About this plugin
Mihanz Site Migration and Backup moves a WordPress website in two simple steps:
- On the old site click Export and download the.wpem package.
- On the new site click Import and drag the file into the browser.
Everything else is handled for you.
Features
- Export without size limit – database, plugins, themes, media library, must-use plugins and other wp-content folders. Works in short resumable steps, so large sites do not hit PHP timeouts or memory limits.
- Real progress – the progress bar shows measured work (files packaged, rows exported), not a fake animation.
- Drag & drop import – chunked, resumable upload with a checksum for every chunk. PHP upload limits do not matter.
- Package validation before anything changes – every part of the package is checked (SHA-256 checksums, structure, file paths and database statements). A damaged or malicious package is rejected before your site is touched.
- Automatic safety backup – before an import the current site is backed up, and a Restore Previous Site button is offered if something goes wrong.
- Safe URL replacement – old addresses are replaced with the new ones in the whole database. Serialized data (page builders, widgets, options) and JSON are handled without corrupting them.
- Database prefix change is handled automatically.
- Backups screen – download, restore, verify, rename and delete backups stored on your server.
- Scheduled backups – daily, weekly or monthly, keep the last 5, 10, 20 or 50.
- System Status and Logs screens.
- WP-CLI – wp wpem export, import, backups, restore, verify, cleanup.
No size limits
Export and import have no size limit in this plugin. Packages are uploaded in small, resumable chunks, so PHP upload limits do not apply. Only the free disk space of your server matters.
Security
- Only administrators (super administrators on multisite) can export, import, restore or delete.
- Backup files are stored in a protected folder with unguessable file names and are downloaded only through an authenticated request.
- Package contents are never trusted: unsafe file paths (../, absolute paths, symlinks) are refused, executable files inside the uploads folder are skipped, and only a strict set of database statements can run.
Limitations
- WordPress Multisite is not supported yet.
- wp-config.php is never exported (it contains secrets).
- Database tables that do not start with your table prefix are not exported.
- Cloud storage (Google Drive, Dropbox, S3) is not included in this version.
Privacy
This plugin does not send any data to external services and does not track you. Backups stay on your own server.