Baza Helper

Description

Baza Helper adds the site tools that do not belong in a theme, each with its own switch on one dashboard.

Video: One WordPress plugin that replaces many

What is inside:

• WebP image generation with automatic delivery, from the dashboard or from the command line (WP-CLI).
• Page cache and speed tools: lazy images, deferred scripts, server rules and diagnostics, and a speed advisor that reads your home page and a Lighthouse report and turns on what helps.
• Technical SEO: an own XML sitemap with real modification dates, pictures and links between translations (or the WordPress one), robots.txt, structured data, social tags, redirects and an on-page SEO panel.
• Translation of pages, posts and categories with the AI models and translation services you connect (queue run by WP-Cron, a button in the block editor), and a spelling check.
• Analytics and site verification with a consent-first approach (Google Analytics 4, Tag Manager, Meta Pixel, Clarity).
• Menu studio: a drag-and-drop menu with mega panels and languages, for any theme.
• Link checker: wrong-language and out-of-date internal links, fixed in one click.
• Forms and entries (the path a visitor took is shown as a timeline when the form sends it), messenger alerts (Telegram, WhatsApp, Viber), a floating call-to-action button and a cookie banner whose switches start the way you choose.
• External links: decide what a link that leaves your site gets (a new tab, nofollow, sponsored for paid and affiliate links) with lists of trusted and own domains, without touching the posts.
• Content order: drag posts and terms of any type into your own order, in the admin and on the site.
• HTML sitemap: a page for visitors that lists the site, with a ready shortcode.
• Where a file is used: a “Used in” column for every file of the media library, and image sync for translations (Polylang) that puts missing pictures in place.
• Duplicate: a copy of a post, page or term in one click or in a batch.
• Elementor settings: clean up leftover files and sync the template library when you save.
• Backup and migration, export and import of settings, search and replace, replace image in the media library.
• Security: two-step login, a private login address, a login log and lockouts.
• Admin bar shortcuts, a site icon and web app manifest generator.
• Optional integration with the Baza Booking Calendar plugin.

Baza Helper does not depend on a theme and a theme does not depend on it. Baza Theme keeps its own widgets, menu studio and settings, and uses the same admin design.

Go further with Baza Helper Pro

The plugin you get here is complete on its own: nothing in it is locked or time-limited. When your site needs more, Baza Helper Pro is a separate, paid version that keeps everything above and adds more tools:

• Content Review – an AI assistant that you connect prepares changes to your pages, products, menus and translations as proposals. You see the difference, press Apply, and every applied change can be rolled back.
• Search Insights – your Google Search Console data kept in your own database, with the pages that lose clicks and the queries that compete with each other.
• Journey analytics – what a visitor did before a form was sent, with charts, funnels and goals.
• AVIF images – even lighter copies of your pictures, next to the WebP ones this plugin makes.
• Antivirus – a scan of files and the database against known malware, with quarantine and one-click restore.
• Internal links, Unused images, List columns, Email SMTP, Database cleanup, Git updates, Custom CSS and JavaScript, Critical CSS, Direct HTML delivery and Remove unused CSS.

See every Pro tool on the Baza Helper page and the plans on the pricing page.

WP-CLI

The WebP generator has its own command, for large libraries, servers without cron and deploy scripts. It runs the same job as the dashboard (the same settings from the WebP tab, the same worker) in your terminal, with a progress bar, no browser and no web request time limit:

wp baza-helper images generate converts the whole media library. Images that already have a current copy are skipped, so it is safe to run again.

wp baza-helper images generate --enable turns the image manager on first (the same switch as on the WebP tab) and then converts the library. Without `--enable` the command stops with a message when the manager is off.

wp baza-helper images generate --retry runs only the files that failed last time.

wp baza-helper images generate --force encodes every copy again, also those that already exist (the default only makes the missing ones). A job that is still running has to be cancelled first (`wp baza-helper images cancel`).

If WP-CLI prints a parse error from a WordPress core file, the shell’s default PHP is older than the one the site uses. Run WP-CLI with the site’s PHP binary, for example /usr/local/php84/bin/php wp-cli.phar --path=/path/to/site baza-helper images generate.

wp baza-helper images status shows the state of the job, the counts, the size saved and whether this server can encode WebP (`--format=json` for scripts).

wp baza-helper images pause and `wp baza-helper images cancel` stop the current job; `generate` continues a paused one. Copies already made are kept.

The image manager must be switched on in the WebP tab first.

External services

Baza Helper calls an external service only when an administrator turns the matching tool on and gives it an account or an address; nothing is sent to Baza Developers. The tools that do:

Analytics (optional). The analytics module can load the following scripts, but only after an administrator enables the provider and, by default, only after the visitor consents:

• Google Analytics 4 and Google Tag Manager (Google LLC) – https://policies.google.com/privacy
• Meta Pixel (Meta Platforms, Inc.) – https://www.facebook.com/privacy/policy/
• Microsoft Clarity (Microsoft) – https://privacy.microsoft.com/privacystatement

Nothing is loaded before the visitor chooses, unless the administrator turns on the setting “Count visitors who have not chosen yet (analytics only)” in the cookie banner settings (off by default): then the analytics scripts of the enabled providers start on the first page and stop at once if the visitor presses Reject.

Translation (optional). The Translation tool sends the text of a page, post or category, or the text to be spell-checked, to the service the administrator has connected, and only when a translation or a spelling check is requested (from the editor, the Translation tab or the cron queue). Nothing is sent until a service is connected. The services:

• The WordPress AI Client (Settings, Connectors): the provider and the key are the ones the site owner has set in WordPress itself; the plugin stores no key for it. Terms and privacy are those of the provider the site owner chose.
• Google Cloud Translation (Google LLC): the text to translate and the language codes are sent with the administrator’s own API key. Terms: https://cloud.google.com/terms – Privacy: https://policies.google.com/privacy
• DeepL (DeepL SE): the text to translate and the language codes are sent with the administrator’s own API key. Terms: https://www.deepl.com/en/pro-license – Privacy: https://www.deepl.com/en/privacy
• Microsoft Translator (Microsoft, Azure AI Translator): the text to translate and the language codes are sent with the administrator’s own key and region. Terms: https://azure.microsoft.com/en-us/support/legal/ – Privacy: https://privacy.microsoft.com/en-us/privacystatement
• LibreTranslate: the address is typed by the administrator (their own server or a provider’s); the text to translate and the language codes are sent to that address. The terms and the privacy policy are those of whoever runs it.

Messenger alerts (optional). When an administrator connects a messenger and an alert is sent (a new form entry, for example), the text of the alert (the fields of the entry, the page address) is sent to that messenger’s service with the administrator’s own token: Telegram Bot API, api.telegram.org (https://telegram.org/privacy); WhatsApp Business Cloud API, graph.facebook.com (Meta Platforms, Inc., https://www.facebook.com/privacy/policy/); Viber Bot API, chatapi.viber.com (Viber Media, https://www.viber.com/en/terms/viber-privacy-policy/).

YouTube pictures (optional, off by default). When an administrator turns on “Load embedded YouTube videos on click”, a video embedded in a page shows its picture from YouTube (i.ytimg.com) and loads the player from youtube.com only after the visitor clicks it. Without the option the embed loads as the page wrote it. YouTube (Google LLC) – https://policies.google.com/privacy

Google Fonts (optional). When an administrator picks a Google font in the Google Fonts tab, the plugin downloads the font’s stylesheet and files from fonts.googleapis.com and fonts.gstatic.com (Google LLC, https://policies.google.com/privacy) once, from the server, and then serves them from the site’s own uploads folder; visitors’ browsers do not contact Google for them.

Google Fonts, visitor’s browser (optional). If the site already loads Google Fonts and the option “Connect to Google Fonts early” is on, the page tells visitors’ browsers to open a connection to fonts.googleapis.com and fonts.gstatic.com (Google LLC, https://policies.google.com/privacy), which sends the visitor’s IP address to Google. Turn the option off, or host the fonts on the site, to avoid it.

Links that open another site when clicked. The admin bar shortcut “PageSpeed” opens Google PageSpeed Insights (pagespeed.web.dev, https://policies.google.com/privacy) with the address of the page when you click it; the call-to-action button links to the messenger or social network you chose (Telegram, WhatsApp, Viber, Instagram and others) when a visitor clicks it. Nothing is sent before the click.

Elementor template library (optional). If Elementor is active and the Elementor setting “Sync the template library when a page is saved” is on, saving a page asks Elementor to refresh its template library, at most once an hour. The request is made by Elementor’s own code to Elementor’s servers (https://elementor.com/privacy/); Baza Helper sends nothing itself.

Backup & migration. Archives are made on and restored from your own site; nothing is sent anywhere. One exception that an administrator starts by hand: in “Download from address” the administrator pastes the link of an archive, and the site downloads that file from that address (its owner sees the site’s address and nothing else is sent). The archive is checked before anything is restored.

Speed tools reading your own pages. The cache warm-up, the speed advisor and the performance check open your own pages and stylesheets from the server, and the speed advisor also reads the Google Fonts stylesheet (fonts.googleapis.com, Google LLC, https://policies.google.com/privacy) when a page loads one, to count the fonts. Nothing about your site is sent to Google in the request except what any browser sends.

Source code

The compressed CSS and JavaScript in this plugin are built from the readable sources in the same package: the Sass files are in assets/scss, and the non-minified .js file sits next to every .min.js. To build them again, install Node.js, open the plugin folder in a terminal and run npm install, then npm run build (the build files package.json and gulpfile.js are in the package; the build uses gulp, Sass, PostCSS and Terser).

Third party resources

• Coloris color picker 0.25.0 (MIT) – bundled in assets/vendor/coloris; the readable coloris.js and coloris.css sit next to the .min files.
• Simple Icons (CC0) – see assets/images/NOTICE.md.