Live demo
This site is running Alovio Protect.
Try to take it down.
There is a plugin installed here called Demo: Breakable Plugin. It does nothing at all until you press the button below — and then it fails the way a bad update fails, with a fatal error that normally ends the request and leaves a visitor staring at a blank white page.
Nothing here is yours and everything resets on the hour, so press it as often as you like.
What happens when you do
- First press. The crash is caught. You get a short holding page instead of a white screen, and the failure is recorded with the plugin that caused it named.
- Second press. The same plugin has now failed twice, so it is paused and the request is replayed without it. The page loads. The rest of the site was never affected.
- Pausing does not touch the database. WordPress still lists the plugin as active — it is filtered out while the page is built, which is why putting it back is one click and nothing was rewritten behind your back.
Then look at the admin
You are signed in already. The dashboard shows the crash you just caused, and four other things that are real rather than staged on this install:
- a core file that does not match wordpress.org, and a file sitting inside core that WordPress never shipped
- two flagged files in the uploads folder, each showing the rule that fired, the line and the code — reasons to look, not verdicts
- a restore point taken automatically before a plugin here was updated, which you can roll back
- the cron screen, counting what WordPress owes across every plugin
The two flagged files and the file planted in core are harmless demo samples. Each one begins by returning, so nothing in them ever runs — open them from the scanner and read them. Installing, updating and editing plugins is switched off on this sandbox; everything else is the real plugin.