Blaminhor Essentials – Redirects, Broken Links, Favicon, Maintenance, Classic Editor & 21 More vs WP-DBManager

One plugin to replace twenty. Free forever. I was tired of my WordPress installs looking like a graveyard of single-purpose plugins — one for SEO, one for cache, one for SMTP, one for redirects, one for backups. Each one with its own dashboard, its own freemium dance. So I built Blaminhor Essentials — and I never sell your data. Why this plugin exists: Every WordPress essential under one roof. SEO, cache, SMTP, backup, cookie banner, contact forms, calendar, anti-spam, login security, downloads, redirections, broken links, duplicator, database optimizer, domain changer, fatal error recovery, favicon, HTTPS redirect, hide login, image sizes, maintenance mode, mute core emails, post types order, user role editor, classic editor, disable comments. Switch on what you use today; the rest stays out of your way until the day you need it. Your existing data comes with you. Switching does not mean starting over: built-in importers for Yoast, Rank Math, All in One SEO, WP Mail SMTP, Post SMTP, Easy WP SMTP, Redirection, Safe Redirect Manager, Custom Taxonomy Order, Favicon by RealFaviconGenerator, and the standalone User Role Editor. The dedicated plugins you’ve stacked one by one over the years, now in a single coherent toolkit. No tax for what you don’t use. Each module is independent: an inactive one loads no PHP, registers no hooks, enqueues no assets, runs no queries. You’re only paying — in memory and milliseconds — for the features you actually turned on. Rebuilt on modern PHP. Since version 2, every module has been re-engineered from the ground up to take full advantage of PHP 8 — strict types, enums and value objects — for tighter security and faster, leaner execution. Free. All features above are free. No tracking, no telemetry. Translated in 11 languages. English, French, German, Spanish, Italian, Portuguese (Brazil), Japanese, Russian, Turkish, Dutch, Indonesian. You can email me anytime. [email protected] Available Features — 26 modules: Performance Cache & Performance — Page cache, asset optimization and lazy load, plus a Web Vitals dashboard and an auto-pilot that benchmarks each speed option on your own pages. SEO & Links SEO/GEO — Meta titles and descriptions with SERP preview, XML sitemaps, per-type indexing control, and one-click import from Yoast, Rank Math or All in One SEO. Redirections — Simple or regex redirects (301, 302, 307, 410, 451) with hit counters, slug-change detection, and CSV / plugin import (Redirection, Safe Redirect Manager). Broken Links — Scan posts, pages and custom post types for dead internal and external links, with live results and one-click fixes. Emails SMTP Mailer — Reliable delivery through 12+ providers (Brevo, SendGrid, Mailgun, AWS SES…) with automatic relay fallback, logging, and import from WP Mail SMTP, Post SMTP or Easy WP SMTP. Mute Core Emails — Silence WordPress automatic notifications (updates, new users, password changes, comments) individually. Security & Maintenance Cookie Banner — Self-hosted consent banner that blocks tracking scripts and embeds until visitors agree, with GDPR/CCPA/LGPD presets, Consent Mode v2, and a 13-month consent log. Anti-Spam — Block spam bots on the comment, login, registration and password forms with a hidden honeypot trap, and encode the email addresses shown on your site so harvesters cannot read them — no CAPTCHA, no external service. Login Security (Beta) — Lock out brute-force attempts on every sign-in route (login form, XML-RPC, REST API, application passwords) before the password is checked, add two-factor authentication (authenticator app, security key or passkey, emailed code, single-use backup codes) with trusted browsers, alert on sign-ins from unfamiliar devices, enforce a password policy per role, and keep a journal of every attempt with addresses stored hashed. Entirely local, no external service. Hide Login Page — Replace wp-login.php with a custom URL and block bots probing the default login. HTTPS Redirect — Force HTTPS site-wide with optional mixed-content fixing and an HSTS header. Fatal Error Recovery — Recover a crashed site from a secret URL by disabling the culprit plugin, with no FTP access. Maintenance — Show a Coming Soon (200) or Maintenance (503) page, with role and IP whitelisting. User Role Editor — Create, clone and edit roles and capabilities, with per-user overrides, JSON import/export and one-click import from the standalone User Role Editor plugin. Database & Migration Backup & Restore — Scheduled backups of files and database as separate archives, with a safety backup and one-click undo before every restore. Database Optimizer — Clean revisions, transients, spam and orphaned data on a schedule, with an at-a-glance size and overhead overview. Domain Changer — Change your site domain and update every database reference, including serialized data, in one click. Content & Media Calendar (Beta) — Publish events with recurrence, venues, organizers, calendar views, iCal import and RSVP, and run a full booking system for appointments and resource rentals with reminders and Stripe payments. Forms (Beta) — Accessible drag-and-drop contact forms with entries stored in the database, no-CAPTCHA spam protection, and GDPR controls. Downloads (Beta) — Count how many times each media library file is downloaded, and how many distinct people downloaded it, without recreating your files as anything else. Make documents save instead of opening in a tab, restrict a file to signed-in visitors, chosen roles or a password, and optionally route direct file requests through the counted link so links already shared are covered too. Robots, link previews and repeat clicks are filtered out, and no visitor address is ever stored. Content Duplicator — Clone any post, page or custom post type with all fields, taxonomies and child posts; supports every major page builder. Classic Editor & Widgets — Restore the classic editor and/or the classic widgets screen, independently. Image Sizes — Disable unused thumbnail sizes, register custom ones, and regenerate existing images. Favicon Generator — Generate every favicon format (PNG, Apple Touch, Android, Windows tiles) from a single square image, or import an existing set from Favicon by RealFaviconGenerator or the WordPress Site Icon. Post Types Order — Reorder posts, pages, custom post types and taxonomies with drag and drop, and import an existing term order from Custom Taxonomy Order. Disable Comments — Remove the comment system site-wide and hide it from the admin, reversibly. WP-CLI Commands Every module is fully configurable from the command line through the wp blaminhor ... namespace — useful for scripts, CI/CD, fixtures, and AI assistants like Claude Code or Cursor. The CLI delegates to the same validation pipeline as the admin UI, so settings stay consistent. Discover the full command tree: wp help blaminhor wp help blaminhor Lifecycle: wp blaminhor info wp blaminhor modules list [--active-only|--inactive-only] [--category= ] wp blaminhor modules activate wp blaminhor modules deactivate [--yes] A few examples per module (full reference: see the bundled llms.txt): SMTP: wp blaminhor smtp add-relay --name=Gmail --host=smtp.gmail.com --port=587 --encryption=tls [email protected], wp blaminhor smtp test [email protected] Redirections: wp blaminhor redirections add --source=/old --target=/new, wp blaminhor redirections list --search=/blog SEO/GEO: wp blaminhor seo set --sitemap-enabled=true --ai-block-chatgpt=true, wp blaminhor seo list-urls Maintenance: wp blaminhor maintenance enable --headline="Be right back", wp blaminhor maintenance disable HTTPS Redirect: wp blaminhor https-redirect enable --hsts=true Database Optimizer: wp blaminhor db-optimizer scan, wp blaminhor db-optimizer clean --tasks=revisions,spam_comments Login Security: wp blaminhor login-security unlock 203.0.113.7, wp blaminhor login-security reset-2fa admin Cache: wp blaminhor cache purge, wp blaminhor cache status Backup: wp blaminhor backup list, wp blaminhor backup delete --yes All listing commands accept --format=table|json|csv|yaml|count|ids for scripting. Mutating commands require --user= for the capability check. Sensitive values (SMTP passwords, recovery keys) are never printed in cleartext. The Backup module exposes list and delete only — creating and restoring a backup remain admin-only, where the stepped AJAX flow avoids PHP timeouts and the pre-restore safety net runs.

WP-DBManager looks after the database behind your site: it backs it up, restores it, optimizes and repairs it, empties or drops tables and runs queries you write, all from wp-admin rather than from a shell or phpMyAdmin. Backups, optimization and repair can be left to run on a schedule, and the backup can be emailed to you when it finishes. Donations I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations. Usage Securing The Backup Folder A database backup contains everything, including your users table. Anyone who can guess a backup file name can download the lot, so the folder must not be served over HTTP. The reliable option, on any server: set Path To Backup under WP-Admin -> Database -> Settings to a folder outside your web root, for example /var/www/example.com/backup-db when WordPress lives in /var/www/example.com/public_html. Nothing served, nothing to configure. If the folder has to stay inside the web root: Apache — move htaccess.txt from Folder: wp-content/plugins/wp-dbmanager to Folder: wp-content/backup-db/.htaccess IIS — move Web.config.txt from Folder: wp-content/plugins/wp-dbmanager to Folder: wp-content/backup-db/Web.config nginx — nginx does not read .htaccess files, so the file above does nothing. Add this to your server block and reload nginx: location ^~ /wp-content/backup-db/ { deny all; } Move index.php from Folder: wp-content/plugins/wp-dbmanager to Folder: wp-content/backup-db/index.php as well, so the folder cannot be listed. The Backup DB page requests a file from the folder and reports what the server actually returns, so you can confirm the folder is closed rather than assume it. WP-CLI wp dbmanager tables wp dbmanager backups wp dbmanager backup --yes wp dbmanager backup --no-gzip --yes wp dbmanager restore --yes wp dbmanager delete ... --yes wp dbmanager email [email protected] --yes wp dbmanager optimize --all --yes wp dbmanager repair wp_options --yes wp dbmanager empty ... --yes wp dbmanager drop ... --yes Everything that changes anything asks first, so a script has to pass --yes. That includes backup, which deletes the oldest backups to stay inside Maximum Backup Files, and email, because a dump holds your users table and a sent message cannot be recalled. tables and backups only read, and take a --format of table, csv, json, yaml, count or ids; their sizes are in bytes rather than the KiB and MiB the screens print, because a shell is better at arithmetic than at parsing 1.2 MiB. optimize and `repair` take table names or `--all`. `empty` and `drop` take names only: emptying or dropping every table in a database is not maintenance, and the screen at least shows you the list before you tick it. There is no run subcommand. WP-CLI already ships wp db query, which reaches the same database through the same client, so the Run SQL Query screen has no command counterpart. That screen is unchanged and still works. wp dbmanager checks no capability. WP-CLI has no logged-in user unless you ask for one with `--user`, and whoever can run it can already read the credentials in `wp-config.php`, so a check would refuse every scheduled backup script while protecting nothing. The `install_plugins` gate on the admin screens is unchanged.