Smooth Sandbox Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Test plugins, themes and content in a private copy of your site using PluginPeer’s browser-based WordPress Playground.
PluginPeer is required to launch and record sandbox sessions. Snapshot generation stores a private copy on your WordPress server. Launch transfers the selected data to the browser; recording or saving in PluginPeer can upload data to its storage services.
Features
- Build background Snapshots, reusing unchanged files with fresh database exports.
- Choose runtime versions and captured plugin/theme packages.
- Include media and must-use plugins, with explicit content, user and credential choices.
- Delete a Snapshot with confirmation and retain saved settings.
- Open PluginPeer recording links from your dashboard.
Data included in a Snapshot
Snapshots include database tables, options, transients, metadata, comments, content and custom plugin tables. Draft, pending, private, scheduled and password-protected content requires opt-in. Media includes images, SVG, PDF, audio and video, including unattached items and available variants.
No source users are copied by default. Selected accounts retain their profiles, roles and metadata and receive new sandbox-only passwords. Source password hashes, account sessions and application passwords are excluded. Playground creates its own administrator account.
Detected keys and tokens are excluded unless individually selected in Credentials. Selected values are real credentials. Detection may miss secrets; unknown plugin data and content are retained. Review the data before launching: this is not automatic anonymization.
Trash, auto-drafts, their core relationships, temporary execution locks, WooCommerce sessions and this plugin’s recording data are excluded. Must-use plugins are copied; server drop-ins and server configuration are excluded. Cron jobs are retained with stale execution state cleared.
Storage and privacy
Snapshot files and settings are private per administrator and stored outside the public website root. Transfers require an authenticated administrator. Failed updates preserve the last completed Snapshot. Source-site or setting changes require regeneration.
Hosts may clear system-temp storage. For persistence, define SMOOTH_SANDBOX_SNAPSHOT_DIR as a private absolute directory outside the website and wp-content. Allow space for exports and old revisions, retained for at least one hour and pruned after successful builds.
Delete Snapshot removes the administrator’s stored revisions; saved user and credential selections remain. Deactivation and uninstall preserve settings, Snapshots and recording records. Remove Snapshots and recording references before uninstalling if they are no longer needed; retained private settings and legacy recording data require manual cleanup by the site administrator.
After Boot up sandbox, selected data is transferred to PluginPeer’s browser runtime, which can read it. Closing or reloading loses the temporary copy unless explicitly saved or exported. PluginPeer controls recording storage and visibility.
Imported plugins can contact external services through the Playground network transport, and scheduled jobs can run while the sandbox is open. Real credentials can therefore authorize real external actions. Outgoing WordPress mail and automatic core/package updates are disabled by the current runner. Only import code and data you trust; browser execution is not a security boundary against hostile imported plugins.
Recordings
Record sessions using PluginPeer’s recording controls. Keep the source WordPress tab open to receive saved recording links. Removing a reference from WordPress does not delete the recording at PluginPeer. Up to 500 references are kept per administrator.
Legacy recordings remain in private database tables. Hourly cleanup removes uploads unfinished for 24 hours and expired callback tokens. Deleting a WordPress user removes their recording records on this site.
External services
PluginPeer provides the browser runtime, import receiver, environment tools and recording service.
- Service: https://pluginpeer.com
- Terms: https://pluginpeer.com/terms
- Privacy: https://pluginpeer.com/privacy
- Runtime versions come from a catalogue bundled with the plugin and updated with plugin releases. Opening plugin administration screens does not contact PluginPeer.
- After explicit launch, the browser transfers the selected database, packages, media, source URLs, user profiles with new passwords, and selected credentials to Playground. Source database connection credentials are excluded.
- Recording and saving use PluginPeer’s storage and access controls. WordPress stores returned recording URLs.
- Service requests expose normal connection information such as IP address and browser/request metadata. No Smooth Bundle account connection is made by this plugin.
Smooth Bundle provides asset storage and delivery for PluginPeer. Browser assets use https://pluginpeer.smoothbundle.com. Recording or saving in PluginPeer can upload captured assets, recording data or saved environments to Smooth Bundle through PluginPeer. Some replay assets use public delivery URLs; visibility and retention depend on the PluginPeer feature used. Local Snapshot generation does not use cloud storage. See the privacy policy and terms.
WordPress.org supplies public plugin and theme packages. During Snapshot generation, WordPress may download exact releases from https://downloads.wordpress.org to compare their contents with installed files. Only package slugs and versions are requested; no site content or credential values are included. Playground also downloads verified packages when launching. See the WordPress.org privacy policy and terms.
Third-party code
Includes the unmodified database library from WordPress SQLite Database Integration 3.1.1 under GPL-2.0-or-later. It prepares SQLite Snapshots without replacing the source database connection. License and source checksum: vendor/sqlite-database-integration/LICENSE and SOURCE.txt.
Plugin PHP, JavaScript and CSS are included as readable source. PluginPeer is a separate service.
Screenshots
No screenshots provided
