Title: Flexa Site Migrator – WordPress Migration & Staging Author: FlexaTech Published: August 22, 2026 Last modified: August 22, 2026 --- Search plugins ![](https://ps.w.org/flexa-site-migrator/assets/banner-772x250.png?rev=3660065) ![](https://ps.w.org/flexa-site-migrator/assets/icon-256x256.png?rev=3660065) # Flexa Site Migrator – WordPress Migration & Staging By [FlexaTech](https://profiles.wordpress.org/flexatech/) [Download](https://downloads.wordpress.org/plugin/flexa-site-migrator.1.0.6.zip) * [Details](https://wordpress.org/plugins/flexa-site-migrator/#description) * [Reviews](https://wordpress.org/plugins/flexa-site-migrator/#reviews) * [Installation](https://wordpress.org/plugins/flexa-site-migrator/#installation) * [Development](https://wordpress.org/plugins/flexa-site-migrator/#developers) [Support](https://wordpress.org/support/plugin/flexa-site-migrator/) ## Description Flexa Site Migrator migrates a WordPress site from **production to staging**. It builds a package made of one or more `archive-*.zip` files (site files, split automatically), a `database.sql` dump, and a standalone `installer.php`. It works whether staging is on the same server or a different one, and **requires no shell/SSH access** — everything runs through the WordPress admin over regular HTTP. **Key features** * **Chunked build** — the database is exported in chunks (using `mysqldump` when available, otherwise pure PHP) and files are compressed in chunks to avoid timeouts. * **Three ways to deploy to staging** — pull-by-link, wp-admin import, or a standalone installer for empty sites. * **Serialize-safe search-replace** — URLs are updated with a recursive unserialize replace re-serialize algorithm, so serialized options/widgets never get corrupted. * **Handles large sites** — the build is fully chunked and files are split into ~200MB archive parts; the database deploy runs in a single request (check the System check panel for your PHP limits before importing very large databases). * **Token-protected transfers** — pull links carry an SHA-256 hashed token (only the hash is stored on the server), with optional password and IP allowlist restrictions. **Deployment methods** _Method A — Pull via link (simplest):_ Install the plugin on both production and staging. Build the package on production, copy the link, paste it on staging under Site Migrator Import, and click Pull & Migrate. Staging downloads the files from production (byte-range supported) and runs extraction, DB import, and search-replace on its own. _Method B — wp-admin import:_ Copy the package folder to staging’s `wp-content/flexasm- packages/`, then run the migration from Site Migrator Import. _Method C — Standalone installer:_ For an empty staging site with no WordPress. Upload `installer.php` and the package files to the site root, open `installer.php` in a browser, enter the database details, and start the migration. ### External services This plugin does not connect to any service operated by us or by a fixed third party, and it sends no data anywhere on its own. The only outbound network request it makes is to the **production site URL you paste on the staging side** (Site Migrator Import “Pull from production via link”). When you click Test connection or Pull & Migrate, staging contacts that URL to download the migration package (site files and the database dump) you created on production. The request carries the access token from the link, and, if the package is password- protected, the password you enter (sent in a request header). No third party is involved — both ends are your own sites — and nothing is transmitted until you paste a link and start a pull. ## Screenshots [⌊Build the migration package on the production site (Site Migrator → Export) — the database and files are exported in chunks with live progress.⌉⌊Build the migration package on the production site (Site Migrator → Export) — the database and files are exported in chunks with live progress.⌉[ Build the migration package on the production site (Site Migrator Export) — the database and files are exported in chunks with live progress. [⌊Pull from production via link — paste the pull link on staging (Site Migrator → Import), test the connection, and start the migration.⌉⌊Pull from production via link — paste the pull link on staging (Site Migrator → Import), test the connection, and start the migration.⌉[ Pull from production via link — paste the pull link on staging (Site Migrator Import), test the connection, and start the migration. [⌊Automatic migration in progress on staging — the package is downloaded, extracted, and the database imported with search-replace, all in one run.⌉⌊Automatic migration in progress on staging — the package is downloaded, extracted, and the database imported with search-replace, all in one run.⌉[ Automatic migration in progress on staging — the package is downloaded, extracted, and the database imported with search-replace, all in one run. [⌊Standalone installer — the system check verifies PHP, required extensions, archive parts, and the database connection before anything is touched.⌉⌊Standalone installer— the system check verifies PHP, required extensions, archive parts, and the database connection before anything is touched.⌉[ Standalone installer — the system check verifies PHP, required extensions, archive parts, and the database connection before anything is touched. [⌊Standalone installer — enter the staging database details, table prefix, new site URL, and directory path.⌉⌊Standalone installer — enter the staging database details, table prefix, new site URL, and directory path.⌉[ Standalone installer — enter the staging database details, table prefix, new site URL, and directory path. [⌊Migration complete — a one-click cleanup deletes installer.php, the archives, database.sql, and manifest.json for security.⌉⌊Migration complete — a one-click cleanup deletes installer.php, the archives, database.sql, and manifest.json for security.⌉[ Migration complete — a one-click cleanup deletes installer.php, the archives, database. sql, and manifest.json for security. ## Installation 1. Upload the `flexa-site-migrator` folder to `/wp-content/plugins/` on the **production** site (or install it through Plugins Add New Upload Plugin). 2. Activate the plugin through the **Plugins** menu in WordPress. 3. Go to **Site Migrator Export** to build a package. 4. To deploy via link or wp-admin import, install and activate the plugin on the ** staging** site as well, then use **Site Migrator Import**. ## FAQ ### Does it require SSH or WP-CLI? No. The whole build and import process runs inside the WordPress admin over normal HTTP requests. ### Will I get logged out after importing on staging? Possibly. After the database is overwritten, the users table belongs to production, so you may need to log back in with a production account. ### Does it handle multi-gigabyte databases? The build side is fully chunked, so exporting is safe at any size. The import on staging runs in a single request through wp-admin; for very large databases, check the System check panel and raise `max_execution_time`/`memory_limit` in php.ini first, or use the standalone installer (Method C). ### Is the transfer secure? Pull links carry an SHA-256 hashed token — only the hash is stored on production, and the real token stays in the link. You can additionally protect a package with a password and restrict it to specific IP addresses. Always delete the package after the migration is complete. ### What happens to my staging site? Staging is **completely overwritten** (files and database). Only use it with a staging site you can safely throw away. ### Is it translation-ready? Yes. All admin-facing strings (PHP and JavaScript) are internationalized under the` flexa-site-migrator` text domain, and a `languages/flexa-site-migrator.pot` template is included. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Flexa Site Migrator – WordPress Migration & Staging” is open source software. The following people have contributed to this plugin. Contributors * [ FlexaTech ](https://profiles.wordpress.org/flexatech/) [Translate “Flexa Site Migrator – WordPress Migration & Staging” into your language.](https://translate.wordpress.org/projects/wp-plugins/flexa-site-migrator) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/flexa-site-migrator/), check out the [SVN repository](https://plugins.svn.wordpress.org/flexa-site-migrator/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/flexa-site-migrator/) by [RSS](https://plugins.trac.wordpress.org/log/flexa-site-migrator/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.6 * Fix: the build now stops immediately with a clear message if WordPress core, a plugin, or a theme is updated on the source site while the package is being built. Previously the chunked build silently produced a torn package that mixed files from two versions (new files missing, removed files still present), which could fatal the migrated site. * Change: WordPress automatic updates are held off while a package build is in progress (released as soon as the build finishes, or within ~15 minutes if a build is abandoned). * Security: the mysqldump fast-path now passes the database password via the environment instead of the command line, so it is no longer visible in the server process list while the dump runs. * Fix: bundled translations in `/languages` are now loaded (`load_plugin_textdomain`), so translations work outside WordPress.org distribution too. #### 1.0.5 * Change: the plugin now has its own top-level admin menu **Site Migrator** (with** Export** and **Import** submenus) instead of living under Tools. #### 1.0.4 * Compatibility: tested up to WordPress 7.1. * Docs: added an “External services” section documenting the pull request to the production URL you provide (no third-party service is contacted). #### 1.0.3 * Security: package storage under `uploads/flexasm-packages` now denies ALL direct web access (deny-all `.htaccess`); archives, `database.sql` and `manifest.json` are streamed through authenticated admin-ajax endpoints (capability + nonce) or the hashed-token pull endpoint instead of direct URLs. * Security: `installer.php` is no longer written into the uploads directory — it is streamed on demand straight from the plugin’s template, so no runnable PHP file ever lives in uploads. * Security: removed the standalone `runner.php` chunked-import mechanism (a web- executable PHP file in uploads); the database deploy always runs through the authenticated wp-admin AJAX request. * Change: all database work in the plugin now goes through `$wpdb` with `prepare()`— the direct `mysqli_*` calls were removed from the exporter, importer, and search- replace, and table/column identifiers are bound with the `%i` placeholder. * Change: the minimum supported WordPress version is now 6.2 (required for the `% i` identifier placeholder in `$wpdb->prepare()`). * Fix: the file archiver now excludes the package storage directory at its real( uploads-based) location, so packages no longer get zipped into themselves. * Fix: a build or import no longer aborts when a single AJAX request drops — chunked requests are retried up to 3 times with backoff, the pull download writes each chunk at its explicit offset so a retry can never duplicate bytes, and connection errors now report the HTTP status code. * Change: the standalone installer now disables its buttons and shows a spinner with a busy label while a step is running (the migration step runs in a single request and can take minutes), preventing double submits. Steps are submitted with fetch() so the page — and the busy indicator — stays visible while waiting, in every browser (a slow full-page POST would blank the page in Safari). * Fix: after a successful pull deletes a package’s migration files from production( automatic cleanup), the package list now says so instead of offering downloads— the .zip download, pull link and pull endpoint all return a clear “create a new package” message rather than an installer-only zip. Leftover directories from cleaned-up or unfinished builds are now listed and can be deleted from the UI. #### 1.0.2 * Change: renamed the plugin to **Flexa Site Migrator** (slug `flexa-site-migrator`) for a distinctive, non-generic name. * Change: prefixed all globals, constants, options, AJAX actions, script/style handles, and nonces with `flexasm_`/`FLEXASM_` under the `Flexa\SiteMigrator` namespace to avoid collisions. * Security: hardened database export, import, and search-replace queries — table and column identifiers are now backtick-escaped, closing an identifier-interpolation gap. #### 1.0.1 * New: manual installer now runs a system requirements check (files present, database connection, PHP extensions) before starting a migration. * New: one-click cleanup of the migration files (installer, archives, database dump, manifest) from the success screen after migrating. * New: download an entire package as a single .zip, in addition to downloading each file separately. * Fix: database import could fail on MySQL 5.7+/8.0 with “Invalid default value” on legacy zero-date columns (e.g. WooCommerce ActionScheduler). * Fix: downloading installer.php could fail on servers that block direct access to PHP files under uploads; it is now served safely through the admin. * Change: removed the “Remove plugin from the source site” button — uninstall the plugin on the source site manually. #### 1.0.0 * Initial release. ## Meta * Version **1.0.6** * Last updated **17 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.2 or higher ** * Tested up to **7.1** * PHP version ** 7.0 or higher ** * Tags * [backup](https://wordpress.org/plugins/tags/backup/)[clone](https://wordpress.org/plugins/tags/clone/) [duplicate](https://wordpress.org/plugins/tags/duplicate/)[migration](https://wordpress.org/plugins/tags/migration/) [staging](https://wordpress.org/plugins/tags/staging/) * [Advanced View](https://wordpress.org/plugins/flexa-site-migrator/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/flexa-site-migrator/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/flexa-site-migrator/reviews/) ## Contributors * [ FlexaTech ](https://profiles.wordpress.org/flexatech/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/flexa-site-migrator/)