=== Admin Optimizer – Performance, Security & Site Cleanup ===
Author URI: https://damienoh.com
Plugin URI: https://www.adminoptimizer.com/
Tags: performance, security, seo, database, optimization
Contributors: yipresser, damienoh
Requires at least: 5.9
Requires PHP: 8.1.0
Tested up to: 7.1
Stable tag: 3.0.0
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

All-in-one WordPress toolkit for performance, security, SEO, content, media, users, and site management — without the plugin bloat.

== Description ==

Admin Optimizer is an all-in-one WordPress toolkit for improving performance, strengthening security, managing content, handling SEO, and simplifying everyday site administration — without installing a separate plugin for every task.

Clean your database, manage redirects, protect your login, configure SEO metadata, send email through SMTP, add custom code, create forms, manage users, build custom post types, and more from one integrated toolkit.

Admin Optimizer is organized into focused sections so you can quickly find the tools you need. Larger modules can be enabled or disabled individually, while smaller controls are grouped with the area of WordPress they affect.

Key highlights:

- Improve WordPress performance and clean unnecessary database data
- Strengthen login security and apply practical WordPress hardening
- Manage SEO metadata, redirects, sitemaps, robots.txt, and indexing controls
- Manage content workflows and common editor behaviour
- Organize and maintain the WordPress Media Library
- Add custom post types, taxonomies, statuses, and custom fields
- Manage users, roles, capabilities, and access
- Send WordPress email reliably through SMTP
- Add custom CSS, JavaScript, HTML, and PHP without editing theme files
- Build forms and collect submissions
- Track site traffic without a separate analytics plugin
- Connect AI providers to access supported Admin Optimizer Pro features
- Migrate supported data from other WordPress plugins into Admin Optimizer

Use one toolkit instead of maintaining a collection of unrelated plugins. Enable the modules you need and leave the rest disabled.

== Why Admin Optimizer? ==

- One integrated WordPress toolkit — handle common optimization and administration tasks without assembling a stack of separate plugins.
- Modular by design — enable the larger modules you need and leave unused functionality disabled.
- Organized by purpose — Performance, Security, SEO, Content, Media, Users, System, and Post Types & Fields keep related tools together.
- Lightweight — disabled modules do not run their feature logic or load unnecessary module assets.
- Built for WordPress — uses standard WordPress APIs, hooks, capabilities, and data structures.
- Useful for beginners and developers — straightforward controls for common tasks with deeper tools available when needed.
- Free + Pro architecture — start with the core toolkit and add advanced workflows, automation, AI, and management features with Admin Optimizer Pro.

== What can it replace? ==

Depending on the features you use, Admin Optimizer can reduce or eliminate the need for separate:

- Database cleaner and optimization plugins
- Redirect and 404 monitoring plugins
- Limit login attempts plugins
- Two-factor authentication plugins
- WordPress security hardening plugins
- SEO metadata plugins
- XML sitemap plugins
- Robots.txt and ads.txt editors
- SMTP email plugins
- Custom code / code snippets plugins
- Form builder plugins
- Custom post type and taxonomy plugins
- Custom fields plugins for common use cases
- User role and capability management plugins
- User switching plugins
- Media management plugins
- Basic page-view tracking plugins

…and more.

== Performance ==

Optimize WordPress database activity, frontend resources, and background processes.

- Database Cleaner: Clean stale WordPress data, schedule database maintenance, optimize database tables, and inspect cleanup activity. "Pro" (https://www.adminoptimizer.com/) adds advanced options-table tools for investigating unused options, autoloaded data, and individual option records.
- Heartbeat Control: Adjust WordPress Heartbeat API behaviour to reduce unnecessary server activity.
- Disable Emojis: Remove WordPress emoji scripts and styles when they are not needed.
- Disable jQuery Migrate: Prevent jQuery Migrate from loading on the frontend when your site does not require it.
- Disable 404 Guess Redirect: Stop WordPress from automatically redirecting mistyped URLs to similar-looking content.
- Remove oEmbed Discovery Links: Remove oEmbed discovery links from the site header when they are not required.

== Security ==

Protect WordPress login access and apply practical security hardening from one place.

- Block Failed Login: Limit repeated failed login attempts and block brute-force login activity. "Pro" (https://www.adminoptimizer.com/) adds configurable lockout behaviour and additional protection controls.
- Two-Factor Authentication (2FA): Add TOTP-based two-factor authentication for WordPress users. "Pro" (https://www.adminoptimizer.com/) adds role-based enforcement and trusted-device controls.
- Custom Login URL: Replace the standard WordPress login URL with a custom login path to reduce automated login attacks.
- Disable XML-RPC: Disable XML-RPC when your site does not rely on services that require it.
- Hide WordPress Version: Remove the WordPress version generator information from the frontend.
- Remove REST API Discovery Link: Remove REST API discovery links from the site header.
- Remove RSD Link: Remove the Really Simple Discovery link used by legacy XML-RPC clients.
- Remove Shortlink: Remove WordPress shortlink output from the site header.
- Remove X-Pingback Header: Remove the X-Pingback HTTP header.
- Remove X-Powered-By Header: Remove the X-Powered-By HTTP header to reduce exposed server information.

== SEO ==

Manage essential technical and on-page SEO without requiring a separate tool for every SEO task.

- SEO Manager: Manage SEO titles, meta descriptions, focus keywords, canonical URLs, social images, indexing rules, and automatic schema for supported content. "Pro" (https://www.adminoptimizer.com/) adds AI-assisted metadata generation, SEO automation, and other advanced SEO workflows.
- XML Sitemap & Google News Sitemap: Configure WordPress XML sitemap behaviour for search engines. "Pro" (https://www.adminoptimizer.com/) adds advanced sitemap features including Google News sitemap support.
- Redirect Manager: Create and manage URL redirects directly from WordPress. "Pro" (https://www.adminoptimizer.com/) adds automatic redirects after permalink changes, 404 monitoring, and additional redirect workflows.
- Robots.txt & Ads.txt: Manage robots.txt, ads.txt, and app-ads.txt from the WordPress dashboard without FTP or manual file editing.
- Disable Category Archives: Disable category archive pages when they are not part of your site's SEO strategy.
- Disable Tag Archives: Disable tag archive pages.
- Disable Author Archives: Disable author archive pages.
- Disable Date Archives: Disable date-based archive pages.

== Content ==

Manage publishing workflows and common WordPress content behaviour.

- Content Refresher: Duplicate content into a working draft and update the original content when the refreshed version is ready, preserving the original URL and content identity.
- Lock Post Modified Date: Prevent unnecessary changes to a post's modified date. "Pro" (https://www.adminoptimizer.com/) adds additional post-type and permission controls.
- Content Author Policy: Control which user roles can be recorded as the author when configured content is published. Automatically assign an eligible author or return the content to Draft when the author does not meet the policy. "Pro" (https://www.adminoptimizer.com/)
- Auto Publish Missed Schedule: Automatically publish posts that WordPress failed to publish at their scheduled time.
- Disable Comments: Disable comments and pingbacks and remove related WordPress admin interfaces.
- Auto Add HTML Anchor: Automatically add anchor targets to WordPress heading blocks for direct section linking.
- Disable Gutenberg Editor: Disable the WordPress block editor and use the Classic editor where configured.
- Page Ordering: Reorder hierarchical pages and supported custom post types using drag and drop.

== Media ==

Keep the WordPress Media Library organized and control how uploaded media is handled.

- Media Manager: Organize, audit, and maintain the WordPress Media Library with virtual folders, enhanced search and filters, attachment usage lookup, batch usage scanning, review workflows, safe unused-file cleanup, and media health information. "Pro" (https://www.adminoptimizer.com/)
- Limit Image Upload File Size: Set a maximum image upload size to prevent unnecessarily large files from being added to the Media Library.
- SVG Image Upload: Allow SVG uploads with automatic sanitization for safer use.
- Set Image Filename as Alt Text: Automatically populate empty image Alt text from the uploaded filename.
- Convert Underscores to Hyphens: Automatically replace underscores in uploaded image filenames with hyphens.

== Users ==

Manage WordPress users, capabilities, access, and common account administration tasks.

- User Access Manager: Review and edit role capabilities, add custom capabilities, control WordPress admin access by role, and manage frontend admin toolbar visibility. "Pro" (https://www.adminoptimizer.com/) adds custom role management and admin menu visibility controls.
- Disable User Account: Disable individual WordPress accounts without deleting them.
- User Switching: Temporarily switch into another non-privileged user account to verify permissions and access, with a secure switch-back workflow. "Pro" (https://www.adminoptimizer.com/)
- Hide Update Notice: Hide WordPress update notifications from users who do not have permission to perform updates.
- Track User Last Login: Record and display each user's latest login date.
- Track User Registration Date: Display account registration dates in the WordPress Users list.
- Disable New User Signup Notification: Suppress the default administrator notification when a new user account is created.

== System ==

Manage site-wide services and technical tools used across WordPress.

- Custom Code: Add and manage custom CSS, JavaScript, and HTML snippets without editing your theme. Control common output locations and manage snippets from WordPress. "Pro" (https://www.adminoptimizer.com/) adds presets, conditional loading, targeting rules, shortcode snippets, minification, priority controls, and additional loading options.
- Email & SMTP: Replace the default WordPress mail transport with configurable SMTP delivery. Includes provider presets, encrypted SMTP password storage, sender controls, test email tools, direct email sending, and convenient admin email tools. "Pro" (https://www.adminoptimizer.com/) adds multiple SMTP profiles, email routing, ordered delivery fallback, advanced routing rules, delivery logging, and developer APIs.
- Site Traffic Manager: Track page views for posts, pages, and supported public post types and view content performance directly inside WordPress.

== Post Types & Fields ==

Create and manage custom WordPress content structures without manually registering them in theme or plugin code.

- Custom Post Types: Register custom post types from the WordPress dashboard.
- Custom Taxonomies: Create custom taxonomies and assign them to supported post types.
- Custom Post Status: Create custom post statuses for editorial and content workflows. "Pro" (https://www.adminoptimizer.com/) adds post-type assignment and role-based availability controls.
- Custom Fields Builder: Build reusable custom field groups for posts, pages, custom post types, terms, and users. Create common text, media, choice, relationship, date, editor, and layout fields; control where groups appear; and display stored values through blocks, shortcodes, template helpers, and admin columns. "Pro" (https://www.adminoptimizer.com/)

== Forms ==

Build and manage WordPress forms without installing a separate form builder.

- Form Builder: Create contact and data-collection forms with drag-and-drop fields, row layouts, styling controls, entry storage, email notifications, import/export, and spam protection. Display forms with a Gutenberg block or shortcode. "Pro" (https://www.adminoptimizer.com/) adds form presets, advanced field options, submission limits, access controls, additional workflows, and CSV entry export.

== AI & Automation ==

Admin Optimizer Pro provides shared AI and automation infrastructure for supported features.

- AI Connectors: Connect supported AI providers, securely manage API credentials, choose models for supported Admin Optimizer AI tasks, route requests, and monitor usage. "Pro" (https://www.adminoptimizer.com/)
- Automation: Run supported Admin Optimizer workflows asynchronously and manage recurring or background AI-powered tasks without tying long-running work to the current browser request. "Pro" (https://www.adminoptimizer.com/)

AI Connectors is shared infrastructure: individual Admin Optimizer modules decide how AI is used for their own features, such as generating SEO metadata.

== Migration ==

Move supported data from other WordPress plugins into Admin Optimizer instead of rebuilding everything manually.

The Admin Optimizer Migration Tool (https://wordpress.org/plugins/yipresser-migrator-for-admin-optimizer/) uses a guided Scan → Review → Migrate workflow to detect supported plugins, show what can be transferred, and migrate compatible data into the corresponding Admin Optimizer modules.

Supported migration workflows include data from selected SEO, forms, and redirect plugins.

The migration tool is installed separately so migration code does not need to remain loaded on every Admin Optimizer site after migration is complete.

== Modular by Design ==

Admin Optimizer is designed so you do not have to run every feature just because the plugin is installed.

Larger modules have their own activation state and can be enabled or disabled from the Admin Optimizer interface. Smaller controls are grouped inside the section where they belong, making the toolkit easier to navigate without turning every small tweak into another WordPress admin page.

This gives you the convenience of an all-in-one WordPress toolkit while retaining control over which functionality your site actually uses.

"Learn more about Admin Optimizer >>" (https://www.adminoptimizer.com/)

Your feedback is WELCOME!
== Screenshots ==

1. Overview Page
2. Performance Section
3. Security Section
4. SEO Section
5. Content Section
6. Media Section
7. Post Types & Fields Section
8. Users Section
9. System Section

== Installation ==

= Using The WordPress Dashboard =

1. Navigate to the 'Add New' in the plugins dashboard
2. Search for 'Admin Optimizer'
3. Click 'Install Now'
4. Activate the plugin on the Plugin dashboard

= Uploading in WordPress Dashboard =

1. Navigate to the 'Add New' in the plugins dashboard
2. Navigate to the 'Upload' area
3. Select `admin-optimizer.zip` from your computer
4. Click on 'Install Now' button
5. Activate the plugin in the Plugin dashboard

= Using FTP =

1. Download `admin-optimizer.zip`
2. Extract the `admin-optimizer` directory to your computer
3. Upload the `admin-optimizer` folder to the `/wp-content/plugins/` directory
4. Activate the plugin in the Plugin dashboard

== Changelog ==

= 3.0.0 =
* New: Brand new UI and architecture
* Updated: The cookieless Site Traffic Manager page-view script now loads independently of Consent Manager status.
* Added: SEO Manager module is now available for free
* Added: Secondary keywords field added for SEO Manager.
* Improved: Hardened SVG uploads with safer sanitization and reliable Media Library file-type registration.
* Improved: Updated Disable Gutenberg Editor with new permission options. 

= 2.7.2 =
* Updated: The cookieless Site Traffic Manager page-view script now loads independently of Consent Manager status.

= 2.7.1 =
* Changed: Install the Yipresser Migrator for Admin Optimizer from WordPress.org instead of requesting a licensed private package.
* Fixed: Block Login database migrations no longer generate an invalid empty unique index name.

= 2.7.0 =
* New: Site Traffic Manager module
* New: Media Manager module
* Improved: set a width and height limit for uploaded image.
* Added: default value for database cleaner module.
* Fixed: Hardened SVG uploads against unauthorized XML-RPC parent associations and sanitizer failures that could leave unsafe files in the uploads directory.

= 2.6.0 =
* New: Content Author Policy module (Pro only).
* Improved: Changed robots.txt codemirror theme to better match the background
* Improved: Added menu_icon dropdown selection for Custom Post Types
* Improved: the logger has a more robust logging mechanism and is able to return logs for diagnostic purpose.
* Improved: standardized configurable modules with a shared base class for option loading, submenu registration, screen ownership, and settings asset enqueueing.
* Added: responsive design for the Modules page.
* Added: AI form generation for Form Builder module (Pro only)
* Added: Form insertion block for Form Builder module
* Added: a "Now" selection option in Modified Date module's date time picker
* Added: Notification helper class
* Fixed: Notice admin now renders correctly in AO settings page.

= 2.5.0 =
* New: Module UI cleanup. Split Content & SEO into SEO and Content & Media sections. Split between Modules and tweaks section.
* New: User Access Manager module. Block Admin Access and Hide Admin Toolbar modules integrated into it.
* New: User switching module
* New: Disable Comments Sitewide module
* Added: Explanation and warning for Heartbeat control
* Improved: Custom Post Types - Clarified the "Show in REST API" label to note that setting it to No enables the Classic Editor.
* Fixed: Custom post type bug where "No" selections for options like Show in REST API were not saved correctly, causing them to display as "Yes" when editing.
* Fixed: Flush rewrite rules after adding/editing custom post type.
* Fixed: 2FA login no longer shows a "Cheatin' uh?" error when the code entry page is left open too long; users are now redirected to log in again instead.
* Fixed: Custom Post Status now includes core statuses and prevents custom statuses from using reserved WordPress status slugs.
* Fixed: Form Builder submissions failing nonce security checks for logged-out visitors.

= 2.4.0 =
* New: Migration tab with Admin Optimizer Migration Tool activation and manual download options.
* Added: Instant save for module toggle.
* Added: Quick Email links for Email & SMTP
* Added: Developer APIs and integration functions for Email & SMTP's email sender tool.
* Added: "Default WordPress Mail" option for Email & SMTP's Provider setting
* Fixed: Custom Post Status showing duplicate Draft and Pending Review status in WP 7.
* Improved: Form builder fields have more configuration options.
* Added: Star Rating field and Product Review preset for Form Builder (Pro).
* Added: Load Priority display for the Custom Code module (Pro).

= 2.3.1 =
* Added: Helper text in Redirect Manager to clarify trailing slash and case-sensitivity behavior.
* Improved: Custom post status save behavior is more consistent.
* Fixed: Custom Login URL no longer redirects to a 404 page after a password reset.
* Added: Direct email sending capability for SMTP Email module, and Pro Profile support.

= 2.3.0 =
* Bump up minimum PHP to 8.1.0
* Updated: form builder output with bootstrap class name
* Added: Presets to Form Builder module (Pro only)
* Added: SEO-Manager and AI-Connectors module (Pro only)
* Added new builtin shortcodes for Custom Code module
* Added: HTML code snippet now supports shortcode input
* Fixed: Custom Fields & Types display error
* Fixed: Lock modified date field no longer show up on non-public post types

= 2.2.0 =
* Added: Custom Code module
* Added: Redirect Manager module
* Added: Import/export options for Form Builder
* Added: Preset options for robots.txt.
* Fixed: a bug in Custom Login URL that return 404 when checking email.
* Updated: reorganized modules in various sections.
* Bump up Requires at least to 5.9

= 2.1.1 =
* Fixed: a bug where the limit image size Setings page is not shown

= 2.1.0 =
* Added: new Form Builder module

= 2.0.1 =
* Added: SMTP Provider for SMTP Email module
* Added: "Force From" toggle in SMTP Email module
* Updated: WordPress 7.0 theme support

= 2.0.0 =
* Revamp the new categorization of modules
* Fixed: Fixed a 2FA invalid login esc_html bug
* Updated: switched ToTP provider to have less dependency on third-party tool
* Fixed: rename Post Republisher to Content Refresh

= 1.9.0 =
* Added: new Preset feature
* Updated: Improved UI for Admin Optimizer

= 1.8.0 =
* Added: Revamp new UI for Admin Optimizer
* Added: new Block Admin Access module

= 1.7.1 =
* Fixed: switched to ADMINOPTIMIZER_VERSION instead of filemtime() for versioning
* Fixed: SMTP from field is only set if it is empty. It doesn't override other plugin Send_from settings now.

= 1.7.0 =
* Added: new Page Ordering module
* Fixed: SMTP password is now encrypted before saving to the database

= 1.6.0 =
* Added: new Pro Custom Fields Builder module.
* Fixed: Post Cloner module now doesn't clone other's password-protected posts
* Fixed: Improve the user interface for Custom Post Types and Custom Taxonomies modules

= 1.5.4 =
* Bug: fixed no posts showing in XML sitemap
* Added: new Pro options for XML Sitemap module
* Fixed: DB Cleaner comments not cleaned bug.
* Fixed: multiple files for vulnerability
* Fixed: Robots.txt not displaying properly.
* Fixed: XML Sitemap not properly included in Robots.txt

= 1.5.3 =
Fixed: Custom Post Types module not showing correct options when editing existing post types
Fixed: Custom Taxonomies module not showing correct options when editing existing taxonomies

= 1.5.2 =
Added: Post Cloner after cloning action

= 1.5.1 =
Fixed: XML Sitemap URL wrongly set on robots.txt

= 1.5.0 =
Added: new XML Sitemap module

= 1.4.2 =
* The plugin now require PHP version 7.4.0
* Added polyfills for PHP 8 and 8.1 functions
* Fixed: 2FA module now works on PHP7.4
* Bug: make sure the `Envelope-From`, `Return-Path` is properly set via `$phpmailer->Sender` and `$phpmailer->ReturnPath`.

= 1.4.1 =
* Updated: plugin site URL

= 1.4.0 =
* Added: new Post Cloner module
* Added: new Robots.txt, ads.txt and app-ads.txt module
* Added: removed scheduled tasks on module deactivation

= 1.3.0 =
* Added: new Export/Import module.
* Added: auto add anchor target to Headings block
* Added: Disable Gutenberg editor
* Added: Disable Category archive pages
* Added: Disable Tag archive pages
* Added: Disable Author archive pages
* Added: Disable Date archive pages
* Bug: correct a sentence error in database cleaner module

= 1.2.0 -  =
* Added: new Database Cleaner module
* Enhancement: updated admin UI interface
* Bug: correct modified date column text

= 1.1.0 - 27 August 2025 =
* Added: new Disable User Accounts Module.
* Added: new Disable Guess Redirect 404 Module.
* Enhancement: improve the modules page.

= 1.0.4 - 20 August 2025 =
* Enhancement: remove access to xml-rpc class and file.
* Change: Moved Disable XML-RPC module to Security section.
* Bug: Correct taxonomy spelling mistake.

= 1.0.3 - 19 August 2025 =
* Bug fixes: fixed 2fa conflicts with last login date.

= 1.0.2 - 15 August 2025 =
* Minor bug fixes: fixed spelling error

= 1.0.1 - 13 August 2025 =
* Minor bug fixes, security compliant fixes and first release to WP Plugin Directory

= 1.0.0 - 25 June 2025 =
* First release

== Frequently Asked Questions ==

= What is Admin Optimizer? =

Admin Optimizer is a modular all-in-one WordPress plugin that improves site performance, hardens security, manages redirects, enables custom code snippets, and streamlines admin workflow — all from a single plugin, replacing 10+ separate plugins.

= Can I disable features I don’t need? =

Yes. Every module can be turned on or off individually. Only active modules run on your site.

= Will it slow down my site? =

No. Admin Optimizer is lightweight and loads only the code needed for the modules you have enabled. Disabling unused WordPress features with this plugin typically improves performance.

= What is the Custom Code module? =

The Custom Code module lets you add CSS, JavaScript and HTML directly from the WordPress dashboard, without editing theme files or using a child theme. It is available in the System Tools section.

= What is the Redirect Manager module? =

The Redirect Manager lets you create and manage 301/302 URL redirects from the WordPress admin. The free version includes full redirect management. The Pro version adds automatic redirects on permalink changes and a 404 error monitor.

= Does it work with multisite? =

Admin Optimizer has not been tested on multisite and does not officially support multisite.