Title: Yedekalma — Backup, Restore, Migration & Malware Scanner Author: kamkactemha Published: 15 Luulyo, 2026 Last modified: 22 Luulyo, 2026 --- Raadi kaabayaal ![](https://ps.w.org/yedekalma/assets/banner-772x250.jpg?rev=3617989) ![](https://ps.w.org/yedekalma/assets/icon.svg?rev=3617981) # Yedekalma — Backup, Restore, Migration & Malware Scanner Qore [kamkactemha](https://profiles.wordpress.org/kamkactemha/) [Soo Rog](https://downloads.wordpress.org/plugin/yedekalma.1.11.7.zip) * [Faahfaahin](https://so.wordpress.org/plugins/yedekalma/#description) * [Dibu-eegisyo](https://so.wordpress.org/plugins/yedekalma/#reviews) * [Rakibaad](https://so.wordpress.org/plugins/yedekalma/#installation) * [Horumarinta](https://so.wordpress.org/plugins/yedekalma/#developers) [Taageero](https://wordpress.org/support/plugin/yedekalma/) ## Sharraxaad Yedekalma is a free **backup** plugin that takes a one-click **backup** of your entire site — files _and_ database — and **restores** it again from the same screen. It also **migrates** your site to a new host or domain and **scans** it for **malware**. Everything runs on your own server. No account, no sign-up and no API key: install, activate, click **Take Backup**. Your backup archives stay on your hosting, and you can download them as a ZIP at any time. #### Backup * **Full backup** — every file (themes, plugins, uploads) plus the complete database. * **Database backup** — MySQL dump only, gzip compressed (`.sql.gz`) for large sites. * **Files backup** — site files only, without the database. * **Works on shared hosting** — chunked, time-sliced backup that finishes even when `exec()` is disabled and PHP limits are strict. * **Incremental backup** — compares real file modification times, so a changed file is never skipped. * **Safe storage** — local backups live in a hardened, non-browsable folder with unguessable file names. #### Restore * **One-click restore** of the database, plugins, themes and uploads straight from your dashboard. * **Restore from an archive you already have** — drag & drop a `.zip`, `.sql` or`. sql.gz` file and restore from it. * **Integrity checked** — a truncated or corrupt archive is refused instead of half-applied, so a bad file can never damage a working site. * **SHA-256 verification** of every archive before a restore begins. #### Migration * **Move your site to a new host** — download the backup, install Yedekalma on the target server and restore. * **Change domain safely** — site URL and home URL are rewritten in the database automatically during the restore. * **New database server** — `wp-config.php` credentials can be updated as part of a restore. #### Malware scanner * **Security scan** of PHP, JS and configuration files across WordPress core, your plugins and the active theme. * Detects **code injections, web shells and backdoors** using malicious-pattern matching. * **Persistent results** — the scan report survives page reloads, so you can review it whenever you like. * **Bulk clean** — select detected files and delete them in one click. * **Core protection** — WordPress core files are shielded from accidental deletion while planted files can still be removed. #### Optional cloud service Local backup, restore, migration and the malware scanner are complete on their own and never contact an external server. If you also want off-site copies, you can connect the optional Yedekalma cloud service (see _External services_ below) to: * Stream backups to **your own** Google Drive, Amazon S3, Wasabi, Backblaze B2, Dropbox, OneDrive or FTP/SFTP storage. * Run **scheduled automatic backups** daily or weekly with retention rules. * Encrypt archives with **client-side AES-256 (BYOK)** before they leave your server— the passphrase never leaves your site. #### Languages Yedekalma ships with English, Turkish (Türkçe), German, Russian and Arabic translations. ### External services This plugin can optionally connect to the Yedekalma cloud service (an external SaaS) to perform off-site backup and restore operations, package backups for delivery to your own cloud storage, check subscription state, and monitor backup quota. This connection only happens if you choose to use the cloud service (by entering an API token or using the in-plugin “try without registering” option); the plugin’s local backup/restore features work without any external connection. * **Service URL:** https://yedekalma.com * **Terms of Service:** https://yedekalma.com/legal * **Privacy Policy:** https://yedekalma.com/legal#privacy * **Data Transmission:** When connected, the plugin sends requests to the Yedekalma API containing your Site URL, active plugin features, backup metadata (such as file lists, sizes, and checksums), and your API token (or anonymous install id) to perform secure backup and restore tasks. ## Rakibaad 1. In your WordPress admin, go to **Plugins Add New**. 2. Search for **Yedekalma**. 3. Click **Install Now**, then **Activate**. 4. Open **Yedekalma** in the admin sidebar. 5. Click **Start without an account** and take your first backup. Manual installation: upload the `yedekalma` folder to `/wp-content/plugins/` and activate it from the Plugins screen. ## SBI ### Is this backup plugin free? Yes. Backup, restore, migration and the malware scanner are fully functional with no account and no payment. The optional Yedekalma cloud service adds off-site storage and has a free tier. ### How do I back up my WordPress database? Open **Yedekalma Dashboard**, click **Take Backup** and choose **Database Only**. You get a compressed MySQL dump (`.sql.gz`) that you can download or restore later. ### Can I use it to migrate my site to a new host or domain? Yes. Take a full backup, download the ZIP, install Yedekalma on the target site and restore the archive there. The site URL and home URL in the database are updated for the new domain automatically. ### Will it work on cheap shared hosting? Yes. Backups run in time-sliced chunks and do not need `exec()`, shell access or MySQL credentials, so they finish on hosts with low execution-time and memory limits. ### Where are my backups stored? In `wp-content/uploads/yedekalma-backups/` on your own server. The folder is protected from directory browsing and the archive names include a random token, so nobody can guess the URL. If you connect optional cloud storage, backups go to your own Google Drive, S3 or FTP account instead. ### How does the malware scanner work? It scans PHP, JS and configuration files in WordPress core, your plugins and the active theme for malicious patterns, code injections, web shells and backdoors. Results are saved so you can review them later, and you can delete detected files in bulk. Core WordPress files are protected from deletion. ### What happens to my backups if I delete the plugin? Nothing. Local archives under `wp-content/uploads/yedekalma-backups/` stay where they are unless you remove them yourself, and anything in your own cloud storage stays there too. ### Türkçe destekliyor mu? Evet. Yedekalma tamamen Türkçe arayüze sahiptir: site yedekleme, veritabanı yedekleme, yedekten geri yükleme, site taşıma ve virüs/zararlı yazılım taraması işlemlerinin tümünü Türkçe olarak yapabilirsiniz. ### Is Multisite supported? Not in version 1 — a separate plugin instance per site is required. Full Multisite support is on the roadmap. ### Is it GDPR / KVKK compliant? Yes. The plugin makes no external connection at all unless you deliberately connect the optional cloud service, and explicit consent is collected for that data transfer. ## Dibu-eegisyo Ma jiraan wax dibu-eegis ah oo ku saabsan kaabahan. ## Ka-qaybgalayaasha & Horumariyayaasha “Yedekalma — Backup, Restore, Migration & Malware Scanner” waa softiweer il furan. Dadka soo socda ayaa wax ku biiriyay kaabahan. Ka-qaybgalayaasha * [ kamkactemha ](https://profiles.wordpress.org/kamkactemha/) [Ku tarjun “Yedekalma — Backup, Restore, Migration & Malware Scanner” luqaddaada.](https://translate.wordpress.org/projects/wp-plugins/yedekalma) ### Ma xiisaynaysaa horumarinta? [Baadh koodka](https://plugins.trac.wordpress.org/browser/yedekalma/), fiiri [bakhaarka SVN](https://plugins.svn.wordpress.org/yedekalma/), ama iska qor [diiwaanka horumarinta](https://plugins.trac.wordpress.org/log/yedekalma/) adigoo adeegsanaya [RSS](https://plugins.trac.wordpress.org/log/yedekalma/?limit=100&mode=stop_on_copy&format=rss). ## Isbeddellada For the full history of older releases, see `changelog.txt` in the plugin folder. #### 1.11.7 — 2026-07-22 * I18N: Completed the English, German, Russian and Arabic interface translations. 69 strings — confirmation dialogs, error messages, progress text and settings labels — previously fell back to the Turkish source text. All five bundled languages are now at 100%. * I18N: The plugin name and description shown on the Plugins screen are now translatable. #### 1.11.6 — 2026-07-21 * DOCS: Rewrote the plugin description, feature list and FAQ. * ASSETS: Added plugin directory icon and banner images. #### 1.11.5 — 2026-07-21 * FIX: Responsive threat table layout. Adjusted column widths and increased action column width to 110px so the protected shield badges fit cleanly without horizontal overflow. #### 1.11.4 — 2026-07-21 * FEATURE: Finalized malware scanner enhancements, core protection filters, and uninstall cleanup logic. #### 1.11.3 — 2026-07-20 * FEATURE: Custom malware scan protection layout. Integrated granular, detailed reasons for critical files (wp-config.php, active theme assets, root boot scripts, drop-ins, and admin/includes core files) to protect them from deletion, while still allowing the deletion of planted non-core exploits. #### 1.11.2 — 2026-07-20 * FIX: Robust option structure mapping. Hardened list rendering and DB option cleanup to support both array and object elements, preventing PHP type-error crashes on page loads and threat file deletions. #### 1.11.1 — 2026-07-20 * FIX: WordPress core protection. Added a strict safety check to prevent accidental deletion of critical WordPress files (such as files inside wp-admin, wp-includes, wp-config.php, index.php, etc.) via the malware scanner deletion tool. #### 1.11.0 — 2026-07-20 * NEW: Built-in Malware & Virus Scanner. Scan all PHP, JS, and configuration files for code injections, web shells, backdoors, and malicious patterns. * NEW: Persistent Scan Results. Scanner results are securely saved on your site so they persist across page refreshes. * NEW: Bulk Actions. Select all or specific detected threat files and delete them collectively with one click. * NEW: Security Reminders. Contextual security notices recommend taking a virus scan before taking backups or restoring a backup. #### 1.10.4 — 2026-07-20 * NEW: Added drag-and-drop local backup file upload zone (.zip, .sql, .sql.gz) with real-time progress bar. * FIX: Fixed critical bug where restored backups disappeared from the list due to options database caching. * FIX: Fixed settings loss on restore by correcting options key preservation to‘ yedekalma_settings’. ## Meta * Version **1.11.7** * Last updated **14 saac kahor** * Active installations **In ka yar 10** * WordPress version ** 5.8 ama ka sareeya ** * Tested up to **7.0.2** * PHP version ** 7.4 ama ka sareeya ** * Language * [English (US)](https://wordpress.org/plugins/yedekalma/) * Tags * [backup](https://so.wordpress.org/plugins/tags/backup/)[database backup](https://so.wordpress.org/plugins/tags/database-backup/) [malware scanner](https://so.wordpress.org/plugins/tags/malware-scanner/)[migration](https://so.wordpress.org/plugins/tags/migration/) [restore](https://so.wordpress.org/plugins/tags/restore/) * [Aragti Sare](https://so.wordpress.org/plugins/yedekalma/advanced/) ## Qiimeynta No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/yedekalma/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/yedekalma/reviews/) ## Ka-qaybgalayaasha * [ kamkactemha ](https://profiles.wordpress.org/kamkactemha/) ## Taageero Ma heysaa waxaad dhahdo? Caawimaad ma u baahan tahay? [Eeg madasha taageerada](https://wordpress.org/support/plugin/yedekalma/)