WP Mechanic

WP Mechanic connects your site to a family of companion Android applications. Scan a QR code once on the plugin screen and the app can list and edit your WordPress users, browse WooCommerce orders, products and customers, and more – without you ever typing an admin password into a phone.

Included applications (all pair from the “WP Mechanic” menu)

• WordPress Users
• WordPress Users Management
• WordPress Acrobatics (approve a temporary login from your phone)
• WooCommerce Customers, Orders and Products
• Alphabetic Pagination, Woo Coming Soon and WP Docs

Security by design

• Pairing QR codes expire after a few minutes and work only once.
• Every paired device gets its own random key; keys are never printed in a web page.
• Repeated wrong keys from one IP address are throttled.
• Temporary logins (Acrobatics) must be approved by a paired app, expire quickly and are single use.

Optional Pro add-on

A separate “pro” folder can be dropped into the plugin directory to unlock extra tools (activity log, per-device key revocation, access controls, IP allow-list, users CSV export). Remove the folder and everything above keeps working. The Pro add-on is not part of the copy distributed on WordPress.org.

• Author: Fahad Mahmood
• Project URI: https://androidbubble.com/blog/wordpress/plugins/wordpress-mechanic

External services

WP Mechanic does not call any external service. It only shows links that open when you click them:

• Google Play (play.google.com) – download links for the companion apps on the plugin screen.
• Google Meet (meet.google.com) – optional “need help” link shown on a product page when ?help is added to the URL; the link can be changed per product with a meeting-link custom field.

Credits

QR codes are generated with the bundled “PHP QR Code” library by Dominik Dzienia (LGPL 3, http://phpqrcode.sourceforge.net/).