SiteGalaxy

Description

SiteGalaxy, by JSRG Ventures, maps your WordPress site from the inside. It reads your published pages and posts, your menus, and the links in your content, then shows:

  • How many clicks each page sits from the homepage
  • Pages nothing links to (orphans) and pages buried more than 3 clicks deep
  • How your pages and posts link to each other, grouped by the content categories you name

Everything runs on your own site. The plugin sends nothing to any outside server.

Scans run in small batches, so large sites don’t time out. They normally run in the background, so you can leave the page. If your host or a security service blocks background tasks, keep the scan page open and SiteGalaxy finishes the scan from there.

After a scan you’ll see how many clicks each page sits from your homepage, which pages nothing links to, which blog posts no other page links to, and how your content splits across the categories you name. Name up to ten categories (your lines of business or main topics); every page and post is sorted into one of them, and you can rename them any time without rescanning.

Open SiteGalaxy > Site Map to explore it three ways: click orbits (your homepage as the sun, every page on a ring by clicks from home), site structure (columns by page type or by category, plus every blog post by category), and a 2D or 3D link map. Select any page to see what links to it, what it links to, and to correct its page type or category.

If the scanner put a page in the wrong category, switch Site structure to Category and drag the page to the right one. Your choice is kept on every future scan. A Planned orbits tab then shows how your arrangement would look if each category’s hub page linked to the pages you moved, so you can see what links to add. It never changes your site.

The Site Map opens inside your WordPress admin, and everything it uses, including the charts, loads from your own site.

Privacy and data

The plugin doesn’t contact any outside server and doesn’t track you or your visitors. During a scan it makes one request to your own homepage, to read links built into your theme. It stores what it finds (page and post titles, addresses, short excerpts, and the links between them) in its own database tables on your site, visible only to administrators. Deleting the plugin removes those tables and its settings.

Source code and bundled libraries

All of the plugin’s own PHP, JavaScript, and CSS is included uncompressed. The Site Map script, assets/site-map.js, is built (unminified) from the modules in src/site-map/ with npm run build. Three files are minified builds of open-source libraries:

  • assets/vendor/d3/d3.min.js: D3 7.9.0 (ISC), the project’s official browser build. Source: https://github.com/d3/d3
  • assets/vendor/jspdf/jspdf.umd.min.js: jsPDF 4.2.1 (MIT), the project’s official browser build, for the map PDF export. Source: https://github.com/parallax/jsPDF. Two lines differ from the original: the source-map comment and the address of an optional viewer script on a CDN, which SiteGalaxy never uses, are removed so nothing loads from outside your site.
  • assets/vendor/graph3d/graph3d.min.js: 3d-force-graph 1.80.1 (MIT, source: https://github.com/vasturiano/3d-force-graph) and three.js 0.186.1 (MIT, source: https://github.com/mrdoob/three.js), bundled with esbuild so the browser loads a single copy of three.js. The build entry is tools/graph3d-entry.js. To rebuild, run npm ci && npm run vendor in the plugin folder; versions are pinned in package.json.

Also included: Action Scheduler 4.2.0 by Automattic (GPL-3.0-or-later), which runs scans in the background, in vendor/woocommerce/action-scheduler. Source: https://github.com/woocommerce/action-scheduler (declared in composer.json).

Screenshots

Installation

  1. Upload the plugin folder to /wp-content/plugins/, or install it from the Plugins screen.
  2. Activate it.
  3. Open SiteGalaxy in the admin menu.

FAQ

Where do I report security bugs found in this plugin?

Please report security bugs found in the source code of the SiteGalaxy plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.

Does this plugin change my site?

No. It reads your content, menus, and links. It never edits pages, posts, menus, or links.

Does it work on multisite?

Activate it on individual sites. Network activation isn’t supported yet.

My scan says my site isn’t running background tasks. What do I do?

Scans normally run through WordPress’s background task system (WP-Cron). Some hosts and security services block it; a common cause is a Cloudflare Bot Fight Mode or similar bot protection challenging requests to wp-cron.php. SiteGalaxy detects this and runs the scan from the scan screen instead, so just keep that page open until it finishes. To fix the cause, allow requests to /wp-cron.php in your security service or ask your host to run WP-Cron.

What happens to my data if I delete the plugin?

Deleting the plugin removes its tables and settings. Deactivating it keeps everything.

Is there a paid version?

SiteGalaxy Pro and SiteGalaxy Agency are separate plugins, available at jsrgventures.com. This plugin is complete on its own and doesn’t need either of them.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“SiteGalaxy” is open source software. The following people have contributed to this plugin.

Contributors

Translate “SiteGalaxy” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.0.4

  • For developers: a jsrgsa_branding filter for the plugin’s name, menu, logo, report credit, and Need help? button, and window.JSRGSA_pdf hooks to add a cover page, closing text, footer text, or heading color to the map PDF.

1.0.3

  • Fix: deleting SiteGalaxy while another copy is still installed (for example an older version, or SiteGalaxy Pro) no longer stops with a critical error and no longer removes the data the other copy uses. Only this copy’s files are removed. Deleting the last copy still removes everything when «delete data on uninstall» is on.

1.0.2

  • First public release.