Multisite

Every site of a WordPress network shares the same files, so Qartvelo Guard works once for the whole network: one scan, one quarantine, one allowlist and one set of settings, managed from Network Admin.

Install it

1. Open Network Admin > Plugins.
2. Install the plugin (from WordPress.org or the ZIP) and press Network Activate.
3. Open any Network Admin page. The setup wizard opens there.

Who sees what

• The Qartvelo Guard menu (Dashboard, Reports, Settings, Setup Wizard) is in Network Admin, for super admins.
• Site administrators see no plugin menu, but uploads on their sites are still held.
• The message a held uploader sees points administrators to "Network Admin > Qartvelo Guard > Reports".
• Alerts go to the network admin email and every super admin unless you enter recipients.

Uploads on each site

Each held upload remembers the site it came from, and Reports shows it as "Site: Name (host/path/)". When you allow a Media Library upload, it is added to that site's Media Library. The same file held on two sites is two items. If the site was deleted in the meantime, only the fingerprint is allowed.

Scans

• Scheduled scans run once, on the main site, for the whole network.
• The uploads folder of the main site holds every site's uploads (sites/<id>/), so it is scanned once.
• The database scan checks the options and posts of every site, one after the other.
• The administrator watch keeps one trusted list for the network. Remove admin role removes the role on every site and revokes super admin.

Things that work differently

• Data folder: all sites share one, so the one-click move is not available. Move it with one line in wp-config.php instead:

define( 'WPCYBERSEC_DATA_DIR', '/var/www/wpcybersec-data' );

Copy the current data folder there first, so held files and scan data come along. The plugin shows the exact commands under Settings > Advanced > Storage.

• Real cron: the scan lines need --url= with the network address. The other sites keep their own WP-Cron, so only switch it off when cron runs for every site. See Real cron.
• bin/cron.php needs --url= when wp-config.php does not define DOMAIN_CURRENT_SITE in a plain define() line.
• Early guard: one configuration covers every site's URL path.
• Clean core reinstall: all sites share one WordPress core, and the confirmation says so.