XeroWP
D

Dango System Utilities

0/5 (0 ratings) — active installs Updated Sep 25, 2026
admincrondiagnosticssearch analyticswoocommerce
Download v2.6.0 Plugin Website

Dango System Utilities is an admin-focused utility toolkit by DANGO. All modules are off by default on first install — enable only the features you need from the central settings page.

Every module listed below is complete and fully functional. Nothing here is time-limited, usage-limited, or unlocked by a key, and this plugin contains no licensing code of any kind.

Included modules:

  • Diagnostics — environment benchmarking against WordPress and WooCommerce recommendations, a top-10 autoloaded options analyzer, a database table and storage inspector, a one-click cache flush and an email delivery test.
  • Cron Manager — inspect, run, pause and delete scheduled events, and register custom schedules.
  • WooCommerce Utilities — password policy rules and presets, international phone sanitization and E.164 validation, auto-updating cart quantities, a one-click empty cart button, auto-completion of virtual and downloadable orders, and weight-based shipping bands.
  • Order Analytics — revenue, pipeline, rejection rate, average order value, order status distribution, top products, and channel and city performance showing orders received versus delivered per traffic source and per destination city. Computed with single-query SQL aggregation on both High-Performance Order Storage and legacy order tables.
  • Search Analytics — admin-only recording of visitor search terms, top searches, zero-result keywords, CSV export, and a one-click import from Search Meter. The report says plainly what is and is not counted, and a “Check again now” button re-runs every zero-result term against your site as it is today.
  • CAPTCHA — Cloudflare Turnstile on the login, registration, lost-password and comment forms, with a light/dark/auto widget theme.
  • Performance — Heartbeat API throttling, post revision capping, removal of asset query strings, switches to disable core emoji and oEmbed scripts, and switches to drop jQuery Migrate on the front end and the Dashicons font for logged-out visitors.
  • Security — switches to disable XML-RPC, the theme and plugin file editor, WordPress version fingerprints, pingbacks and trackbacks (which also stops the outbound request WordPress makes to every URL you link to), and application passwords — the API login route that bypasses the login form and anything protecting it.
  • Plugin-only Data Purging — manual purge buttons and an optional weekly maintenance task.
  • Background Jobs — one panel listing every scheduled job, what it did last time, when it runs next, and a button to run it now instead of waiting.
  • Extra Lightweight Tools — admin notice manager, failed login alerts, maintenance mode, security headers, an email attempt log, and a plugin/theme inventory CSV export.

Every setting carries a help bubble giving what it does, the WordPress default, what is recommended, and what you give up by enabling it. The Overview tab lists the recommended settings not currently in place and can apply them in one click; nothing is changed until you press the button, and every change is named first.

Search Analytics is admin-only. This plugin does not include public recent-search widgets, public popular-search widgets, Gutenberg public search blocks, or frontend template tags.

Data purging is plugin-only. Manual purge buttons run on demand, and an optional weekly automatic maintenance task prunes only this plugin’s own aged data past its retention window. Weekly maintenance is enabled by default and can be turned off. The plugin never deletes unrelated WordPress, WooCommerce, or third-party plugin data.

External services

This plugin does not contact any external service on its own. On a default install, nothing leaves your site.

The only outbound connection it can make is to Cloudflare Turnstile, and only after you enable the CAPTCHA module and save your own API keys. If you never enable CAPTCHA, this plugin makes no external request at all.

Cloudflare Turnstile

What it is and what it is used for: Cloudflare Turnstile is a bot-detection service operated by Cloudflare, Inc. It is used solely to provide the CAPTCHA challenge on the forms you choose to protect. The challenge cannot be performed locally — issuing and verifying it is the service’s entire purpose, and the widget script must be served from Cloudflare’s own domain for the token to be valid.

What is sent and when:

  1. When a page containing a protected form is rendered (login, registration, lost password, or comments — whichever you have enabled), the plugin enqueues the Turnstile widget script from https://challenges.cloudflare.com/turnstile/v0/api.js. Loading that script means the visitor’s browser contacts Cloudflare directly, and Cloudflare receives the visitor’s IP address, browser user agent, and the address of the page containing the form.
  2. When that form is submitted, your server sends a single request to https://challenges.cloudflare.com/turnstile/v0/siteverify containing the Turnstile secret key you entered, the single-use challenge token generated by the visitor’s browser, and the visitor’s IP address. Nothing else is transmitted, and nothing is sent at any other time.

Terms and privacy:

  • Cloudflare Website Terms of Use: https://www.cloudflare.com/website-terms/
  • Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/

A separate paid add-on exists

DANGO also sells Dango System Utilities Pro, a separate plugin distributed from solutions.dango.pk. It is not required, is not bundled here, and no part of this plugin is disabled, limited, or reserved for it. Installing it adds further modules of its own; removing it leaves everything in this plugin working exactly as before.

It also extends some of the modules above. Order Analytics, for example, gains cross-dimensional reports the free plugin does not attempt: which traffic sources convert in which cities, and which convert on phones as against computers. It also adds scheduled jobs of its own — a broken link scanner that checks links to other sites and to your own pages, file integrity checks, cache warm-up, database cleanup, uptime checks and emailed reports — which appear in the Background Jobs panel and can be run on demand from there, and an admin activity log recording who changed plugins, themes, users, content and settings. The CAPTCHA module gains Google reCAPTCHA v3 as an alternative provider, WooCommerce account and checkout placements, and an IP allowlist. None of that code ships in this plugin, and the Cloudflare Turnstile protection included here is complete without it. If you install the add-on and later remove it, the CAPTCHA module falls back to Turnstile and keeps working.