Title: Stillgate — Editorial Freeze for Deployments Author: twelvell Published: 2026 年 10 月 12 日 Last modified: 2026 年 10 月 12 日 --- 搜尋外掛 ![](https://s.w.org/plugins/geopattern-icon/stillgate.svg) # Stillgate — Editorial Freeze for Deployments 由 [twelvell](https://profiles.wordpress.org/twelvell/) 開發 [下載](https://downloads.wordpress.org/plugin/stillgate.0.1.1.zip) * [詳細資料](https://tw.wordpress.org/plugins/stillgate/#description) * [使用者評論](https://tw.wordpress.org/plugins/stillgate/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/stillgate/#installation) * [開發資訊](https://tw.wordpress.org/plugins/stillgate/#developers) [技術支援](https://wordpress.org/support/plugin/stillgate/) ## 外掛說明 Deploying a WordPress site — syncing a database, pushing files, running a migration— usually needs a window where the database will not change underneath you. In practice, editors keep working, and a post, upload, or menu change made mid-sync can be silently lost. Stillgate puts the _backend_ into a controlled editorial freeze during that window, while the public frontend keeps working normally the whole time. **What a freeze does** While active, a logged-in user without the `deployment_guard_bypass` capability is blocked from creating, editing, deleting, or restoring protected content — posts, pages, custom post types, media, revisions, taxonomies and terms, navigation menus, widgets, or the Customizer — through classic wp-admin, the block editor, the REST API, and XML-RPC; WP-CLI commands and WP-Cron events are blocked from the same content changes. Scheduled posts of a protected type do not publish while the freeze is active; they remain scheduled and publish normally, through WordPress’s own mechanism, once it ends. A freeze can be turned on immediately, or configured as a scheduled window in the site’s own timezone. Whether it is active is computed from the current time and stored configuration on every relevant request — it never depends on a WP-Cron event firing on time. **Bypass is capability-based, not role-based** Roles with `manage_options` (Administrator, by default) receive the deployment_guard_bypass capability automatically on activation — the check is against the capability, never hardcoded to a role’s name, so a custom role can be granted it too. A bypass holder can keep working during a freeze, though their own changes can still be lost if a deployment proceeds concurrently; the freeze protects everyone _else’s_ content. **WP-CLI is not exempt.** `wp post update`, `wp term create`, `wp media import , and equivalent commands from other plugins are blocked the same way during a freeze;-- user= is the explicit way to act as a specific person from the command line. Stillgate’s own wp stillgate status|enable|disable|schedule commands keep working, because they only change Stillgate’s own state. **Security and privacy** Stillgate makes no outbound HTTP requests, sends no data to any external service, requires no account or license key, and collects no telemetry. It uses no custom database table — two options, both removed on uninstall — and its small internal activity log never stores request payloads, message bodies, or IP addresses. **Known limitations, stated plainly** * A bypass holder’s own changes are not protected from being overwritten. * Freeze state lives in the database; a database import during a migration can lift or copy it. The `DEPLOYMENT_GUARD_FORCE` constant in wp-config.php (the boolean `true` or `false`; any other value is ignored) forces the freeze on or off independently of the stored state, for exactly this situation. * With a persistent object cache not shared between WP-CLI and web workers, a CLI-issued change may need `wp cache flush` to take effect immediately for web requests; a long-running PHP process keeps the state it read until it restarts. * Changes that go around WordPress’s own content functions and capability checks are not blocked: direct database queries, third-party code that writes content without checking the user’s capabilities, plugin REST routes with controllers of their own, and direct `wp_publish_post()` calls. * In WP-CLI and WP-Cron, post meta, term assignments to existing terms, widgets, menu locations, theme mods and other options are not blocked, nor are term updates and deletions made during a cron event. * Automated writes to protected content fail while a freeze is active: cron jobs such as emptying the trash or updating products, and plugin activation routines run through WP-CLI. * Restricted users cannot preview drafts of protected content during a freeze. * WP-Cron keeps running; unrelated events are unaffected, and only publishing protected scheduled content is held back specifically. * Comments, Notes, users, plugins, themes, and general site settings are out of scope. * Operates per site on Multisite in this version; there is no network-wide freeze screen yet, and network activation or deactivation affects the current site’s state only. Full architecture notes, the complete enforcement matrix, and every hook this plugin exposes are documented in the [GitHub repository](https://github.com/digibold/wp-stillgate). ## 安裝方式 1. Upload the plugin files to `/wp-content/plugins/stillgate`, or install it through Plugins > Add New > Upload Plugin. 2. Activate the plugin. Roles with `manage_options` receive the deployment_guard_bypass capability automatically. 3. Go to Tools > Stillgate to configure a freeze, or use WP-CLI: wp stillgate enable. ## 常見問題集 ### Will this stop the public site from working? No. Stillgate only restricts editorial _writes_ from logged-in users without the bypass capability. Anonymous visitors, logged-in customers, comment submissions, and every other frontend read or write that is not editorial content stay unaffected. ### Does this protect against database changes made outside WordPress? No. Stillgate enforces its freeze through WordPress’s own request handling (admin screens, REST, XML-RPC, WP-CLI, WP-Cron), capability checks, and content functions. A direct database edit, a raw SQL script, or a completely separate application writing to the same database is outside anything a WordPress plugin can see or prevent. ### Does WP-CLI bypass the freeze? No. Commands that create, update, or delete protected posts, pages, media, and terms are blocked and exit with an error. Lower-level commands that write post meta, term assignments, widgets, menu locations, theme mods, or other options directly are not blocked. Stillgate’s own `wp stillgate commands keep working because they only change the freeze state itself. ### What happens to scheduled (future-dated) posts during a freeze? A protected post scheduled to publish during an active freeze stays scheduled instead. It publishes normally, through WordPress’s own mechanism, once the freeze ends. ### Does this work on Multisite? Yes, per site. Each site’s freeze is configured and enforced independently; there is no network-wide screen in this version. A Super Admin is always treated as a bypass holder. ### Does this send any data anywhere? No. Stillgate makes no outbound HTTP requests and has no telemetry. Everything it stores stays in your own site’s database. ### I installed 0.1.0 as “Deployment Guard”. How do I switch to Stillgate? Stillgate keeps the earlier release’s stored settings, so nothing needs to be reconfigured, but both copies share them and only one can run. Install the new ZIP without activating it, deactivate Deployment Guard (this ends a freeze that is active), activate Stillgate, and then delete the old copy while Stillgate is active: Stillgate keeps the freeze configuration, the activity log and every role’s bypass capability through that deletion. Do not delete the old copy while Stillgate is inactive, which erases them. If you activate Stillgate first, it stays idle and says so on the Plugins screen until you deactivate the old copy. With WP-CLI: `wp plugin install stillgate.zip`,` wp plugin deactivate deployment-guard, wp plugin activate stillgate, wp plugin delete deployment-guard. ### I removed my own bypass capability by mistake. How do I recover? WP-CLI (`wp stillgate disable`) and the `DEPLOYMENT_GUARD_FORCE` constant in `wp- config.php` both work independently of the deployment_guard_bypass capability. ## 使用者評論 這個外掛目前沒有任何使用者評論。 ## 參與者及開發者 以下人員參與了開源軟體〈Stillgate — Editorial Freeze for Deployments〉的開發相關 工作。 參與者 * [ twelvell ](https://profiles.wordpress.org/twelvell/) [將〈Stillgate — Editorial Freeze for Deployments〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/stillgate) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/stillgate/)、查看 [SVN 存放庫](https://plugins.svn.wordpress.org/stillgate/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/stillgate/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/stillgate/)。 ## 變更記錄 #### 0.1.1 Renamed from Deployment Guard to Stillgate. The stored settings, activity log and bypass capability carry over. The freeze notice now appears only on the screens where editing is affected and explains how the freeze ends. See the full changelog at https://github.com/digibold/wp-stillgate/blob/main/CHANGELOG.md #### 0.1.0 Initial release. See the full changelog at https://github.com/digibold/wp-stillgate/ blob/main/CHANGELOG.md ## 中繼資料 * 版本 **0.1.1** * 最後更新 **17 小時前** * 啟用安裝數 **少於 10 次** * WordPress 版本需求 ** 6.6 或更新版本 ** * 已測試相容的 WordPress 版本 **7.1.3** * PHP 版本需求 ** 8.1 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/stillgate/) * 標籤: * [deployment](https://tw.wordpress.org/plugins/tags/deployment/)[editorial](https://tw.wordpress.org/plugins/tags/editorial/) [freeze](https://tw.wordpress.org/plugins/tags/freeze/)[maintenance](https://tw.wordpress.org/plugins/tags/maintenance/) [migration](https://tw.wordpress.org/plugins/tags/migration/) * [進階檢視](https://tw.wordpress.org/plugins/stillgate/advanced/) ## 評分 這個項目尚無任何評論記錄。 [撰寫評分](https://wordpress.org/support/plugin/stillgate/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/stillgate/reviews/) ## 參與者 * [ twelvell ](https://profiles.wordpress.org/twelvell/) ## 技術支援 使用者可在技術支援論壇提出意見反應或使用問題。 [檢視技術支援論壇](https://wordpress.org/support/plugin/stillgate/)