{"id":5,"date":"2026-09-23T17:10:27","date_gmt":"2026-09-23T17:10:27","guid":{"rendered":"https:\/\/demo.alovio.org\/protect\/try-it\/"},"modified":"2026-09-23T17:10:27","modified_gmt":"2026-09-23T17:10:27","slug":"try-it","status":"publish","type":"page","link":"https:\/\/demo.alovio.org\/protect\/","title":{"rendered":"Break this site"},"content":{"rendered":"\n<div class=\"ap-demo\" style=\"max-width:760px;margin:0 auto;padding:8px 20px 56px;font-family:system-ui,-apple-system,'Segoe UI',sans-serif;color:#1c1917\">\n\n  <p style=\"font:600 12px\/1 ui-monospace,SFMono-Regular,Menlo,monospace;letter-spacing:.2em;text-transform:uppercase;color:#ea580c;margin:0 0 14px\">Live demo<\/p>\n\n  <h2 style=\"font-size:clamp(1.8rem,5vw,2.6rem);line-height:1.1;letter-spacing:-.5px;margin:0 0 16px\">This site is running Alovio&nbsp;Protect.<br>Try to take it down.<\/h2>\n\n  <p style=\"font-size:1.08rem;line-height:1.6;color:#44403c;margin:0 0 28px\">There is a plugin installed here called <strong>Demo: Breakable Plugin<\/strong>. It does nothing at all until you press the button below \u2014 and then it fails the way a bad update fails, with a fatal error that normally ends the request and leaves a visitor staring at a blank white page.<\/p>\n\n  <p style=\"margin:0 0 12px\"><a href=\"?break=1\" style=\"display:inline-block;background:#0c0a09;color:#fff;font-weight:700;font-size:1.05rem;text-decoration:none;padding:15px 28px;border-radius:10px\">Break this site \u2192<\/a><\/p>\n\n  <p style=\"font-size:.95rem;color:#78716c;margin:0 0 36px\">Nothing here is yours and everything resets on the hour, so press it as often as you like.<\/p>\n\n  <h3 style=\"font-size:1.15rem;margin:0 0 14px;padding-top:26px;border-top:1px solid #e7e5e4\">What happens when you do<\/h3>\n\n  <ol style=\"font-size:1.02rem;line-height:1.65;color:#44403c;padding-left:22px;margin:0 0 32px\">\n    <li style=\"margin-bottom:12px\"><strong>First press.<\/strong> The crash is caught. You get a short holding page instead of a white screen, and the failure is recorded with the plugin that caused it named.<\/li>\n    <li style=\"margin-bottom:12px\"><strong>Second press.<\/strong> The same plugin has now failed twice, so it is paused and the request is replayed without it. The page loads. The rest of the site was never affected.<\/li>\n    <li>Pausing does not touch the database. WordPress still lists the plugin as active \u2014 it is filtered out while the page is built, which is why putting it back is one click and nothing was rewritten behind your back.<\/li>\n  <\/ol>\n\n  <h3 style=\"font-size:1.15rem;margin:0 0 14px;padding-top:26px;border-top:1px solid #e7e5e4\">Then look at the admin<\/h3>\n\n  <p style=\"font-size:1.02rem;line-height:1.65;color:#44403c;margin:0 0 18px\">You are signed in already. The dashboard shows the crash you just caused, and four other things that are real rather than staged on this install:<\/p>\n\n  <ul style=\"font-size:1.02rem;line-height:1.65;color:#44403c;padding-left:22px;margin:0 0 24px\">\n    <li style=\"margin-bottom:8px\">a <strong>core file that does not match wordpress.org<\/strong>, and a file sitting inside core that WordPress never shipped<\/li>\n    <li style=\"margin-bottom:8px\">two <strong>flagged files<\/strong> in the uploads folder, each showing the rule that fired, the line and the code \u2014 reasons to look, not verdicts<\/li>\n    <li style=\"margin-bottom:8px\">a <strong>restore point<\/strong> taken automatically before a plugin here was updated, which you can roll back<\/li>\n    <li>the <strong>cron<\/strong> screen, counting what WordPress owes across every plugin<\/li>\n  <\/ul>\n\n  <p style=\"margin:0 0 30px\"><a href=\"\/protect\/wp-admin\/admin.php?page=alovio-protect\" style=\"display:inline-block;background:#fff;color:#0c0a09;font-weight:700;text-decoration:none;padding:13px 24px;border-radius:10px;border:1.5px solid #d6d3d1\">Open the dashboard \u2192<\/a><\/p>\n\n  <p style=\"font-size:.92rem;line-height:1.6;color:#78716c;border-top:1px solid #e7e5e4;padding-top:20px;margin:0\">The two flagged files and the file planted in core are harmless demo samples. Each one begins by returning, so nothing in them ever runs \u2014 open them from the scanner and read them. Installing, updating and editing plugins is switched off on this sandbox; everything else is the real plugin.<\/p>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Live demo This site is running Alovio&nbsp;Protect.Try to take it down. There is a plugin installed here called Demo: Breakable Plugin. It does nothing at all until you press the button below \u2014 and then it fails the way a bad update fails, with a fatal error that normally ends the request and leaves a [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-5","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/pages\/5","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/comments?post=5"}],"version-history":[{"count":1,"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/pages\/5\/revisions"}],"predecessor-version":[{"id":6,"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/pages\/5\/revisions\/6"}],"wp:attachment":[{"href":"https:\/\/demo.alovio.org\/protect\/wp-json\/wp\/v2\/media?parent=5"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}