Title: Server Scout
Author: susheelhbti
Published: <strong>2026年6月11日</strong>
Last modified: 2026年6月11日

---

プラグインを検索

![](https://s.w.org/plugins/geopattern-icon/server-scout.svg)

# Server Scout

 作者: [susheelhbti](https://profiles.wordpress.org/susheelhbti/)

[ダウンロード](https://downloads.wordpress.org/plugin/server-scout.zip)

 * [詳細](https://ja.wordpress.org/plugins/server-scout/#description)
 * [レビュー](https://ja.wordpress.org/plugins/server-scout/#reviews)
 *  [インストール](https://ja.wordpress.org/plugins/server-scout/#installation)
 * [開発](https://ja.wordpress.org/plugins/server-scout/#developers)

 [サポート](https://wordpress.org/support/plugin/server-scout/)

## 説明

**Server Scout** is a tool for server administrators who manage multiple WordPress
sites on the same server. Instead of logging into each site one by one, Scout gives
you a single dashboard where you can see every WordPress installation on the server
and quickly access them.

#### What it does

 * Recursively scans a directory of your choice (e.g. `/var/www`) for all WordPress
   installations.
 * Displays each site’s name, URL, WordPress version, and database prefix.
 * Lists all administrator users for each site (username + email).
 * Generates a secure, one-time, 5-minute login link so you can jump straight into
   any site’s admin area without needing the password.

#### Who is it for?

 * **VPS / dedicated server owners** managing multiple client or personal WordPress
   sites.
 * **Developers** running several local or staging environments on one machine.
 * **Agencies** with a fleet of sites on a single server.

#### How login links work

 1. Click **Generate Login Link** next to any admin user.
 2. A cryptographically signed, one-time token is stored in that site’s database (valid
    for 5 minutes).
 3. The generated link goes through WordPress’s standard `admin-ajax.php` endpoint —
    not a direct PHP file — and includes a nonce for request verification.
 4. Opening the link logs you directly into that site’s admin dashboard.
 5. The token is deleted immediately on first use — it cannot be used twice.

#### Security

 * Requires the `manage_options` capability (Administrator) to use the plugin.
 * All form submissions are protected with WordPress nonces.
 * Login links use `wp_ajax_nopriv_` (WordPress AJAX), include a nonce, and go through`
   admin-ajax.php`.
 * Tokens are HMAC-signed with WordPress’s built-in `secure_auth` salt — cannot 
   be forged.
 * Scan paths are validated with `realpath()` before use.
 * All database queries use prepared statements.
 * The standard `wp_login` action is fired on login so security plugins (login limiters,
   audit logs) are notified.

**Important:** This plugin is intended for server administrators only. Do not install
it on shared hosting environments where you do not control all sites on the server.

## インストール

 1. Upload the `server-scout` folder to `/wp-content/plugins/`.
 2. Activate the plugin through the **Plugins** menu in WordPress.
 3. Go to **Tools  Server Scout** in the admin menu.
 4. Enter the root directory to scan (e.g. `/var/www`) and click **Scan Server**.

## FAQ

### Will this work on shared hosting?

Technically yes, but it is not recommended. This plugin reads the database credentials
of other WordPress installations on the same server. Only use it if you own and 
administer all sites on that server.

### Can someone else generate login links for my site?

No. The plugin requires Administrator-level access (`manage_options`) to the WordPress
site it is installed on. Login links also require a valid nonce and are protected
by an HMAC-signed token.

### What happens to unused login links?

Tokens expire automatically after 5 minutes. When you delete the plugin, `uninstall.
php` cleans up any leftover tokens from the database.

### The scan found no results. What should I check?

 * Make sure PHP has read permission for the scan directory.
 * Try a more specific path (e.g. `/var/www/html` instead of `/`).
 * Some server setups place sites under `/home` or `/srv/www`.

### Why does the login link say “invalid”?

The link was either already used (one-time only) or has expired (5-minute window).
Generate a new one.

## 評価

このプラグインにはレビューがありません。

## 貢献者と開発者

Server Scout はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献し
ています。

貢献者

 *   [ susheelhbti ](https://profiles.wordpress.org/susheelhbti/)

[“Server Scout” をあなたの言語に翻訳しましょう。](https://translate.wordpress.org/projects/wp-plugins/server-scout)

### 開発に興味がありますか ?

[コードを閲覧](https://plugins.trac.wordpress.org/browser/server-scout/)するか、
[SVN リポジトリ](https://plugins.svn.wordpress.org/server-scout/)をチェックするか、
[開発ログ](https://plugins.trac.wordpress.org/log/server-scout/)を [RSS](https://plugins.trac.wordpress.org/log/server-scout/?limit=100&mode=stop_on_copy&format=rss)
で購読してみてください。

## 変更履歴

#### 1.0.0

 * Initial release.

## メタ

 *  バージョン **1.0.0**
 *  最終更新日 **12時間前**
 *  有効インストール数 **10未満**
 *  WordPress バージョン ** 5.5またはそれ以降 **
 *  検証済み最新バージョン: **7.0**
 *  PHP バージョン ** 7.4またはそれ以降 **
 *  言語
 * [English (US)](https://wordpress.org/plugins/server-scout/)
 * タグ
 * [admin](https://ja.wordpress.org/plugins/tags/admin/)[management](https://ja.wordpress.org/plugins/tags/management/)
   [multisite](https://ja.wordpress.org/plugins/tags/multisite/)[server](https://ja.wordpress.org/plugins/tags/server/)
   [tools](https://ja.wordpress.org/plugins/tags/tools/)
 *  [詳細を表示](https://ja.wordpress.org/plugins/server-scout/advanced/)

## 評価

レビューはまだ送信されていません。

[Your review](https://wordpress.org/support/plugin/server-scout/reviews/#new-post)

[すべてのレビューを見る](https://wordpress.org/support/plugin/server-scout/reviews/)

## 貢献者

 *   [ susheelhbti ](https://profiles.wordpress.org/susheelhbti/)

## サポート

意見や質問がありますか ?

 [サポートフォーラムを表示](https://wordpress.org/support/plugin/server-scout/)