StifLi Backup Tools vs WebFacing™ –

StifLi Backup Tools is a professional WordPress backup plugin for creating full site backups, database backups, file backups, scheduled backups, staging sites, Fast Staging builds for developers, Local Developer Packages, and migration packages directly from your WordPress dashboard. The plugin is designed for everyday WordPress site owners, freelancers, agencies, and administrators who need a practical backup and restore workflow without depending on complex server tools. It uses background processing, resumable jobs, chunked ZIP creation, streaming database exports, and HTTP range downloads to help backups and restores complete even on shared hosting, slower servers, or environments where long requests may be interrupted. For agencies and development teams, StifLi Backup Tools also includes differentiated workflows for building lean staging environments and exporting Local Developer Packages, reducing the time spent cloning oversized production sites just to test changes, debug issues, or hand work over for local development. Use StifLi Backup Tools to back up WordPress before updates, keep scheduled backup copies, migrate a site to a new domain, create a staging copy, restore selected components, or send backup archives to remote storage such as Google Drive, Dropbox, Amazon S3-compatible storage (including Cloudflare R2), FTP, or SFTP. Official documentation: StifLi Backup Tools Documentation. WordPress backup features Full WordPress backups including database, plugins, themes, uploads, and selected site files. Database-only backups for quick snapshots before plugin, theme, or content changes. Files-only backup options for plugins, themes, and uploads. Differential scheduled backups to save only changed files between full backups. Backup integrity checks before restore. Backup explorer for reviewing backup contents. Component restore for database, plugins, themes, or uploads. Selective restore for specific files or directories. Backup upload and local backup rescan tools. HTTP range downloads for large backup archives and interrupted downloads. Scheduled backups Create automatic WordPress backups on a schedule and control how many copies are kept locally and remotely. Daily, weekly, fortnightly, monthly, and custom scheduled backup workflows. Choose backup components: database, plugins, themes, uploads, or full site. Choose local storage, remote storage, or remote-only backups. Full or differential backup strategy. Separate retention rules for local backups, remote backups, and differential backups. Email notifications for backup results. Optional webhook notifications for external monitoring or automation. Remote backup storage StifLi Backup Tools can send backup archives to remote destinations only after you explicitly configure and enable them. Supported destinations include: Google Drive Dropbox Amazon S3 S3-compatible storage such as Backblaze B2, Wasabi, MinIO, DigitalOcean Spaces, and Cloudflare R2 FTP SFTP Remote storage is optional. The plugin does not contact external storage services unless you enable and configure the corresponding destination. WordPress restore and recovery Restore your WordPress site from a backup with a guided process and live progress updates. Restore database and files. Restore only selected components. Restore uploaded backup ZIP files. Restore local or remote backup archives. Merge differential backups with their parent full backup when required. Streaming restore progress designed to avoid browser and hosting timeouts. Semaphore locking to help prevent overlapping backup and restore operations. WordPress migration tools Move a WordPress site to another server or domain using migration packages and URL remapping. Create migration packages from the WordPress dashboard. Import migration packages on the destination site. Remap URLs when moving to a new domain. Optional site-to-site Push/Pull migration using a shared secret between two WordPress sites you control. Standalone installer for migration scenarios where WordPress is not yet installed on the destination server. Staging sites Create a staging copy of your WordPress site for safe testing before making changes on production. Create full staging sites or lean Fast Staging builds in a subdirectory. Copy files and database tables into the staging environment. Exclude selected tables, plugins, themes, uploads, and WooCommerce-heavy data for developer-focused staging builds. Search and replace URLs for the staging copy. Track staging job progress. Delete staging sites from the plugin interface. Developer workflows StifLi Backup Tools includes dedicated workflows for developers, freelancers, and agencies who need faster QA environments and cleaner local handoff packages. Fast Staging for developers creates lean staging builds by letting you limit the copy to the tables, plugins, themes, uploads, and data scope you actually need. Local Developer Package export prepares a LocalWP-friendly package for local development workflows so a selected site snapshot is easier to move, inspect, and hand off. Background processing, live progress updates, cancel support, and resumable job handling help these workflows stay practical on large sites and typical WordPress hosting. Useful for client review environments, bug reproduction, plugin or theme QA, and pre-release testing without cloning the full production site every time. Maintenance and optimization tools StifLi Backup Tools also includes practical maintenance utilities for WordPress administrators. Image optimization using the WordPress image editor when available. Database cleanup for revisions, spam comments, trash comments, transients, and overhead. Temporary file cleanup for backup, restore, staging, and upload leftovers. Custom exclude rules for uploads and wp-content backup paths. System information and log viewer for troubleshooting backup issues. Built for shared hosting Many WordPress sites run on shared hosting or constrained VPS environments. StifLi Backup Tools is built with those limitations in mind. Background processing via WP-Cron. Resumable backup and restore stages. Chunked ZIP creation. Streaming database export and import. Memory-aware file operations. Locking to avoid concurrent destructive operations. Compatibility options for different archive engines and compression profiles. AI agents and MCP abilities StifLi Backup Tools can expose selected WordPress Abilities to MCP-compatible AI agents for professional and commercial automation workflows. Uses the WordPress Abilities API (WordPress 6.9+). Lets administrators enable or disable abilities globally and per ability. Exposes a safe default set for backup and remote-management operations. Keeps restore and scheduled-execution operations outside MCP ability exposure by design. External services This plugin can connect to third-party services only when you explicitly enable and configure the corresponding feature. No telemetry, analytics, license check, or automatic external update call is made by the plugin. The full list of services that may be contacted, the data that is sent, and when, is described below. Google Drive (optional, opt-in) If you connect a Google account to use Google Drive as a remote backup destination, the plugin contacts Google’s OAuth and Drive APIs. Endpoints used: https://oauth2.googleapis.com/token — to exchange and refresh OAuth tokens. https://www.googleapis.com/drive/v3/* — to list, create, update, download, and delete backup files in your Drive. https://www.googleapis.com/upload/drive/v3/files — to upload backup archives in resumable chunks. What is sent: your OAuth client ID and secret provided by you, the refresh/access token, backup ZIP files you choose to upload, and metadata such as filename, size, and parent folder ID. When: only when you start OAuth connection from the settings page, run a backup that has Google Drive selected as a destination, or browse, restore, or delete remote backups stored in your Drive. Provider terms: Google Terms of Service and Google Privacy Policy. Dropbox (optional, opt-in) If you connect a Dropbox account to use it as a remote backup destination, the plugin contacts Dropbox APIs. Endpoints used: https://api.dropboxapi.com/oauth2/token — to exchange and refresh OAuth tokens. https://api.dropboxapi.com/2/* — to query account info, list files, and delete files. https://content.dropboxapi.com/2/* — to upload and download backup archives. What is sent: your Dropbox app key and secret provided by you, the refresh/access token, backup ZIP files you choose to upload, and request metadata such as paths, filenames, and sizes. When: only when you start OAuth connection from the settings page, run a backup that has Dropbox selected as a destination, or browse, restore, or delete remote backups stored in Dropbox. Provider terms: Dropbox Terms of Service and Dropbox Privacy Policy. Amazon S3 and S3-compatible services (including Cloudflare R2) (optional, opt-in) If you configure an S3-compatible remote destination, the plugin contacts the endpoint you specify in the destination settings. Endpoints used: AWS S3 endpoints such as https://s3. .amazonaws.com and https:// .s3. .amazonaws.com, Cloudflare R2 endpoints such as https:// .r2.cloudflarestorage.com, or the custom S3-compatible endpoint URL you enter. What is sent: your access key ID, the SigV4-signed request, the backup ZIP file you choose to upload, and request metadata such as bucket, object key, and size. Your secret access key is used locally to sign requests and is not sent as plain text. When: only when you test the connection, run a backup that has the S3 destination selected, or browse, restore, or delete remote backups stored in the bucket. Provider terms: depend on the provider you configure. For AWS, see AWS Service Terms and AWS Privacy Notice. For S3-compatible providers, see the terms and privacy policy of the provider you choose. FTP and SFTP servers (optional, opt-in) If you configure an FTP or SFTP destination, the plugin connects to the server details you enter in the destination settings. Endpoints used: the FTP or SFTP host, port, and path entered by you. What is sent: the credentials or key details you configure, backup ZIP files you choose to upload, and request metadata required to list, upload, download, or delete files. When: only when you test the connection, run a backup that has the FTP/SFTP destination selected, or browse, restore, or delete remote backups stored on that server. Provider terms: depend on the FTP/SFTP server or hosting provider you choose. Webhooks (optional, opt-in) If you configure one or more webhook URLs in the scheduled backup settings, the plugin sends an HTTP POST to those URLs when a scheduled backup completes, depending on your notification settings. Endpoints used: any webhook URL you enter in the settings. What is sent: a small JSON payload containing the site URL, backup name, backup type, result status, and timestamp. No credentials, database content, or backup archive content is sent in the webhook payload. When: only when a scheduled backup task with a webhook configured finishes. Provider terms: depend on the third-party endpoint you enter. The plugin authors are not affiliated with any specific webhook provider. Site-to-site migration Connect API (optional, opt-in) If you enable the built-in Connect API and use the Push/Pull migration feature, this WordPress site exchanges data with another WordPress site that you control. Endpoints used: /wp-json/stifbt/v1/connect, /wp-json/stifbt/v1/push, and /wp-json/stifbt/v1/pull on the remote site URL you enter manually. What is sent: a shared secret generated by you and, for Push/Pull operations, the migration ZIP package containing the data you chose to migrate. When: only when you test the connection or start a Push/Pull migration from the migration screen. Provider terms: not applicable; the remote endpoint is another WordPress site under your control. No third-party service is involved.

🕸️ By WebFacing™. Read, send, show, manage, list, create, add, remove or delete email accounts, old messages, forwarders and autoresponders. One click read, send and manage all your emails without a login step. Update notification recipients. Backup and download your complete cPanel® account. This plugin requires your site is hosted on a cPanel® equipped server. It uses it’s UAPI through shell access by default, or via HTTP API. Using without shell_exec initially requires a temporary access token generated in the cPanel® native interface. Translation ready. Ready translations are Norwegian (bokmål) Current features NEW: Dashboard widget with three live graphic server memory usage and server load gauge charts (can eassily be minimized or hidden via Screen Options or programatically) WP Block for frontend access user’s own Webmail Bulk entry of forwarders and email accounts (as free trial only, very limited use) Screen Options to select visible forms on New Email screen, saved for as user option (and per site for Multisite) Shortcode [wf_cpanel_email_webmail] or as [wf_cpanel_email_webmail]My Email[/wf_cpanel_email_webmail] for frontend access user’s own Webmail cPanel® API Tokens Management – needed in case shell_exec is not available or when accessing a remote server Backup complete cPanel® hosting account to file, and download it Restore account backup files by extracting it to a folder (experimental) Semi automated migration to new email server, including setup of new accounts for users, with sending setup instructions, passwords and links to setup guides for most common email clients Add 10 single Email Accounts per week (without Pro nag) — actually unlimited Remove single/multiple Email Accounts List mailboxes with number of messages for each box Remove old messages from mailboxes (older than 52 weeks as default) Shrink a mailbox (empty it) Change storage quota for for email accounts Add 20 forwarders per week (without Pro nag) — actually unlimited Add/remove single/multiple Email Failure addresses or Blackhole addresses Add/delete/edit email autoresponders (for, subject, body, from, start, stop, interval) Send single cPanel® Email Account Instruction (Client Setup) to specfied address Send multipe cPanel® Email Account Instructions (Client Setups) to yourself for distribution Open your cPanel® Webmail app for selected account (single click/tap – no further login needed!) Set/change Email Account passwords Set Default Email Address (catch-all) as forwarder, failure or blackhole View/change Notification/Contact Email Addresses Access for any user to view and read their own emails, if given the cpanel capability (Use custom code or a Roles/Capabilities Manager plugin) Support for subdomain email addresses when the main domain is a subdomain (only) In case the shell_exec function is disabled in your server PHP configuration, create a token in native cPanel® interface and add one of these lines to your wp-config.php file, functions.php in your child theme, in Must-use plugin or a custom regular plugin const WF_CPANEL_API_TOKEN = 'my-temp-api-token'; define( 'WF_CPANEL_API_TOKEN', 'my-temp-api-token' ); See Manage API Tokens in cPanel® The WF_CPANEL_API_TOKEN constant may be removed when a new token is created and activated from the plugin admin page Option to set the default visibility for users on New Email screen (users may still set their own preferences): add_filter( 'wf-cpanel-email-new-email_user-option', static function( bool $default, string $option, int $user_id ) { if ( $option === 'wc-show-new-blackhole' /*or by $user_id*/ ) { $default = true/*false*/; } return $default; }, 10, 3 ); Option to allow other users than those with manage_options capability to manage email adresses, single- or multisite, one of the following: add_filter( 'wf_cpanel_email_capability', static fn( string $cap ): string => $my_cpanel_email_cap ); add_filter( 'wf_cpanel_email_capability', static fn( string $cap ) => 'edit_published_pages' ); Option to allow other users than those with manage_options capability to see the dashboard widget, or remove it, one of the following: add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ): string => $my_cpanel_widget_cap ); add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ) => 'edit_published_pages' ); add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ) => 'do_not_allow' ); Option to alter the refresh interval in seconds for the dashboard widget, one of the following: add_filter( 'wf_cpanel_email_widget_interval', static fn( int $interval ): int => $my_cpanel_widget_interval ); add_filter( 'wf_cpanel_email_widget_interval', static fn( int $interval ) => 45 ); Option to limit email addresses to current site domain, even for single site admins, one of the following const WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY = true; define( 'WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY', true ); add_filter( 'wf_cpanel_email_site_domain_only', '__return_true' ); add_filter( 'wf_cpanel_email_site_domain_only', fn() => true ); Multisite Network: Option not to limit email addresses to current subsite domain, for site admins that are not network (super) admins, one of the following: const WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY = false; define( 'WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY', false ); add_filter( 'wf_cpanel_email_site_domain_only', '__return_false' ); add_filter( 'wf_cpanel_email_site_domain_only', fn() => false ); Many optional parameters and API filters for the shortcode output, see includes/ShortCode.php until further tested and documented If you want to access another user on the server, use one of the following const WF_CPANEL_USER = 'my-username'; define( 'WF_CPANEL_USER', 'my-username' ); If you want to access a remote server, use one of the following const WF_CPANEL_HOST = 'my-host'; define( 'WF_CPANEL_HOST', 'my-host' ); using WF_CPANEL_HOSTrequires WF_CPANEL_USER to also be defined Automaticallly create new accounts when a new user is registered? add_action( ‘user_register’, static function( int $user_id, array $userdata ): void { // What to do just after the registraton here, like this (adds an email address that forwards to all users, a mailing list): if ( method_exists( ‘WebFacing\cPanel\UAPI’, ‘add_forwarder’ ) ) { \WebFacing\cPanel\UAPI::add_forwarder( ‘[email protected], ‘$userdata[‘user_email’] ); } }, 2 ); Site Health Tests and information Check auto detecting and current email routing in an extra Site Health tab (to any email address sent from your server) Possible future features Scheduled automatic removal of old messages in/from mailboxes Import migration list for create account, send instructions and password to current address Delete selected email messages from mailboxes (by selectd message age etc.) Suspend/unsuspend incoming/outgoing for email accounts (if requested) Suspend/unsuspend login to email accounts (if requested) Domain level email forwarding Domain Managament DNS Zone editing Limitations, security, privacy – be warned Maximum New Forwarders = 20, Maximum New Accounts = 5, weekly reset Trial: Maximum New Forwarders as bulk entry = 4, Maximum New Accounts as bulk entry = 2 Now works without shell access! Will not work at all if shell_exec is disabled in php.ini Works only for admins, or other users with a custom cpanel capability and email on site domain (so far) Any admin (if multisite, only network admins), or user with the filtered capability, on a site, can fully access any account on the cPanel® server instance No AYS warnings for delete actions If several sites/admins share the same cPanel® account, without being part of a WP Multisite network, no bulletproof separation, because of the way the cPanel® UAPI CLI works, with or without this plugin Pro Addon Pro Addon plugin was released May 1, 2023 at https://webfacing.eu/plugin/wf-cpanel-email-accounts-pro/ and will unlock in bulk entry new forwarders and new accounts to the numbers in the purchesed license