內容簡介
Destino Access Audit 是一款專為 WordPress 設計的外掛，提供一個集中管理的介面，讓使用者能夠輕鬆檢視誰擁有網站的存取權限及相關資訊，並可隨時撤銷應用程式密碼，確保網站安全。
【主要功能】
• 檢視所有應用程式密碼及其使用紀錄
• 列出所有管理員帳號，並提供編輯連結
• 顯示 UpdraftPlus 和 MainWP Child 的安裝狀態
• 提供 ManageWP Worker 和 InfiniteWP Client 的安裝狀態
• 支援 CSV 匯出功能，方便資料管理
外掛標籤
開發者團隊
原文外掛簡介
Destino Access Audit adds a single admin page (Tools → Destino Access Audit) that centralizes the answer to one question: who, and what, currently has access to this site?
The page is read-only audit information except for one deliberate action — revoking an Application Password — which delegates entirely to WordPress core’s own API. Destino Access Audit never creates, modifies, or stores any remote-management connection itself.
What it shows
Application Passwords — every active Application Password on the site (all users), with creation date, last used date, last IP, and a one-click Revoke button (AJAX, no page reload) plus a CSV export.
Administrator Users — a plain list of every user with the administrator role, with a direct link to edit each one. Useful for spotting an admin account you don’t recognize.
UpdraftPlus / UpdraftCentral — whether UpdraftPlus is installed/active, a direct link to its settings screen, whether it is connected to an UpdraftCentral dashboard (including which WordPress user made that connection), and whether UpdraftPlus’s own password-protected “Lock Settings” feature is currently hiding that screen.
MainWP Child — whether MainWP Child is installed/active, a direct link to its settings screen, whether it is paired with a MainWP Dashboard, and which WordPress user established that pairing.
ManageWP Worker — installed/active status. ManageWP Worker pairs with its dashboard through an OpenSSL key exchange with no locally readable “connected” flag, so this block documents that limitation instead of guessing.
InfiniteWP Client — installed/active status, with the same honest limitation note as ManageWP Worker.
Security notes
Every write action (revoking a key) is protected by a nonce, a manage_options capability check, and a second capability check (edit_user) specific to the user who owns the key.
The CSV export is generated server-side and neutralizes fields that could be interpreted as spreadsheet formulas (CSV/Excel formula injection).
The dashboard itself requires the manage_options capability to view.
