Title: Ikarexe Tools Author: Pavel Manzhos Published: October 9, 2026 Last modified: October 9, 2026 --- Search plugins ![](https://ps.w.org/ikarexe-tools/assets/banner-772x250.png?rev=3737263) ![](https://ps.w.org/ikarexe-tools/assets/icon-256x256.png?rev=3737263) # Ikarexe Tools By [Pavel Manzhos](https://profiles.wordpress.org/ikarexe/) [Download](https://downloads.wordpress.org/plugin/ikarexe-tools.0.3.0.zip) * [Details](https://wordpress.org/plugins/ikarexe-tools/#description) * [Reviews](https://wordpress.org/plugins/ikarexe-tools/#reviews) * [Installation](https://wordpress.org/plugins/ikarexe-tools/#installation) * [Development](https://wordpress.org/plugins/ikarexe-tools/#developers) [Support](https://wordpress.org/support/plugin/ikarexe-tools/) ## Description Ikarexe Tools replaces a handful of single-purpose plugins with one set of tools that look and work the same way. Every tool is a module with its own switch. Turn it on, set it up, and nothing else gets loaded. #### Modules in this version * **Popups** — popups in the centre, corner cards and bars for offers, promo codes, surveys and announcements. Triggers (time, scroll, leaving the page, idle, a click, adding to cart), page, device, visitor and date conditions, frequency. A built-in survey form with answer options, a contact field and consent checkboxes; responses are kept in the admin with where the visitor came from. Ready templates and a live preview. * **Corner Dock** — a floating dock of buttons in a corner of the site: call, messengers, email, any link, and a call-back form. Requests are kept in the admin, and can also come to Telegram and by email. Click statistics, page and device rules, your colours, icons and animation, with a live preview. * **Forms** — a drag-and-drop form builder with a live preview: contact and call- back forms, twenty kinds of fields (from a phone with a mask to file uploads, a rating and a slider), conditions that show fields by the answers, forms in steps with progress, and a calculator that counts a price as the visitor chooses. Eight ready styles and fine-tuning of colours, shape and buttons without CSS. Entries are kept in an inbox with statuses, notes, search and CSV, and can come by email, to Telegram and as a confirmation to the visitor. Spam protection without a captcha: a trap field, time on the page, a small task for the browser, a limit per address and stop words. Files are checked inside, stored outside public addresses and downloaded from the admin only. Entries are deleted after a period you choose. Put a form on a page with a shortcode. * **SEO** — how your pages look in search and in messengers: title and description templates for every post type and section with a live snippet preview, fields in the post editor, Open Graph and Twitter cards, Schema.org markup, breadcrumbs,`/ sitemap.xml`, robots.txt lines, what to hide from search, webmaster verification and checks of what keeps the site out of search. * **Login Guard** — slows repeated wrong passwords from the same IP address: by default two minutes after the first failure, fifteen after the second, and thirty after the third and later failures. You can forgive a few mistakes and set your own waits within safe limits. Covers the WordPress login page, other login forms such as a WooCommerce account page, and XML-RPC. Shows recent masked sources and activity for 30 days, with bounded storage that cannot grow without limit. Passwords and entered login names are never stored. * **Login Style** — puts your site icon on the WordPress login page, links it to your home page and gives the page one of six designs: Brand in the colour of your icon, Minimal, Matrix with falling code, Sweet with hearts and a bow, Winter holidays with snow and a garland, or the usual WordPress look. A live preview shows the real login page before you save. Animations stop for visitors who ask their device for less motion. * **Backup** — backs up the database and files of the site to one ZIP archive, at a click or on a schedule: by default the database every night and a full backup once a week, keeping the latest three of each. Works on any shared hosting: the copy is made in short steps, goes on in the background when you close the page, and never runs into a time limit. Every archive is read back and checked after it is made. Download a copy, upload one back and restore the database, the files or both: the database is loaded into temporary tables and switched in at once at the end, and a copy of the current database is made first. Move a site to another address, hosting or table prefix the same way: addresses, folders and prefixed keys are adapted everywhere in the database, serialized settings included, and a moved copy can stay a hidden test copy that sends no emails. Optional AES- 256 encryption with a password, a list of folders, files and tables to leave out, a journal and an email when a backup fails. * **Email Shield** — hides email addresses on your pages from spam bots. Visitors see and click them as usual. Nothing to set up. On WordPress 6.9 and newer the whole page is covered; on older versions — the content of posts, widgets and comments. * **Order Reply-To** — when a customer replies to a WooCommerce order email, the reply goes to the address you choose instead of the technical sender address. Needs WooCommerce. * **Privacy Pages** — builds your privacy documents from your company details and keeps an eye on the pages: a GDPR Privacy Policy and Cookie Policy, and the Russian 152-FZ policy and separate consent. Turn on only the documents you need. Plus a cookie banner that asks for consent (GDPR, with Google Consent Mode v2) or only informs, with a live preview. The documents are templates built from your answers. You are responsible for checking that they match what your site really does. #### For every module * **One dashboard.** Every tool with its version and on/off switch, and a list of what needs your attention. * **One switch per module.** A module that is off runs nothing on your site. Its settings stay open: change and save them whenever you like, and they start working the moment you turn the module on. * **Import and export.** Use one central screen to back up all settings or select only the modules you need. Backups remain usable when modules or settings change between Ikarexe Tools versions: the preview shows what can be applied, what will be skipped and which current fields are absent from the file. Access tokens go into a file only if you ask. * **Analytics goals.** Modules send goals to Yandex Metrika, Google Analytics 4 and Google Tag Manager — each one you switch on. * **Two languages.** The interface is in English and Russian. Pick the language in the settings, or let it follow WordPress. ### External services Ikarexe Tools contacts one external service, and only when you set it up. #### Telegram Bot API Corner Dock and Forms can send new requests and form entries to a Telegram chat through your own Telegram bot. This is off until you enter a bot token and a chat ID in the module settings. * **What is sent:** the bot token and chat ID you entered, and the text of the notification: the fields the visitor filled in (for example a name, phone number, email or message), the form name, the page the visitor was on, where the visitor came from and a link to the entry in your admin. Uploaded files are not sent, only their number. * **When:** each time a visitor sends a request or a form entry, and when you press the button that sends a test message. * **Where:** `https://api.telegram.org`, the Telegram Bot API. The service is provided by Telegram: [Terms of Service](https://telegram.org/tos), [Bot Platform Terms](https://telegram.org/tos/bot-developers), [Privacy Policy](https://telegram.org/privacy). Nothing else leaves your site. Analytics goals are passed to counters already installed on your pages; the plugin does not load their scripts. Backup sends background requests only to your own site. ## Installation 1. Plugins Add New Plugin, search for **Ikarexe Tools** and press Install Now. Or upload the plugin ZIP there with Upload Plugin. 2. Activate the plugin. 3. Open **Ikarexe Tools** in the admin menu and turn on the tools you need. All tools are off after installation. Nothing appears on your site until you turn a tool on and set it up. ## FAQ ### I changed the settings, but the site still shows the old ones Your site probably serves pages from a cache. Ikarexe Tools clears the cache of WP Super Cache, W3 Total Cache, WP Rocket and LiteSpeed Cache whenever a change affects the site. With another cache plugin, clear its cache by hand. ### What happens to a module I turn off? It stops loading: nothing from it runs on your site. Its settings stay, and they are back when you turn it on again. ### Does Ikarexe Tools send my data anywhere? Only where you ask it to. Corner Dock and Forms send requests and entries to your Telegram bot if you connect one; nothing else contacts an external service. Backup keeps archives on your own server and, to go on in the background, sends requests only to your own site. ### Where are backups kept, and who can download them? In a folder with a random name above the folder of the site, where no web address leads. If the hosting does not allow writing there, the folder is created inside uploads, and the Backup page says so. Archives are downloaded only from the Backup page, by an administrator. The folder is on the same server as the site, so download important copies and keep them somewhere else as well. When Ikarexe Tools is deleted, the archives stay in the folder on purpose. ### How do I restore a site that does not open any more? If the admin still opens, use Restore next to the backup. If it does not, restore by hand: install WordPress of the same version (the archive says which in `ikar- backup.json`), copy the `wp-content` folder and the files of `site-root` from the archive to the site, and import `database.sql` into the database with phpMyAdmin or the tools of your hosting. Keep the `wp-config.php` of the site: backups do not include it. ### How do I move the site to another address or hosting? Make a full backup on the old site and download it. On the new place install WordPress and Ikarexe Tools, turn on Backup, upload the archive and press Restore next to it. Backup sees that the address, the folder on the server or the table prefix differ and shows what it will change. It replaces the old address everywhere in the database— with and without www, http and https, inside JSON and inside serialized settings of themes and plugins, whose lengths it recounts — and the old server paths, renames keys that carry the table prefix, drops the caches of the old site and rebuilds the rules of addresses. Then sign in with a login and password of the old site. For a test copy (a subdomain, for example) keep “This is a test copy” on: search engines are asked not to index it and it sends no emails, because the moved database knows your real customers. ### Why does my computer not open an encrypted archive? The archive is encrypted with AES-256, which the built-in archive tools of Windows and macOS do not support. Open it with 7-Zip, WinRAR, Keka or The Unarchiver and type the password. ### How do I put a form on a page? Open Forms, create a form from a template or from scratch and copy its shortcode, like `[ikar_form id="abc12345"]`. Paste it into a page: in the block editor into a Shortcode block, in the classic editor or a page builder into the text. The form and its scripts load only on pages that have it. ### How do forms stop spam without a captcha? Every form has a field that people do not see and robots fill in, checks the time spent on the page and accepts no more than 5 entries in 10 minutes from one address. Before sending, the browser solves a small task in a fraction of a second: a robot without a browser cannot send at all, and mass sending becomes expensive. Entries with many links or your stop words go to the Spam folder without notifications. IP addresses are not stored. ### Are file uploads safe? Only the kinds you allow are accepted (images, office documents, ZIP), and the server checks what is really inside every file: scripts, web pages and programs are refused even when renamed. Files are stored under random names without extensions in a folder with a random name, and are downloaded through the admin only. A limit on the space for files keeps the disk from filling up. ### Can Login Guard lock the owner out? The restriction belongs to one IP address, never to the account. It does not grow when somebody retries during the waiting period, and it resets after a successful login, a completed password reset or 24 hours without another wrong password. An existing signed-in session is not affected and can remove all current restrictions from the module page. By default the longest wait is 30 minutes, and it can never be set longer than a day. If the site is behind a reverse proxy or CDN, the server must provide the real visitor address as `REMOTE_ADDR`; otherwise several visitors may appear to share one address — the module page warns you when it sees this. ### Where do call-back requests go? To Corner Dock Requests, always, even when Telegram is down. If you connect a Telegram bot, they also come there at once, and a copy can go to your email. Requests stay readable while the module is off and can be downloaded as a CSV file. ### How do scripts wait for cookie consent? Change the type of the script to `text/plain` and add `data-ikar-cookies="analytics"`( or `"marketing"`). Privacy Pages runs it after the visitor agrees. A link to `#ikar- cookie-settings`, or the `[ikar_cookie_settings]` shortcode, opens the cookie settings again. ### How do I show breadcrumbs? With the `[ikar_breadcrumbs]` shortcode in a page, or in a theme template: ``. The markup for search engines is added separately and works even without visible breadcrumbs. ### The sitemap opens as a 404 Go to Settings Permalinks and click Save: WordPress rewrites its address rules. ### Can I use another SEO plugin too? Better not: two plugins print their titles and descriptions at once, and the page code gets duplicates. The SEO module warns about it on its Overview tab. Turn off one of them — the SEO module or the other plugin. ### How do I open a popup from my own link or button? Give the link the address `#ikar-popup-ID` (the ID is shown in the popup settings), or add `data-ikar-popup="ID"` to any element. Such a click opens the popup at once, past its conditions and frequency. In JavaScript: `IkarPopups.open( 'ID' )`. ### How do I move settings to another site? Open Ikarexe Tools Settings Import and export. Select all settings, several modules or only one module before downloading the file. Upload an Ikarexe Tools backup on the same central screen: the plugin shows the modules and general settings it found and lets you choose what to apply. Requests, responses and statistics are not saved to the file: they hold personal data of your visitors. ### Can I import a backup from an older Ikarexe Tools version? Yes. Settings of modules available in the installed version are applied. A module that no longer exists is shown and skipped without stopping the rest of the import. Fields added after the backup was made keep their current values and are listed in the preview so that you can review any that are still empty. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Ikarexe Tools” is open source software. The following people have contributed to this plugin. Contributors * [ Pavel Manzhos ](https://profiles.wordpress.org/ikarexe/) “Ikarexe Tools” has been translated into 1 locale. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/ikarexe-tools/contributors) for their contributions. [Translate “Ikarexe Tools” into your language.](https://translate.wordpress.org/projects/wp-plugins/ikarexe-tools) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/ikarexe-tools/), check out the [SVN repository](https://plugins.svn.wordpress.org/ikarexe-tools/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/ikarexe-tools/) by [RSS](https://plugins.trac.wordpress.org/log/ikarexe-tools/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 0.3.0 * Needs WordPress 6.2 or newer. * Backup 0.2.0: wp-config.php is no longer copied — it holds the database password and the keys of logins, and a restore always kept the one of the site anyway. The keys and salts of logins that WordPress may keep in the database are left out of backups too; a restore keeps those of the site. Restoring the database goes through the standard WordPress database layer. * Forms 0.0.6, Popups 0.0.5, Corner Dock 0.0.5: entries, call-back requests and counters from visitors carry a WordPress nonce. A page that came from a cache long ago gets a fresh one by itself. * Login Guard 0.0.5, SEO 0.0.6, Login Style 0.0.6: database queries are prepared with placeholders for table names; the checks of a request go in the usual order; the address of the site icon is escaped for CSS. #### 0.2.1 * SEO 0.0.5: the sitemap design for people is written into the sitemap stylesheet itself, without a separate CSS file. #### 0.2.0 * The plugin is now called Ikarexe Tools (folder and text domain `ikarexe-tools`). Settings, entries and backups stay where they were. * Email Shield 0.0.2: on WordPress 6.9 and newer it works through the output buffer of the page in WordPress itself. * Forms 0.0.5: the form’s own CSS is added with the standard WordPress functions. * SEO 0.0.4: the sitemap design is a separate CSS file; structured data is printed with the standard WordPress function. * Popups 0.0.4, Corner Dock 0.0.4, Login Guard 0.0.4, Login Style 0.0.5, Backup 0.1.3, Privacy Pages 0.0.4, Order Reply-To 0.0.4: the new name; data from the browser is cleaned with the standard WordPress functions. #### 0.1.4 * Popups 0.0.3, Corner Dock 0.0.3, Forms 0.0.4, SEO 0.0.3, Login Guard 0.0.3, Login Style 0.0.4, Backup 0.1.2, Privacy Pages 0.0.3, Order Reply-To 0.0.3: the removal files check against direct opening in the standard way. The tools work as before. #### 0.1.3 * Checked with Plugin Check, the tool of the WordPress.org plugin directory. The tools work as before. * Login Guard 0.0.2: the daily counters of failed logins are updated with one fixed database query. * Popups 0.0.2, Corner Dock 0.0.2, Forms 0.0.3, SEO 0.0.2, Login Style 0.0.3, Backup 0.1.1, Privacy Pages 0.0.2, Order Reply-To 0.0.2: the removal files cannot be opened directly, database queries and settings carry notes for the review. #### 0.1.2 * Forms 0.0.2: uploaded files are saved with the standard WordPress upload handler. * Ready for the WordPress.org plugin directory: updates come from WordPress.org, the readme lists the external service the plugin uses. #### 0.1.1 * Login Style 0.0.2: the design cards are plain choices without small pictures — the preview beside them shows the real page. A large button under the preview opens the chosen design in a new tab. #### 0.1.0 * Backup 0.1.0: move a site to another address, folder or table prefix. Restore accepts a backup of another site and adapts it on the way: addresses in every form (http and https, www, JSON, URL-encoded, inside serialized settings and WPBakery raw blocks), server paths and keys with the table prefix are replaced in the temporary tables before the switch. A check before the move shows what changes and what to mind. * Backup: a moved copy can be a test copy — search engines are asked not to index it and it sends no emails, until you turn it off. * Backup: a restore on WordPress with SQLite switches tables in one transaction; tables with a collation the database server does not know get the nearest one; long statements are split for servers with a small packet limit. #### 0.0.1 * Fixed the robots.txt preview to include WordPress and plugin rules, update while typing, show an existing physical file, and warn about common mistakes in the final result. * First version: the dashboard, general settings with import and export, the interface language switch, a shared sender of analytics goals, the Popups, Corner Dock, Forms, SEO, Login Guard, Login Style, Backup, Privacy Pages, Email Shield and Order Reply-To modules. ## Meta * Version **0.3.0** * Last updated **19 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.2 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Languages * [English (US)](https://wordpress.org/plugins/ikarexe-tools/) and [Russian](https://ru.wordpress.org/plugins/ikarexe-tools/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/ikarexe-tools) * Tags * [forms](https://wordpress.org/plugins/tags/forms/)[popups](https://wordpress.org/plugins/tags/popups/) [privacy](https://wordpress.org/plugins/tags/privacy/)[security](https://wordpress.org/plugins/tags/security/) [seo](https://wordpress.org/plugins/tags/seo/) * [Advanced View](https://wordpress.org/plugins/ikarexe-tools/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/ikarexe-tools/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/ikarexe-tools/reviews/) ## Contributors * [ Pavel Manzhos ](https://profiles.wordpress.org/ikarexe/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/ikarexe-tools/)