 and 555 permissions under wp-content. These permissions may
be intentional in some environments, but they can also affect updates, deletion,
and maintenance work. When such items are found under themes, the plugin can note
that they may be intentional depending on the environment.

About uploads security:

The plugin checks whether uploads/.htaccess contains PHP execution prevention rules,
and it also checks for .htaccess files under uploads year/month folders. If relevant.
htaccess files are found in those locations, they are shown for review without displaying
file contents.

About CSV export:

The latest result can be exported as CSV with a UTF-8 BOM for compatibility with
spreadsheet applications. To reduce CSV formula injection risk, values starting 
with dangerous leading characters are escaped before export.

Important limitations:

 * This plugin is a confirmation tool.
 * It does not provide malware cleanup.
 * It does not provide automatic remediation.
 * It does not provide complete vulnerability assessment.
 * It does not guarantee detection of all issues.
 * Final review and response should be handled by the site administrator.

## Instalacija

 1. Upload the plugin files to the /wp-content/plugins/csgaku-site-state-check directory,
    or install the plugin through the WordPress plugins screen.
 2. Activate the plugin through the Plugins screen in WordPress.
 3. Open the CSGaku Site State Check menu in the admin area.
 4. Click Check Now to review the current site state.

## HSP

### What is CSGaku Site State Check for?

CSGaku Site State Check helps administrators review the current state of a WordPress
site from the admin area. It is suited to routine maintenance checks, pre-delivery
reviews, and periodic status checks.

### Does this plugin contact external services?

No. The plugin is designed not to communicate with external APIs or external services
as part of its normal checks.

### Does this plugin automatically change site settings?

No. CSGaku Site State Check does not automatically repair, delete, or change settings.
It displays the current state for administrator review.

### Does this plugin provide complete malware detection?

No. It does not provide complete malware diagnosis and does not guarantee detection
of all suspicious files or settings. It highlights items that may need administrator
review.

### If suspicious strings are found in index.php, does that mean the file is malicious?

Not necessarily. Strings such as base64, eval, or gzinflate can appear in obfuscated
code, but they may also appear in legitimate code depending on the environment. 
Results should be reviewed as indicators, not final judgments.

### Can this plugin replace a security plugin or monitoring service?

No. This plugin has a different role. CSGaku Site State Check is designed for on-
demand state confirmation from the admin area. It is not a firewall, not a real-
time monitoring service, and not an automatic protection system.

### What is included in the CSV export?

The CSV export includes the latest check result with fields such as checked_at, 
item name, status, severity, description, how to check, and recommended action.

### Does the plugin display passwords, SALT values, or email addresses?

No sensitive values are intended to be displayed directly. The plugin is designed
to show status, existence, or count information where appropriate, not secret contents
themselves.

### Why are 444 or 555 permissions checked?

These permissions may be intentional in some environments, but they can also affect
updates, deletion, and maintenance work. The plugin shows them so administrators
can confirm whether the setting is expected.

### Why does the plugin check uploads/.htaccess and year/month folders?

These checks help administrators review whether uploads-related restrictions and
file placement should be confirmed. The plugin does not display file contents and
does not automatically modify those files.

## Pohódnoćenja

Za tutón tykač pohódnoćenja njejsu.

## Sobuskutkowarjo a wuwiwarjo

„CSGaku Site State Check“ je softwara wotewrjeneho žórła. Slědowacy ludźo su k tutomu
tykačej přinošowali.

Sobuskutkowarjo

 *   [ csgaku ](https://profiles.wordpress.org/csgaku/)

[Přełožće „CSGaku Site State Check“ do swojeje rěče.](https://translate.wordpress.org/projects/wp-plugins/csgaku-site-state-check)

### Na wuwiću zajimowany?

[Přehladajće kod](https://plugins.trac.wordpress.org/browser/csgaku-site-state-check/),
hladajće do [SVN-repozitorija](https://plugins.svn.wordpress.org/csgaku-site-state-check/)
abo abonujće [wuwiwanski protokol](https://plugins.trac.wordpress.org/log/csgaku-site-state-check/)
přez [RSS](https://plugins.trac.wordpress.org/log/csgaku-site-state-check/?limit=100&mode=stop_on_copy&format=rss).

## Protokol změnow

#### 1.0.0

 * Initial release

## Meta

 *  Version **1.0.0**
 *  Last updated **4 měsacy**
 *  Active installations **Mjenje hač 10**
 *  WordPress version ** 6.0 abo nowši **
 *  Tested up to **7.0.7**
 *  PHP version ** 7.4 abo nowši **
 *  Language
 * [English (US)](https://wordpress.org/plugins/csgaku-site-state-check/)
 * Tags
 * [admin](https://hsb.wordpress.org/plugins/tags/admin/)[diagnostics](https://hsb.wordpress.org/plugins/tags/diagnostics/)
   [maintenance](https://hsb.wordpress.org/plugins/tags/maintenance/)[security](https://hsb.wordpress.org/plugins/tags/security/)
   [tools](https://hsb.wordpress.org/plugins/tags/tools/)
 *  [Rozšěrjeny napohlad](https://hsb.wordpress.org/plugins/csgaku-site-state-check/advanced/)

## Pohódnoćenja

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/csgaku-site-state-check/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/csgaku-site-state-check/reviews/)

## Sobuskutkowarjo

 *   [ csgaku ](https://profiles.wordpress.org/csgaku/)

## Podpěra

Chceće něšto prajić? Trjebaće pomoc?

 [Forum pomocy pokazać](https://wordpress.org/support/plugin/csgaku-site-state-check/)