WordPress and Joomla Toolkits

The toolkits find every WordPress and Joomla installation on your account, say what state each one is in, and act on many of them at once.

• WordPress Toolkit — /wordpress
• Joomla Toolkit — /toolkit/joomla

Discovery does not read the panel's own list of sites. It walks your document roots looking for a wp-config.php, and for a configuration.php that holds a JConfig class — so an installation somebody uploaded over SFTP is found the same way one the panel installed is. A deep scan runs the site's own CLI once per installation and asks upstream whether each plugin has an update, so an account with many sites takes minutes rather than seconds.

Every action is written to run against a list of installations rather than one. Select the installations you want and apply the action to all of them.

Security​

The Security tab applies web-server hardening rules to the selected installations, and shows which rules are currently active. The rules themselves are written by hitechcloudcli websites-secure (WordPress) and hitechcloudcli toolkit-harden (Joomla).

Staging​

Create staging makes a copy of an installation on a staging address so you can try a change on it. Push to production copies the staging copy back over the live site.

Single-site tabs​

On a WordPress site's own page (/website?domain=...) the tabs are Overview, Options, Maintenance, Security & Debug, Updates, Backups, Staging & Hardening, Clone and Remove. Debugging lives at the bottom of Security & Debug and the hardening switches at the bottom of Staging & Hardening; links to the old ?tab=debugging and ?tab=hardening addresses still open the right tab and scroll to the section. The tab bar scrolls sideways on a narrow screen rather than wrapping.

wp-cli and composer​

When the services run on the host, the installer puts wp (wp-cli) and composer in /usr/local/bin, fetched from the mirror (HITECHCLOUD_MIRROR) or, failing that, from the vendors' own release URLs; both are PHP archives and run on amd64 and arm64 alike. The panel and hitechcloudcli toolkit-wp run them as the site's own account with the site's PHP. wp-root is the same wp-cli with --allow-root, for an administrator at the console. Put a specific wp-cli at /etc/hitechcloud/wordpress/wp-cli.phar to pin the version every site is driven with.