TG Backup 1.0.3

Fixes direct web-access handling in the standalone cron and recovery tools.

• Removed leading shell interpreter lines that caused a PHP compile error under web execution. HTTP requests now receive 403 before worker or recovery work starts.
• Added explicit WordPress web-access guards recognized by Plugin Check, preserving the standalone cron worker and recovery without WordPress.
• Added real HTTP/CLI entry-point tests and a fresh-process encrypted archive recovery test.

Validation: Plugin Check 2.1.0 passed all 34 standard checks, including runtime checks, with zero errors and zero warnings. Eight entry-point checks, 15 archive/recovery cases and 39 isolated system-cron checks passed. See testing details.

• tg-backup-1.0.3.zip — installable WordPress plugin.
• tg-backup-1.0.3-source.zip — source, tests and build scripts.
• SHA256SUMS.txt — archive checksums.

TG Backup 1.0.2

Added optional BTC and USDT (TRON / TRC20) donation addresses to the settings footer and README.

• tg-backup-1.0.2.zip — installable WordPress plugin.
• tg-backup-1.0.2-source.zip — source, tests and build scripts.
• SHA256SUMS.txt — archive checksums.

TG Backup 1.0.1

TG Backup 1.0.1 is a free, open-source WordPress backup plugin by realnoedelo and contributors. It compresses and encrypts backups on your server, sends them through your own Telegram bot, and includes an independent recovery tool.

What changed

• TG Backup is now the plugin name, with a tg-backup folder and text domain. The native admin menu stays under Settings → TG Backup.
• One status message per backup. The worker updates its existing message with the stage, estimated overall progress, archive size and delivered parts. Supported channels/supergroups receive document links, with a bounded list for large backups. Completion, cancellation and errors update that same message; failed final edits receive bounded background retries.
• Silent documents. Archive parts, the manifest and recovery tool use Telegram's silent-delivery option. Telegram may still show notifications without sound; mute the destination chat to suppress per-file notifications entirely. Private bot chats use file/search instructions because they do not have supported message permalinks.
• WordPress HTTP API integration retains streamed multipart uploads, TLS verification, redirect refusal, HTTP/HTTPS/SOCKS proxies and supported DNS/DoH settings. Request hooks are isolated and cleaned up; compressed and oversized responses are bounded without hidden POST replay.
• Directory review fixes: prepared database identifiers, validated filesystem paths, corrected plugin metadata, and documented standalone CLI/local-stream/system-cron operations.
• Updated English README, setup, recovery, security and review notes. GNU GPL-3.0-or-later remains unchanged.

Download

• tg-backup-1.0.1.zip — upload this in WordPress under Plugins → Add New → Upload Plugin.
• tg-backup-1.0.1-source.zip — source plus tests and build scripts.
• SHA256SUMS.txt — checksums for both archives.

Requirements: WordPress 6.5+, 64-bit PHP 8.1+, OpenSSL, zlib, cURL and private disk space. No account with the plugin authors, paid plugin plan or telemetry. You need your own Telegram account and bot.

Upgrading from 1.0.0

Wait for active jobs to finish. Keep your archive password and private backup directory. Deactivate the old plugin in telegram-backup; do not use WordPress Delete, because its uninstall handler can remove shared settings. Install and activate the new ZIP, verify settings/history/cron, then remove only the inactive old source folder. Do not activate both versions together. Keep TELEGRAM_BACKUP_STORAGE_DIR and its path unchanged. Existing archives/settings remain compatible; legacy wp telegram-backup commands still work alongside wp tg-backup.

Validation and limits

Passed: 15 archive/recovery cases including a real file larger than 2 GiB; 137 HTTP transport checks on WordPress 6.5 and 7.1.3; 8 fully bootstrapped WordPress HTTP checks; 67 storage/settings/SQL checks; 39 isolated system-cron checks; 25 status-message queue checks; native desktop/mobile UI checks. A full 6,911-source-file backup was restored and its SQL/binary values verified, and the restored site ran separately.

No real Telegram token/chat was supplied; real destination delivery must still be verified with Send test file. Cloud Bot API and self-hosted Bot API limits differ; Premium does not raise bot limits. Recovery decrypts into a new empty directory; database import and deployment remain explicit manual steps.

Plugin Check 2.1.0 reports two documented CLI-guard findings and zero warnings. This is not WordPress.org approval or an independent security audit. See verification evidence, review notes, and the recovery guide.

Telegram Backup 1.0.0

The first open-source release of Telegram Backup, a free WordPress plugin that sends encrypted backups to your own Telegram bot.

• Back up the whole site, the database, or files. Encrypt archives with AES-256-GCM before upload.
• Resume queued jobs, retry temporary failures, inspect logs, and track delivery confirmations.
• Schedule nightly backups, configure system cron from the plugin on supported hosts, and check the actual background heartbeat.
• Set local storage quotas, a free-space reserve, and retention by count and age.
• Use a proxy, custom DNS or DoH, connection diagnostics, and a test upload.
• Recover downloaded archive parts with a standalone PHP tool: enter the password, verify the archive, and extract files and SQL to an empty directory.

Install: download telegram-backup-1.0.0.zip, upload it through Plugins → Add New Plugin → Upload Plugin, then open Settings → TG Backup. Requires WordPress 6.5+ and 64-bit PHP 8.1+ with OpenSSL, cURL, and zlib. The interface and documentation are in English.

The cloud Bot API uses 40 MiB parts by default. Parts up to 1900 MiB require your own Telegram Bot API Server running in --local mode. Telegram Premium does not raise bot upload limits. Local disk quotas are configured separately.

To restore, download every part of one backup and keep its password separately. Recovery does not fetch Telegram history, import SQL, or replace a running website automatically.

SHA256SUMS.txt contains archive checksums. telegram-backup-1.0.0-source.zip includes source code, tests, and the build script.

Quick start · Recovery · Testing · Security

License: GNU GPL v3 or later.