admin管理员组

文章数量:1133890

I have a client whose site was broken by a plugin and instead of deactivating plugins, they deleted some kind of 'visual editor' plugin.

We managed to get the site back up and running and updated all the plugins.

HOWEVER - they don't remember the plugin for the visual editor.

Is there any place in the security logs or someplace where we can identify what the plugins WERE before they deleted them.

Does anyone know a way to check the logs so we can identify the name of the plugin my client deleted?

Thanks!

I have a client whose site was broken by a plugin and instead of deactivating plugins, they deleted some kind of 'visual editor' plugin.

We managed to get the site back up and running and updated all the plugins.

HOWEVER - they don't remember the plugin for the visual editor.

Is there any place in the security logs or someplace where we can identify what the plugins WERE before they deleted them.

Does anyone know a way to check the logs so we can identify the name of the plugin my client deleted?

Thanks!

Share Improve this question edited Jul 5, 2020 at 16:10 fuxia 107k38 gold badges255 silver badges459 bronze badges asked Jan 19, 2019 at 21:20 ViktorViktor 1111 silver badge2 bronze badges 4
  • 2 I would search the wp-options table for meta_key values that were left behind. They may betray what plugin they came from. – Jos Commented Jan 19, 2019 at 23:18
  • You could check the post contents. If there were shortcodes left behind by the visual editor this could give you a clue as to which visual editor was used. – admcfajn Commented Jan 20, 2019 at 0:43
  • 1 Most hosting companies have backups, you could look in the plugins folder of a backup – RiddleMeThis Commented Jan 20, 2019 at 5:39
  • You might be able to determine this from the server access logs, I think WP includes the list of plugins to delete in the request URL. – J.D. Commented Jan 22, 2019 at 17:09
Add a comment  | 

1 Answer 1

Reset to default 1

I know this is a bit late so I am going to post my answer for people who might encounter the same scenario. There are few things that you can do:

Option 1: Request a backup of your website from hosting company and then compare live version with that backup (as suggested by @RiddleMeThis)

Option 2: You can you check meta_key column of wp-options table to see if there are any unused meta_key entries (as suggested by @Jos) but if the website has changed a lot in the past then you may get false positives with a never ending search.

Option 3: Check your server access logs (as suggested by @J.D.) for those specific dates you may find a link similar to this :

http://your-wp-site.com/wp-admin/plugins.php?action=delete-selected&checked%5B0%5D=akismet%2Fakismet.php&plugin_status=all&paged=1&s&_wpnonce=4d4ca3d352

note that checked parameter it contains the name of the plugin that is requested to be deleted.

Option 4: If you suspect it was a visual editor plugin then you should look for left over shortcodes used commonly used by these kind of page editors this will give a hint about the plugin that was installed. If it was not page editor plugin then you may still find broken shortcode left over (only if this plugin was providing any shortcode)

Option 5: Some complex plugins make new custom tables in your database which are not deleted even after uninstalling the plugin. There you can check for tables that are not currently available in your plugin list.

My suggestion would be to get the backup from hosting company and compare your plugin list with that backup.

Best of luck.

本文标签: How to identify the names of deleted plugins