WP Kilat — Turbo Cache & Performance

WP Kilat — Turbo Cache & Performance

WP Kilat is a next-generation caching & performance plugin for WordPress. It delivers instant TTFB with an early advanced-cache.php drop-in, smart page caching, HTML minify, browser caching, a safe sitemap preloader, and CDN URL rewrites — wrapped in a premium, modern admin UI.

Why WP Kilat?

• Ultra-fast: Early disk cache served before WordPress fully loads.
• Safe by design: No exec, no eval, strict nonce & capability checks, path hardening, and SSRF-safe preloader.
• Business-ready: Clean, documented code prepared for marketplace review and enterprise audits.

Core Features

• Early Page Cache (Drop-in): wp-content/advanced-cache.php generated from the dashboard. Also auto-adds define('WP_CACHE', true) safely (no duplicates).
• Smart Page Cache: Disk cache with TTL, HTML minification, ETag/Last-Modified, and Cache-Control headers.
• Auto Purge: Purges cache on post/term/comment updates.
• Sitemap Preloader: Cron + manual warm-up (same-host only, SSRF-safe) with lightweight queueing.
• Partial Purge: Purge by URL or by Post ID directly from Diagnostics.
• Device Variance: Separate cache for mobile/desktop via safe cookie key (no user tracking).
• Fragment Cache API: Helper to cache expensive HTML fragments via WordPress transients.
• CDN Rewrite: Replace static asset URLs (uploads, wp-content) with your CDN in the cached HTML.
• Advanced CDN Mapping: Optional granular mapping (e.g., uploads to CDN A, theme to CDN B).
• Asset Combiner (opt-in): Combine enqueued CSS/JS on the frontend while preserving load order.
• Export / Import Settings: Signed JSON (HMAC-SHA256) to prevent tampering.
• Diagnostics: One-click Purge, Preload, server rules hints (.htaccess / web.config), and runtime checks.
• Deluxe Admin UI: Responsive, accessible, dark-mode friendly, and fully commented.

Security Hardening

• Anti-LFI path join + directory hardening for wp-content/cache/wp-kilat (blocks PHP execution, disables listing).
• Strict nonce and capability checks on every admin action.
• Sanitization for all settings and inputs.
• No shell commands, no dynamic code execution.

Server Hints Included

• Apache .htaccess snippets for static caching & gzip/deflate.
• IIS web.config hints for client cache & compression.

What You Get

• Complete plugin source with clear inline comments.
• Deluxe settings page and diagnostics tools.
• Uninstall routine that cleans options & cache files (keeps hardening guards).
• .pot file for translations.
• Step-by-step setup (see “Instructions”).

Made for creators who need speed, safety, and a clean admin experience.

• Early cache drop-in (advanced-cache.php) — instant TTFB
• Disk page cache with TTL, HTML minify, ETag/Last-Modified, Cache-Control
• Automatic purge on content changes + manual Purge All
• Sitemap preloader (cron + manual), same-host only, SSRF-safe
• Partial purge by URL / by Post ID
• Mobile/Desktop cache variance (safe cookie key)
• Fragment Cache API (transients) for reusable HTML blocks
• CDN rewrite + advanced path mapping
• Asset combiner (opt-in) for CSS/JS, preserves enqueue order
• Export/Import settings (HMAC-signed JSON)
• Diagnostics page, server rules hints, runtime status
• Deluxe, responsive admin UI with dark mode
• Security: nonce, capability checks, strict sanitization, hardened cache dir
• Clean uninstall and translation-ready (.pot)

• WordPress 5.8 or higher
• PHP 8.0 or higher
• Write permissions for wp-content/ (to create cache/wp-kilat/ and the drop-in)
• Optional: Apache mod_rewrite / Nginx rewrite for pretty permalinks
• Works on Apache, Nginx, or IIS (server hints included)

1. Install: Upload the plugin folder to wp-content/plugins/ and activate “WP Kilat”.
2. Open Settings: Go to Settings → WP Kilat. Review defaults (TTL, Minify, Browser Cache).
3. Enable Early Cache (optional, recommended): In Settings → WP Kilat (Diagnostics), click Enable Early Cache (Drop-in). The plugin safely adds define('WP_CACHE', true) and creates wp-content/advanced-cache.php.
4. Set Preloader: In settings, enter your sitemap URL (same domain). Save. Then run Run Preload (20 URLs) from Diagnostics.
5. CDN (optional): Add your CDN base URL to rewrite static assets in cached HTML. For granular paths, use “Advanced CDN Mapping”.
6. Partial Purge: Use Diagnostics to purge by URL or by Post ID (also purges the homepage).
7. Assets Combiner (optional): Toggle “Combine CSS & JS” to merge enqueued files on the frontend. Validate layout after enabling.
8. Export/Import: Export signed JSON from the settings page. Import on another site to replicate configuration.
9. Troubleshooting:
   • Login pages and admin are never cached (by design).
   • If a page should not be cached, define DONOTCACHEPAGE or add exceptions via theme/plugin logic.
   • Ensure wp-content/ is writable for cache and config snapshot.