چۈشەندۈرۈش
Yedekalma is a free backup plugin that takes a one-click backup of your entire site — files and database — and restores it again from the same screen. It also migrates your site to a new host or domain and scans it for malware.
Everything runs on your own server. No account, no sign-up and no API key: install, activate, click Take Backup. Your backup archives stay on your hosting, and you can download them as a ZIP at any time.
Backup
- Full backup — every file (themes, plugins, uploads) plus the complete database.
- Database backup — MySQL dump only, gzip compressed (
.sql.gz) for large sites. - Files backup — site files only, without the database.
- Works on shared hosting — chunked, time-sliced backup that finishes even when
exec()is disabled and PHP limits are strict. - Incremental backup — compares real file modification times, so a changed file is never skipped.
- Safe storage — local backups live in a hardened, non-browsable folder with unguessable file names.
Restore
- One-click restore of the database, plugins, themes and uploads straight from your dashboard.
- Restore from an archive you already have — drag & drop a
.zip,.sqlor.sql.gzfile and restore from it. - Integrity checked — a truncated or corrupt archive is refused instead of half-applied, so a bad file can never damage a working site.
- SHA-256 verification of every archive before a restore begins.
Migration
- Move your site to a new host — download the backup, install Yedekalma on the target server and restore.
- Change domain safely — site URL and home URL are rewritten in the database automatically during the restore.
- New database server —
wp-config.phpcredentials can be updated as part of a restore.
Malware scanner
- Security scan of PHP, JS and configuration files across WordPress core, your plugins and the active theme.
- Detects code injections, web shells and backdoors using malicious-pattern matching.
- Persistent results — the scan report survives page reloads, so you can review it whenever you like.
- Bulk clean — select detected files and delete them in one click.
- Core protection — WordPress core files are shielded from accidental deletion while planted files can still be removed.
Optional cloud service
Local backup, restore, migration and the malware scanner are complete on their own and never contact an external server. If you also want off-site copies, you can connect the optional Yedekalma cloud service (see External services below) to:
- Stream backups to your own Google Drive, Amazon S3, Wasabi, Backblaze B2, Dropbox, OneDrive or FTP/SFTP storage.
- Run scheduled automatic backups daily or weekly with retention rules.
- Encrypt archives with client-side AES-256 (BYOK) before they leave your server — the passphrase never leaves your site.
Languages
Yedekalma ships with English, Turkish (Türkçe), German, Russian and Arabic translations.
External services
This plugin can optionally connect to the Yedekalma cloud service (an external SaaS) to perform off-site backup and restore operations, package backups for delivery to your own cloud storage, check subscription state, and monitor backup quota. This connection only happens if you choose to use the cloud service (by entering an API token or using the in-plugin «try without registering» option); the plugin’s local backup/restore features work without any external connection.
- Service URL: https://yedekalma.com
- Terms of Service: https://yedekalma.com/legal
- Privacy Policy: https://yedekalma.com/legal#privacy
- Data Transmission: When connected, the plugin sends requests to the Yedekalma API containing your Site URL, active plugin features, backup metadata (such as file lists, sizes, and checksums), and your API token (or anonymous install id) to perform secure backup and restore tasks.
ئورنىتىش
- In your WordPress admin, go to Plugins Add New.
- Search for Yedekalma.
- Click Install Now, then Activate.
- Open Yedekalma in the admin sidebar.
- Click Start without an account and take your first backup.
Manual installation: upload the yedekalma folder to /wp-content/plugins/ and activate it from the Plugins screen.
FAQ
-
Is this backup plugin free?
-
Yes. Backup, restore, migration and the malware scanner are fully functional with no account and no payment. The optional Yedekalma cloud service adds off-site storage and has a free tier.
-
How do I back up my WordPress database?
-
Open Yedekalma Dashboard, click Take Backup and choose Database Only. You get a compressed MySQL dump (
.sql.gz) that you can download or restore later. -
Can I use it to migrate my site to a new host or domain?
-
Yes. Take a full backup, download the ZIP, install Yedekalma on the target site and restore the archive there. The site URL and home URL in the database are updated for the new domain automatically.
-
Yes. Backups run in time-sliced chunks and do not need
exec(), shell access or MySQL credentials, so they finish on hosts with low execution-time and memory limits. -
Where are my backups stored?
-
In
wp-content/uploads/yedekalma-backups/on your own server. The folder is protected from directory browsing and the archive names include a random token, so nobody can guess the URL. If you connect optional cloud storage, backups go to your own Google Drive, S3 or FTP account instead. -
How does the malware scanner work?
-
It scans PHP, JS and configuration files in WordPress core, your plugins and the active theme for malicious patterns, code injections, web shells and backdoors. Results are saved so you can review them later, and you can delete detected files in bulk. Core WordPress files are protected from deletion.
-
What happens to my backups if I delete the plugin?
-
Nothing. Local archives under
wp-content/uploads/yedekalma-backups/stay where they are unless you remove them yourself, and anything in your own cloud storage stays there too. -
Türkçe destekliyor mu?
-
Evet. Yedekalma tamamen Türkçe arayüze sahiptir: site yedekleme, veritabanı yedekleme, yedekten geri yükleme, site taşıma ve virüs/zararlı yazılım taraması işlemlerinin tümünü Türkçe olarak yapabilirsiniz.
-
Is Multisite supported?
-
Not in version 1 — a separate plugin instance per site is required. Full Multisite support is on the roadmap.
-
Is it GDPR / KVKK compliant?
-
Yes. The plugin makes no external connection at all unless you deliberately connect the optional cloud service, and explicit consent is collected for that data transfer.
باھالاشلار
بۇ قىستۇرمىغا تېخى باھا يېزىلمىدى.
تۆھپىكار ۋە ئىجادكار
«Yedekalma — Backup, Restore, Migration & Malware Scanner» كودى ئوچۇق يۇمشاق دېتال. تۆۋەندىكى كىشىلەر بۇ قىستۇرمىغا تۆھپە قوشقان.
تۆھپىكار
«Yedekalma — Backup, Restore, Migration & Malware Scanner» نى تىلىڭىزغا تەرجىمە قىلىڭ
ئىجادىيەتكە قىزىقامسىز؟
كودقا كۆز يۈگۈرتۈپ، SVN خەزىنە تەكشۈرۈپ ياكى RSSئارقىلىق ئىجادىيەت خاتىرىسىگە مۇشتەرى بولغىلى بولىدۇ.
ئۆزگىرىش خاتىرىسى
For the full history of older releases, see changelog.txt in the plugin folder.
1.11.6 — 2026-07-21
- DOCS: Rewrote the plugin description, feature list and FAQ.
- ASSETS: Added plugin directory icon and banner images.
1.11.5 — 2026-07-21
- FIX: Responsive threat table layout. Adjusted column widths and increased action column width to 110px so the protected shield badges fit cleanly without horizontal overflow.
1.11.4 — 2026-07-21
- FEATURE: Finalized malware scanner enhancements, core protection filters, and uninstall cleanup logic.
1.11.3 — 2026-07-20
- FEATURE: Custom malware scan protection layout. Integrated granular, detailed reasons for critical files (wp-config.php, active theme assets, root boot scripts, drop-ins, and admin/includes core files) to protect them from deletion, while still allowing the deletion of planted non-core exploits.
1.11.2 — 2026-07-20
- FIX: Robust option structure mapping. Hardened list rendering and DB option cleanup to support both array and object elements, preventing PHP type-error crashes on page loads and threat file deletions.
1.11.1 — 2026-07-20
- FIX: WordPress core protection. Added a strict safety check to prevent accidental deletion of critical WordPress files (such as files inside wp-admin, wp-includes, wp-config.php, index.php, etc.) via the malware scanner deletion tool.
1.11.0 — 2026-07-20
- NEW: Built-in Malware & Virus Scanner. Scan all PHP, JS, and configuration files for code injections, web shells, backdoors, and malicious patterns.
- NEW: Persistent Scan Results. Scanner results are securely saved on your site so they persist across page refreshes.
- NEW: Bulk Actions. Select all or specific detected threat files and delete them collectively with one click.
- NEW: Security Reminders. Contextual security notices recommend taking a virus scan before taking backups or restoring a backup.
1.10.4 — 2026-07-20
- NEW: Added drag-and-drop local backup file upload zone (.zip, .sql, .sql.gz) with real-time progress bar.
- FIX: Fixed critical bug where restored backups disappeared from the list due to options database caching.
- FIX: Fixed settings loss on restore by correcting options key preservation to ›yedekalma_settings‹.