Emergency server help: get in touch

cPanel / WHM

cPanel and WHM scripts, tools and guides: installs, updates, security, SSL, email, MariaDB, migrations and fixes for shared hosting servers.

Restic Backup Script for Offsite Backups

A restic backup script for cron: dumps every MariaDB/MySQL database, backs up to any restic repository, applies daily/weekly/monthly retention, checks integrity and test-restores a random file.

September 30, 2026

MariaDB Slow Query Log Summary

Summarises the MariaDB slow query log without Percona tools: groups queries by fingerprint, ranks them by total time, count and rows examined, and prints the commands to turn logging on.

September 30, 2026

Disk and Inode Alert

A disk and inode alert for cron: checks every real filesystem for space and inode use, estimates days until full from growth between runs, and lists the largest directories when a threshold is crossed.

September 30, 2026

Access Log Top IPs and Bots Report

An access log top IPs report for Apache, LiteSpeed and Nginx: top IPs, agents, URLs, fake Googlebots, 404/5xx and wp-login or xmlrpc floods for the last minutes or hours, across all vhosts.

September 30, 2026

Redirect Chain Checker

A redirect chain checker for the command line: follows each URL hop by hop with curl and flags loops, chains longer than two, 302s, HTTPS downgrades, non-200 endings and inconsistent www/https variants.

September 30, 2026

PHP-FPM Slow Log Analyzer

Turns a PHP-FPM slow log into answers: slow requests grouped by script, stack frame, function and WordPress plugin, plus pm.max_children hits and timeouts per pool next to each pool's settings.

September 30, 2026

cPanel PHP Version Audit

A cPanel PHP version audit for EasyApache 4 MultiPHP: every domain's PHP version, a count per version, and a list of sites still running end-of-life PHP. Optional CSV export.

September 30, 2026

cPanel Account Inventory

A cPanel account inventory in one command: domain, addon and parked counts, IP, package, owner, disk, inodes, mailboxes, databases, PHP version, creation date and suspension for every account.

September 30, 2026

AutoSSL DCV Failures Report

Lists AutoSSL DCV failures on a cPanel server grouped by cause (DNS elsewhere, CAA, rate limit, blocked /.well-known/) and every installed certificate that expires within 14 days.

September 30, 2026

WP Toolkit CVE-2026-87900: what is affected and how to patch to 6.11.3

WP Toolkit CVE-2026-87900 is a critical argument-injection flaw in WP Toolkit for cPanel 6.11.2-10794 and earlier. Which versions are affected, how to confirm the fix, and what to check afterwards.

September 30, 2026

Backup Verify Script

A backup verify script that checks every account and database series: fresh, not shrinking, opens cleanly, and present for every expected account. Anything it cannot test is a failure.

September 30, 2026

Server Security Audit Script

A read-only server security audit script for Linux: SSH, firewall, brute-force protection, updates, ports, sudo and filesystem checks as PASS/WARN lines. Checks it cannot run are SKIP, never PASS.

September 30, 2026

Free website test

Is your website set up right?

Check SSL, security headers, redirects, robots.txt, sitemap, llms.txt and security.txt in one test. It takes about 30 seconds.