Title: Agency Toolkit
Author: inspry
Published: <strong>মে’ 23, 2022</strong>
Last modified: অক্টোবৰ 5, 2026

---

প্লাগিনৰ সন্ধান কৰক

![](https://ps.w.org/agency-toolkit/assets/banner-772x250.png?rev=3136284)

![](https://ps.w.org/agency-toolkit/assets/icon-256x256.png?rev=3136284)

# Agency Toolkit

 [inspry](https://profiles.wordpress.org/inspry/)-ৰ দ্বাৰা

[ডাউনল’ড কৰক](https://downloads.wordpress.org/plugin/agency-toolkit.1.0.39.zip)

 * [বিশদ বিৱৰণ](https://as.wordpress.org/plugins/agency-toolkit/#description)
 * [পৰ্য্যালোচনা](https://as.wordpress.org/plugins/agency-toolkit/#reviews)
 *  [ইনষ্টলেশ্যন](https://as.wordpress.org/plugins/agency-toolkit/#installation)
 * [বিকাশ](https://as.wordpress.org/plugins/agency-toolkit/#developers)

 [সাহায্য](https://wordpress.org/support/plugin/agency-toolkit/)

## বৰ্ণনা

The Agency Toolkit plugin provides a lightweight way for agency owners, freelancers
and website owners to quickly debug, optimize, and streamline the WordPress experience
without needing a dozen or more additional plugins. This plugin came out of a need
for our own agency to standardize the WordPress settings across all of our maintenance
clients. This plugin saves time and maintenance by reducing the need for many other
third party plugins and ensures only privileged users can access these settings.

Each setting can be enabled or disabled as needed to keep things light and customized
to your own needs. Currently, we support the following with more to be added:

**General Settings:**

 * Limit the users who can view the Agency Toolkit Settings Page
 * Enable maintenance mode
 * Enable the WordPress debugger
 * Enable a custom agency footer with a name, URL and email in the WordPress Dashboard
 * Enable a custom agency logo on the WordPress login screen
 * Show Environment Indicator in Admin Bar

**Security Settings:**

 * Disable theme and plugin editors
 * Limit the users who can install and update plugins and themes
 * Hide WordPress version generator in front-end source code
 * Limit the users who can view Site Health
 * Secure the wp-config.php file using .htaccess
 * Stop User Enumeration
 * Checksum verification for WordPress core files
 * Limit users who can modify Admin Email Address
 * Override the [Disable Admin Notices Individually](https://wordpress.org/plugins/disable-admin-notices/plugin)
   to show all admin notices
 * Backend users summary: last-seen tracking and a REST summary of users by role,
   activity and Two-Factor enrollment, plus a list of administrator accounts unused
   for a year (Kadence Security optional)

**Performance Settings:**

 * Limit or disable post revisions
 * Disable emoticons
 * Disable pingback and trackback notification emails
 * Disable self-pingbacks
 * Disable XML-RPC
 * Disable Media Comments
 * Remove RSD links

**Email Notifications Settings:**

 * Disable admin notification emails
 * Globally change email sender
 * Disable WordPress Admin Email Verification prompt
 * Change admin email address shared in user emails
 * Receive email notifications when specific plugins are updated
 * Receive email notifications when specific plugins are activated and deactivated
 * Receive email notifications for WooCommerce payment gateways set in test mode(
   only works with Stripe, Authorize.Net, and PayPal Payments)
 * Receive email notifications if WooCommerce payment gateways have been disabled

You can also export and import plugin settings via .json file to ensure you have
the same settings across all of your websites.

**What if I lock myself out of the Agency Toolkit interface?**

We have you covered. Simply go to **‘domain.com/wp-admin/admin.php?page=inspry-agency-
toolkit&rescue=email’** where **‘domain.com’** is the WordPress website root domain
and ’email’ is the email associated with your WordPress admin user account. This
will send a new email to your email address with a link to reset the ‘Limit the 
users who can view the Agency Toolkit Settings Page’ setting. This way all WordPress
admin users can access access the Agency Toolkit plugin interface. You can then 
re-select the users who should be able to access the interface in that setting.

See an option or tweak that you would find useful? Just email us and let us know.

Enjoy!

## ইনষ্টলেশ্যন

 1. Install the plugin through the WordPress repository, upload the zip file via the
    WordPress Dashboard Plugins page or upload to your website’s plugins folder.
 2. Activate the plugin through the Plugin dashboard in WordPress.
 3. Customize to your needs in your WordPress Dashboard’s left sidebar under ‘Agency
    Toolkit’.

## পৰ্য্যালোচনা

![](https://secure.gravatar.com/avatar/eeb679abf841310c35e208d7900d454155c7bf36ebd938693f8049a7f530e6de?
s=60&d=retro&r=g)

### 󠀁[A Must-Use Plugin For Website Developers](https://wordpress.org/support/topic/a-must-use-plugin-for-website-developers/)󠁿

 [PortMacOnline](https://profiles.wordpress.org/portmaconline/) আগষ্ট 1, 2023

This is one of those stupid-simple plugins that nobody has heard about, but once
you use it you will wonder how you managed without it! Do you want to turn off access
to the theme and plugin editors? Check. Limit the ability to update theme, plugins,
or WordPress itself to certain users? Check. Hide the WordPress version? Check.The
plugin is super lightweight, because it only loads and uses the modules that you
enable, and enabling an option is literally as easy as clicking on the 'Enable' 
button. So instead of installing half a dozen separate single-purpose plugins, with
their inherent incompatibility issues, this one plugin is all you need to set up
security, email notification and performance options on a new website. Brilliant!

![](https://secure.gravatar.com/avatar/9460c5783a519152043fed2b5c99d72ba7e53df8a5991f78a489677e4d5795cc?
s=60&d=retro&r=g)

### 󠀁[Simple & Effective — Replaces a dozen plugins!](https://wordpress.org/support/topic/simple-effective-replaces-a-dozen-plugins/)󠁿

 [Kyle Van Deusen](https://profiles.wordpress.org/skvandeusen/) জুন 15, 2022

I love that the Agency Toolkit plugin is simple while solving tons of problems! 
I can't wait to see where they go with this!

 [ আটাই 2টা পৰ্য্যালোচনা পঢ়ক ](https://wordpress.org/support/plugin/agency-toolkit/reviews/)

## অৱদানকাৰী আৰু বিকাশকাৰীসকল

“Agency Toolkit” হৈছে মুক্ত উৎসৰ ছফ্টৱেৰ। এইসকল লোকে এই প্লাগিনত অৱদান আগবঢ়াইছে।

অৱদানকাৰীসকল

 *   [ inspry ](https://profiles.wordpress.org/inspry/)

[আপোনাৰ ভাষাত “Agency Toolkit” অনুবাদ কৰক।](https://translate.wordpress.org/projects/wp-plugins/agency-toolkit)

### বিকাশৰ প্ৰতি আগ্ৰহী?

[ক’ড ব্ৰাউজ কৰক](https://plugins.trac.wordpress.org/browser/agency-toolkit/), [SVN ৰিপজিটৰী](https://plugins.svn.wordpress.org/agency-toolkit/)
চাওক নাইবা [RSS](https://plugins.trac.wordpress.org/log/agency-toolkit/?limit=100&mode=stop_on_copy&format=rss)-
দ্বাৰা [বিকাশৰ পঞ্জী](https://plugins.trac.wordpress.org/log/agency-toolkit/) ছাবস্ক্ৰাইব
কৰক।

## সলনি-পঞ্জী

#### 1.0.39

 * Change: Now requires WordPress 5.7 or later (was 5.5). Sites on an older WordPress
   keep working on 1.0.38 and are not offered this update.
 * Bug Fix: Maintenance Mode now answers visitors with HTTP 503 and a Retry-After
   header, the standard for planned downtime. It answered 500, which search engines
   and uptime monitors read as a broken site.
 * Bug Fix: Maintenance Mode no longer blocks WP-CLI or WordPress’s scheduled tasks(
   WP-Cron). Commands failed and scheduled jobs stopped while it was on.
 * Bug Fix: The inactive administrator list now includes accounts with no registration
   date on record (imported or migrated accounts). They were skipped before.
 * Improvement: Every setting is now cleaned when the settings form is saved, as
   WordPress.org requires. What is stored for a valid setting does not change.
 * Improvement: Code changes for WordPress.org’s Plugin Check: every file now uses
   the standard direct-access check, remaining admin text is translatable, and three
   outputs are escaped. No change in behaviour.

#### 1.0.38

 * New: The backend users summary now lists administrator accounts with no recorded
   activity for a year (username, display name, email address and last-active date),
   so unused accounts can be reviewed. Activity includes signing in, application
   password use and WooCommerce REST API key use, and an account that owns a WooCommerce
   API key, an application password, the Google Site Kit connection or the Jetpack
   connection is marked so it is not removed by mistake. The list stays empty until
   activity has been recorded on the site for a full year. Every other part of the
   summary is still counts only.
 * New: The backend users summary reports whether the Require Two-Factor setting
   is on.
 * Change: The suggested privacy policy text (Settings > Privacy) now describes 
   the inactive administrator list.

#### 1.0.37

 * Bug Fix: Secure the wp-config.php file and Stop User Enumeration no longer raise
   PHP warnings, or show a permissions error that could not be fixed, on servers
   that do not use .htaccess (nginx hosts such as Pressable) and under WP-CLI. On
   those servers the .htaccess rule is skipped because it would have no effect; 
   on Apache and LiteSpeed nothing changes.
 * Bug Fix: Stop User Enumeration now recognises its .htaccess rule when the rule
   is at the very start of the file, instead of adding it again.
 * Bug Fix: When .htaccess can be written but not read, those two settings no longer
   add their rule again on every page load. They show the permissions error instead.
 * Bug Fix: Turning Stop User Enumeration off now stops blocking ?author= links.
   They stayed blank with the setting off.
 * Bug Fix: Turning either setting off now removes its .htaccess rule even when 
   the rule was written with a different site URL or in the older format, and no
   longer rewrites .htaccess on every page load when nothing changed.
 * Improvement: The Secure wp-config rule now uses the Apache 2.4 directive where
   available and the older one otherwise, so it no longer depends on mod_access_compat.
   LiteSpeed servers keep the original rule. Rules already in place are left as 
   they are.
 * Bug Fix: Turning either setting off now also removes the blank lines its .htaccess
   rule added, instead of leaving them behind every time.
 * Improvement: Deactivating or deleting the plugin now removes its .htaccess rules,
   so deactivating it also clears a rule a server rejects. Settings are kept, and
   reactivating adds the rules back.

#### 1.0.36

 * Change: Backend users summary (Security) is now on by default. It is switched
   on once, the first time 1.0.36 loads, on existing sites and new installs alike.
   Unticking it in the Security settings turns it off, and later updates leave it
   off. To keep a site off before it updates, run wp option update inspry_toolkit_users_summary
   0 first, and do not save the Agency Toolkit settings until 1.0.36 is installed(
   saving replaces the 0). The summary is still counts only, for administrators 
   only, and nothing is sent off the site.
 * New: The backend users summary’s last-active timestamps are included in WordPress’s
   personal data export and erase tools, Settings > Privacy suggests policy text
   for them, and uninstalling the plugin deletes them. Settings are kept on uninstall,
   as before.
 * Bug Fix: Stop user enumeration no longer raises a PHP warning on requests without
   a query string, such as WP-CLI and cron.

#### 1.0.35

 * New: Backend users summary (Security, off by default). When enabled, records 
   when each backend user (administrator, shop manager, editor, author, contributor)
   was last active in the WordPress admin, at most once per hour, and exposes a 
   counts-only summary to administrators at /wp-json/agency-toolkit/v1/users-summary:
   users by role, last-seen age buckets, application-password holders and Two-Factor
   enrollment. No usernames or emails are included, and the requesting administrator
   is excluded from the counts. Two-Factor counts come from Kadence Security when
   it is active; without it they are reported as unavailable and the settings page
   says so.
 * Improvement: Function files now follow the WordPress filename convention, using
   hyphens as word separators. The option loader resolves both the new and legacy
   filenames, so existing files continue to load unchanged.

#### 1.0.34

 * Confirmed: Compatibility with WordPress 7.1.
 * Improvement: Select2 and the Inter font are now bundled with the plugin instead
   of being loaded from third-party CDNs, so the settings page makes no external
   requests.
 * Improvement: Script and style versions now follow the plugin version instead 
   of the current time, so browsers can cache them between page loads.
 * Bug Fix: Translation strings now use the “agency-toolkit” text domain so they
   can be translated. They previously used a domain that did not match the plugin
   slug.
 * Bug Fix: Prevent a PHP warning on requests where no host header is available,
   such as WP-CLI and cron.
 * Bug Fix: Escape the admin URLs printed in the settings page header.
 * Security: The settings import and export forms now require a nonce and the manage_options
   capability. Previously they could be triggered by a forged request against a 
   logged-in administrator.
 * Security: The admin access rescue flow now requires a logged-in user, and starting
   a reset requires the manage_options capability. Previously the reset email could
   be triggered anonymously.
 * Bug Fix: The Site Health redirect now stops execution after redirecting, so the
   page cannot be read by ignoring the redirect.
 * Bug Fix: Imported user lists now contain only user IDs. Previously the exported
   logins were kept alongside the resolved IDs.
 * Improvement: Scheduled events are cleared on plugin deactivation.
 * Bug Fix: The admin access rescue confirmation notice now shows after the redirect
   that follows starting a reset. Previously the email was sent but no confirmation
   appeared.

#### 1.0.33

 * Feature: Add optional Kadence Security force 2FA setup module.

#### 1.0.32

 * Bug Fix: Admin email restriction now uses readonly instead of disabled to prevent
   profile update failures.

#### 1.0.31

 * Bug Fix: Check for ToolKit Restriction status when displaying admin menu item.
   Prevents situations where disabling the option still restricted access.
 * Bug Fix: Add new selector for Admin Email input element.
 * Bug Fix: Respect WP_ENVIRONMENT_TYPE environment variable.
 * Confirmed: Compatibility with WordPress 7.0.

#### 1.0.30

 * Only check for disabled payment gateways in the admin area.

#### 1.0.29

 * Confirmed: Compatibility with WordPress 6.9.

#### 1.0.28

 * Bug Fix: Check if WooCommerce is activated before checking for any payment gateways
   that have been disabled.

#### 1.0.27

 * Bug Fix: Test mode notifications no longer sent for payment gateways that are
   deactivated.

#### 1.0.26

 * New Feature: Receive email notifications when specific plugins are activated 
   and deactivated.
 * New Feature: Receive email notifications for WooCommerce payment gateways switched
   to test mode. Currently only works with Stripe, Authorize.Net, and PayPal Payments.
 * New Feature: Receive email notifications when WooCommerce payment gateways are
   disabled.

#### 1.0.25

 * Security Fix: Only allow settings export for administrators.
 * Confirmed: Compatibility with WordPress 6.8.

#### 1.0.24

 * Security Fix: Only allow settings import file to change Agency Toolkit settings
   and not other WordPress settings.
 * Bug Fix: Avoid a PHP warning by checking for an .htaccess file before attempting
   to read it.

#### 1.0.23

 * Confirmed: Compatibility with WordPress 6.7.

#### 1.0.22

 * Bug Fix: Fixed an issue where admin emails were still being sent to administrators,
   despite the option being disabled, on sites with WooCommerce installed.

#### 1.0.21

 * Bug Fix: Modified the correction from 1.0.20.

#### 1.0.20

 * Bug Fix: Corrected admins still receiving password update emails on different
   PHP/hosting versions.

#### 1.0.19

 * Added auto deployment with 10up’s Github action.

#### 1.0.18

 * Confirmed: Compatibility with WordPress 6.6.

#### 1.0.17

 * Confirmed: Compatibility with WordPress 6.5.3.
 * Notice Fix: Resolved notice for function ‘inspry_toolkit_run_stop_user_emun_rule’.

#### 1.0.16

 * Confirmed: Compatibility with WordPress 6.4

#### 1.0.15

 * Bug Fix: Conflict with table and form plugins export function has been fixed.
 * Bug Fix: Removed Control WP Core Updates feature since multiple issues arose 
   from keeping it in the plugin.

#### 1.0.14

 * Bug Fix: Updated logic for getting the wp-config.php file path.
 * Bug Fix: Write changes to wp-config.php file correctly.
 * Bug Fix: Placed a check for constants already being defined.

#### 1.0.13

 * Bug Fix: Removed WP Debugger feature since multiple issues arose from keeping
   it in the plugin.

#### 1.0.12

 * Tweak: Set environmental indicator development URL field to be optional.

#### 1.0.11

 * Bug Fix: Error no longer shown when changing the Limit Amount for Post Revisions.
 * Bug Fix: Custom agency logo on login page dimensions are now proportional.
 * Bug Fix: Enabling the WP Debugger option on some sites and servers no longer 
   produce an error.
 * Bug Fix: Enabling the WP Debugger option on some sites and servers will actually
   enable the debug log correctly now.
 * Bug Fix: Adding a custom agency footer no longer produces an error.
 * Tweak: When saving changes, the most recent active tab is shown instead of redirecting
   back to the General tab.
 * Tweak: When enabling the Control WordPress Core auto-updates option, a choice
   is now required.
 * Tweak: Changed various option labels to be more clear.

#### 1.0.10

 * Security Fix: Escaped all PHP strings that are printed out to the page.
 * Bug Fix: Labels corrected and minor styling changes.
 * Bug Fix: Debug log and display now works on WP Engine hosted websites.
 * Bug Fix: Replaced PHP short tags with normal tags. Servers with short tags disabled
   can now activate the plugin.

#### 1.0.9

 * New Feature: Updated plugin logo and user interface with settings now categorized
   by the type of setting
 * New Feature: Show Environment Indicator in Admin Bar to differentiate visually
   between a staging website and production website
 * New Feature: Control WordPress Core auto-updates to select which core auto-updates
   run in the background
 * New Feature: Agency Toolkit Admin Access Reset functionality allows any WordPress
   admin to reset who has access to the Agency Toolkit plugin interface in case 
   of being lock out
 * New Feature: WordPress 6.2 refactoring
 * Bug Fix: Agency Toolkit plugin now is hidden from the WP dashboard correctly 
   for users without the proper privileges
 * Bug Fix: Site Health now cannot be directly accessed via URL for users without
   the proper privileges

#### 1.0.8

 * Bug Fix: Wrong option called on admin notify function, corrected to use proper
   option

#### 1.0.7

 * New Feature: Limit the users who can install and update plugins and themes (rather
   than being disabled for all users as a previous feature)
 * New Feature: Limit the users who can view Site Health (rather than being disabled
   for all users as a previous feature)
 * New Feature: Disable all admin notification emails including: new user notification
   to site admin, password change notification to admin, automatic WordPress core
   update e-mail, automatic WordPress plugin update e-mail, automatic WordPress 
   theme update e-mail (previous feature only disabled automatic core update emails)
 * New Feature: Disable Admin Email Notification Prompts upon login
 * New Feature: Change Admin Email Address shared in user emails to a specified 
   email address
 * New Feature: Email an alert notification to specified users if selected plugins
   are updated
 * New Feature: Daily Checksum verification for WordPress core files
 * New Feature: Limit users who can modify General Settings -> Administration Admin
   Email Address
 * New Feature: Stop User Enumeration function for security
 * New Feature: Disable Media Comments removes the comments field on new attachment
   uploads to prevent spam
 * New Feature: Override the Disable Admin Notices Individually plugin to show all
   admin notices
 * New Feature: Ability to export and import plugin settings via .json file
 * Tweak: Changed various setting option labels to be more clear.
 * Confirmed: Compatibility with PHP 8.0 ad PHP 8.1
 * Confirmed: Compatibility with WordPress 6.1

#### 1.0.6

 * Bug Fix: Removed PHP warnings

#### 1.0.5

 * Bug Fix: Disable emoticons option no longer removes classic editor features

#### 1.0.4

 * Bug Fix: Websites hosted on WPEngine now properly disable plugin and theme installs
   and updates when enabled

#### 1.0.3

 * New Feature: Hide Site Health from the WordPress backend

#### 1.0.2

 * Bug Fix: Limit Admins PHP warning if admins are selected in the options

#### 1.0.1

 * New Feature: Globally Change Email Sender Option so users can force all emails
   to come from a specific email address and name by default
 * Bug Fix: Limit Admins error if no admins were selected in the options

#### 1.0

 * Initial release

## মেটা

 *  **1.0.39** সংস্কৰণ
 *  **4 দিন আগত** শেষবাৰ আপডে’ট হৈছিল
 *  সক্ৰিয় ইনষ্টলেশ্যন **100+**
 *  WordPress-ৰ সংস্কৰণ ** 5.7 বা তাতকৈ ওপৰৰ **
 *  ইমানলৈকে পৰীক্ষা কৰা হৈছে **7.1.3**
 *  PHP-ৰ সংস্কৰণ ** 7.2 বা তাতকৈ ওপৰৰ **
 *  ভাষা
 * [English (US)](https://wordpress.org/plugins/agency-toolkit/)
 * [admin](https://as.wordpress.org/plugins/tags/admin/)[maintenance](https://as.wordpress.org/plugins/tags/maintenance/)
   [Notifications](https://as.wordpress.org/plugins/tags/notifications/)[security](https://as.wordpress.org/plugins/tags/security/)
   [xml-rpc](https://as.wordpress.org/plugins/tags/xml-rpc/)
 *  টেগবোৰ
 *  [উচ্চখাপৰ ভিউ](https://as.wordpress.org/plugins/agency-toolkit/advanced/)

## ৰে’টিংবোৰ

 5টাৰ ভিতৰত 5টা তৰা।

 *  [  2 5-star reviews     ](https://wordpress.org/support/plugin/agency-toolkit/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/agency-toolkit/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/agency-toolkit/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/agency-toolkit/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/agency-toolkit/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/agency-toolkit/reviews/#new-post)

[সকলো পৰ্য্যালোচনা চাওক](https://wordpress.org/support/plugin/agency-toolkit/reviews/)

## অৱদানকাৰীসকল

 *   [ inspry ](https://profiles.wordpress.org/inspry/)

## সাহায্য

কিবা ক’বলগীয়া আছে? সহায় লাগে?

 [সাহায্যৰ ফ’ৰাম চাওক](https://wordpress.org/support/plugin/agency-toolkit/)