RefiTune – Site refiner toolkit vs Servebolt Optimizer

Hungarian: Magyar nyelvű bővítmény leírás RefiTune – Site refiner toolkit is a modular Swiss Army knife for WordPress. Clean up unnecessary front-end code, harden login and uploads, tune Heartbeat and updates, or brand wp-login – each module is opt-in. Enable or disable features individually. A clean dashboard shows what is active. In-plugin Help pages document behaviour, trade-offs, and requirements. What’s Inside? (35 Modules) Performance: * Header Cleanup – Strip unnecessary wp_head output for leaner pages. * Feed Management – Control RSS/Atom feed link tags in the document head. * Disable Emoji – Remove WordPress emoji scripts and styles. * Disable jQuery Migrate – Drop legacy jquery-migrate when your stack does not need it. * Disable oEmbed – Stop automatic embeds from pasted YouTube, Vimeo, Twitter/X, and similar URLs. * Remove Asset Version Query Strings – Strip ?ver= from front-end CSS/JS (can break cache busting; prefer CDN purge or hashed filenames). * Post Revisions Limit – Cap stored revisions per post. * Auto-save Interval – Change how often the editor auto-saves. * Trash Auto-Delete – Set trash retention; expired items are removed in batches so large queues stay memory-safe. * Convert Uploads to WebP – Convert JPEG/PNG to WebP on upload, optional max size resize, then remove the original (GD or Imagick with WebP; uses unique filenames and refuses unsafe overwrites). * Heartbeat API Control – Tune or disable Heartbeat in admin, front end, and the post editor. Security: * Hide Generator Tags – Remove WordPress (and WooCommerce, when active) version meta tags. * Disable XML-RPC – Respond to XML-RPC with 404 and remove RSD discovery. * Disable Trackback/Pingback – Close pings and strip pingback methods/headers. * Disable File Editor – Set DISALLOW_FILE_EDIT so theme/plugin editors stay off. * Automatic Updates Control – Tri-state plugin, theme, translation, and core updates; reschedule update checks. Respects AUTOMATIC_UPDATER_DISABLED and WP_AUTO_UPDATE_CORE when defined. * Login Error Messages – Generic login errors to reduce username enumeration. * Restrict Admin Access – Choose which roles may open wp-admin UI. Users with manage_options always keep access. Front-end admin-ajax.php is intentionally not blocked. * REST API Restrictions – Limit selected core REST routes to users with manage_options. * Login Limit – Rate-limit failed logins by IP and IP+username pair (REMOTE_ADDR only). Optional IP whitelist (one address per line). Covers wp-login.php and other wp_signon() paths (including WooCommerce). * Verified Upload – Block disguised uploads: double extensions, MIME/magic mismatches, and script markers. Visual: * Hide Admin Bar – Hide the admin bar for selected roles. * Block Visibility (Mobile) – Show/hide blocks by device via wp_is_mobile(); sends Vary: User-Agent (full-page caches must honour it). * Login Page Customization – Brand wp-login.php with logo and colours. Email: * Email Notifications – Disable or redirect selected WordPress system emails. * Email sending – SMTP with encrypted password storage, or disable all site emails. In production, disabling TLS/certificate verification is blocked. Miscellaneous: * Disable Comments – Site-wide comments off (optional WooCommerce review keep). * External Links in New Window – Open external links in a new tab with safe rel attributes. * Enable Page Excerpt – Excerpt support for pages. * Clean Upload Filenames – Sanitize upload filenames (accents, spaces, special characters). * SVG Upload – Role-gated SVG uploads with allowlist-based sanitization (XXE-safe parse). * AVIF Upload – Role-gated AVIF uploads (full core AVIF support needs WordPress 6.5+). * Role Redirects – Per-role login and logout redirect URLs. * Maintenance Mode – 503 maintenance page for guests; chosen roles keep access. Admin, AJAX, and cron stay available so staff can work. * Dynamic Year Shortcodes – [refi-year] and [refi-year from="2006"]. More plugins: rotistudio.com Author site: rottenbacher.hu GitHub: github.com/rotisoft/refitune Translations English (default – source strings in code and refitune.pot) Hungarian (Magyar) – refitune-hu_HU.po (compile to .mo for WordPress to load) Contribute translations under /wp-content/plugins/refitune/languages/. Text Domain: refitune.

The Servebolt Optimizer plugin adds functionality to implement Servebolt’s best practices for WordPress. This includes database optimizations, errorlog review, automatic cache purging, automatic image optimization and resizing, performance recommendations, and support for down stream HTML caching. Specifically, Servebolt Optimizer does two things for your site: It connects your WordPress hosted or WooCommerce hosted Servebolt site to your Servebolt Admin Panel. Its features implement Servebolt’s best practices for performance. These best practizes include database optimizations, error log review, automatic cache purging, automatic image optimization/resizing, performance recommendations and support for down stream HTML caching. This project is maintained on Github. Features Configures HTML caching to speed up your site (Servebolt clients only) Integrates with Accelerated Domains (Servebolt clients only) Rewrite headers to allow down stream HTML caching (Servebolt clients only) View Apache/PHP error log (Servebolt clients only) Database optimization – Convert tables to InnoDB Database optimization – Add performance improving indexes Automatic cache purge for Cloudflare and Accelerated Domains Recommendations on additional performance improvements Multi-site support WP CLI support Cloudflare Image Resize-support (beta feature) WP Rocket compatability (Servebolt clients only) Read more about the plugin and all its features in our Help Center. Accelerated Domains The integration with our revolutionairy add-on performance and security enhancing service Accelerated Domains is made possible by Servebolt Optimizer. Installing the Servebolt Optimizer will provide the required HTTP headers to make use of Accelerated Domains. Automatic purge of Cloudflare cache Servebolt Optimizer supports the most complete solution for Cloudflare cache purging. The HTML Cache is automatically purged when any post type or term has been updated. You can also purge directly from the admin bar. This Cloudflare integration supports both the use of API key and API token authentication when communicating with the Cloudflare API. HTML Caching This plugin rewrites HTTP headers of HTML to allow for HTML Caching, and for the browser to cache HTML. HTML Caching may introduce all sorts of problems for end users, so installation and testing should be performed by a professional. Configuration This plugin can be controlled via the WordPress Dashboard or WP CLI. Additionally there are various filters and PHP constants at your disposal. Filter and constant reference The plugin has various filters and PHP constants that allows third-party developers to alter the behaviour of the plugin. Please read the article Filters and PHP constants in our help center to learn more. Testing We test against the current production version of WordPress and the next beta/development version