The worker pulls your database and files automatically<\/li>\n<\/ol>\n\nWhat gets migrated:<\/strong><\/p>\n\n\n- All database tables (exported row-by-row with primary key pagination)<\/li>\n
- All WordPress files (transferred in chunks with checksum verification)<\/li>\n
- File permissions and directory structure<\/li>\n<\/ul>\n\n
What gets excluded automatically:<\/strong><\/p>\n\n\n- Cache directories<\/li>\n
- Log files<\/li>\n
- Backup plugin directories (UpdraftPlus, All-in-One WP Migration, etc.)<\/li>\n
- Node modules and .git directories<\/li>\n<\/ul>\n\n
Security:<\/strong><\/p>\n\nAll requests from the Hostney worker are authenticated using HMAC-SHA256 signatures with timestamp validation and replay protection. Tokens are cleared automatically when the plugin is deactivated.<\/p>\n\n
Privacy Policy<\/h3>\n\n
This plugin sends the following data to Hostney servers (api.hostney.com) when you click Connect:<\/p>\n\n
\n- Your site URL and REST API URL<\/li>\n
- WordPress version<\/li>\n
- PHP version<\/li>\n
- Number of database tables and total database size<\/li>\n
- Number of files and total file size<\/li>\n
- Active theme name and active plugin count<\/li>\n<\/ul>\n\n
This data is used solely to register and plan the migration. No file contents, database rows, passwords, or personal data are transmitted during the connection step.<\/p>\n\n
During an active migration (initiated from the Hostney control panel), the Hostney worker connects to your site's REST API endpoints to read database tables and files. All requests are authenticated with HMAC-SHA256 signatures. Data is transferred over HTTPS.<\/p>\n\n
For more information, see the Hostney Privacy Policy<\/a>.<\/p>\n\n\n\n- In your WordPress admin go to Plugins > Add New > Upload Plugin<\/li>\n
- Upload the ZIP file and activate the plugin<\/li>\n
- Go to Tools > Hostney Migration<\/li>\n
- Paste your migration token from the Hostney control panel and click Connect<\/li>\n<\/ol>\n\n\n
\nDo I need SSH or FTP access on my current host?<\/h3><\/dt>\nNo. The plugin exposes authenticated REST API endpoints that the Hostney worker calls over HTTPS. No server-level access is needed on the source site.<\/p><\/dd>\n
Will my site go down during migration?<\/h3><\/dt>\nNo. The plugin only reads data \u2014 it does not modify anything on your source site. Your site continues to operate normally throughout the migration.<\/p><\/dd>\n
What data is sent to Hostney when I connect?<\/h3><\/dt>\nWhen you click Connect, the plugin sends your site URL, WordPress version, PHP version, and database\/file size estimates to Hostney servers to register the migration. No file contents or database data are sent during this step. The actual data transfer only happens when you start the migration from the Hostney control panel, and it flows through authenticated REST API endpoints.<\/p><\/dd>\n
Does this plugin work with multisite?<\/h3><\/dt>\nNo. WordPress multisite installations are not supported. The plugin will show a warning if multisite is detected.<\/p><\/dd>\n
What happens to the token when I deactivate the plugin?<\/h3><\/dt>\nThe migration token and connection status are automatically deleted from the database when the plugin is deactivated.<\/p><\/dd>\n
Can I use this plugin with a WAF (ModSecurity, Wordfence, Imunify, Cloudflare)?<\/h3><\/dt>\nYes. The plugin supports optional base64 encoding of request and response bodies to prevent WAF false positives on SQL or PHP content in migration data. This is handled automatically by the Hostney worker.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.0.3<\/h4>\n\n\n- Fixed: the per-IP rate limiter refreshed its own expiry on every request, so the\n60-second window never elapsed during a migration and the limit behaved as a\none-time cap of 900 requests. Large sites were rejected with HTTP 429 partway\nthrough the database export.<\/li>\n
- Added: a Retry-After header on rate-limited responses, so the caller knows exactly\nhow long to wait instead of guessing.<\/li>\n
- Changed: the request rate limit now applies only to authenticated requests.\nUnauthenticated traffic is handled by a separate failed-authentication throttle and\ncan no longer consume a running migration's request budget.<\/li>\n<\/ul>\n\n
1.0.2<\/h4>\n\n\n- Confirmed compatibility with WordPress 7.1<\/li>\n<\/ul>\n\n
1.0.1<\/h4>\n\n\n- Confirmed compatibility with WordPress 7.0<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release<\/li>\n
- Database export with primary key pagination and adaptive batch sizing<\/li>\n
- Filesystem export with chunked transfers and MD5 checksum verification<\/li>\n
- HMAC-SHA256 authentication with timestamp validation<\/li>\n
- WAF-compatible base64 encoding for request and response bodies<\/li>\n
- Path traversal protection with realpath validation<\/li>\n
- Admin UI with system requirement checks<\/li>\n<\/ul>","raw_excerpt":"Migrate your WordPress site to Hostney hosting. Paste your migration token and Hostney handles the rest automatically.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/292879","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=292879"}],"author":[{"embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/hostney"}],"wp:attachment":[{"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=292879"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=292879"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=292879"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=292879"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=292879"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/sk.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=292879"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}