👁12views

The Hitchhikers Guide to Fixing Why a Thumbnail Image Does Not Show for Your Article on WhatsApp, LinkedIn, Twitter or Instagram

<meta property="og:title" content="Your Page Title" />
<meta property="og:description" content="A brief description" />
<meta property="og:image" content="https://example.com/image.jpg" />
<meta property="og:url" content="https://example.com/page" />
<meta property="og:type" content="article" />

<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:image" content="https://example.com/image.jpg" />

cat > diagnose-social-preview.sh << 'EOF'
#!/usr/bin/env bash
# diagnose-social-preview.sh
# Usage: bash diagnose-social-preview.sh <url>

set -uo pipefail

TARGET_URL="${1:-}"

if [[ -z "$TARGET_URL" ]]; then
  echo "Usage: bash diagnose-social-preview.sh <url>"
  exit 1
fi

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
CYAN='\033[0;36m'
BOLD='\033[1m'
RESET='\033[0m'

PASS=0
WARN=0
FAIL=0

pass()    { echo -e "  ${GREEN}[PASS]${RESET} $1"; PASS=$((PASS+1)); }
warn()    { echo -e "  ${YELLOW}[WARN]${RESET} $1"; WARN=$((WARN+1)); }
fail()    { echo -e "  ${RED}[FAIL]${RESET} $1"; FAIL=$((FAIL+1)); }
info()    { echo -e "  ${CYAN}[INFO]${RESET} $1"; }
section() { echo -e "\n${BOLD}${CYAN}=== $1 ===${RESET}"; }
fix()     { echo -e "       ${BOLD}FIX :${RESET} $1"; }

WA_UA="WhatsApp/2.23.24.82 A"
FB_UA="facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"
LI_UA="LinkedInBot/1.0 (compatible; Mozilla/5.0; Apache-HttpClient +http://www.linkedin.com)"
TW_UA="Twitterbot/1.0"
FACEBOT_UA="Facebot"

TMP=$(mktemp -d)
trap 'rm -rf "$TMP"' EXIT

echo -e "\n${BOLD}=============================================="
echo -e "  Social Preview Diagnostic Report"
echo -e "  $TARGET_URL"
echo -e "==============================================${RESET}"

# ==============================================================================
section "1. HTTPS"
# ==============================================================================

if [[ "$TARGET_URL" =~ ^https:// ]]; then
  pass "URL uses HTTPS"
else
  fail "URL does not use HTTPS"
  fix "Redirect all traffic to HTTPS. WhatsApp will not render previews over plain HTTP."
fi

# ==============================================================================
section "2. Redirect Chain"
# ==============================================================================

info "Tracing redirect chain as WhatsApp crawler..."
CHAIN_OUTPUT=$(curl -sI \
  -A "$WA_UA" \
  --max-redirs 10 \
  --max-time 20 \
  -w "\nFINAL_HTTP:%{http_code}\nFINAL_URL:%{url_effective}\nTOTAL_TIME:%{time_total}" \
  "$TARGET_URL" 2>/dev/null) || CHAIN_OUTPUT=""

HOP=0
while IFS= read -r line; do
  if [[ "$line" =~ ^HTTP/ ]]; then
    CODE=$(echo "$line" | awk '{print $2}')
    if [[ "$CODE" =~ ^(301|302|303|307|308)$ ]]; then
      HOP=$((HOP+1))
      info "Hop $HOP: HTTP $CODE"
    fi
  elif [[ "$line" =~ ^[Ll]ocation: ]]; then
    info "  -> $(echo "$line" | cut -d' ' -f2-)"
  fi
done <<< "$CHAIN_OUTPUT"

TOTAL_TIME=$(echo "$CHAIN_OUTPUT" | grep "^TOTAL_TIME:" | cut -d: -f2 || echo "0")

if (( HOP == 0 )); then
  pass "No redirects. Direct 200 response to WhatsApp crawler."
elif (( HOP <= 2 )); then
  warn "$HOP redirect(s) detected. Each hop burns time against WhatsApp's timeout budget."
  fix "Reduce to zero hops. Update og:url to the canonical final URL."
else
  fail "$HOP redirect(s) detected. This many hops will cause WhatsApp crawler timeouts."
  fix "Fix the chain. $HOP hops at 200ms each burns $(echo "$HOP * 200" | bc)ms before the page loads."
fi

# ==============================================================================
section "3. Cloudflare Detection"
# ==============================================================================

HEADERS=$(curl -sI -A "$WA_UA" -L --max-time 10 "$TARGET_URL" 2>/dev/null) || HEADERS=""
CF_RAY=$(echo "$HEADERS" | grep -i "^cf-ray:" | head -1 || true)
CF_CACHE=$(echo "$HEADERS" | grep -i "^cf-cache-status:" | head -1 | cut -d: -f2- | tr -d ' \r\n' || true)

if [[ -n "$CF_RAY" ]]; then
  info "Site is behind Cloudflare (cf-ray header present)"
  if [[ -n "$CF_CACHE" ]]; then
    info "CF-Cache-Status: $CF_CACHE"
    if [[ "$CF_CACHE" == "HIT" ]]; then
      pass "Cloudflare is serving this URL from cache. Crawlers will get a fast cached response."
    elif [[ "$CF_CACHE" == "MISS" || "$CF_CACHE" == "EXPIRED" ]]; then
      warn "Cloudflare cache is $CF_CACHE. Crawler hit origin directly. Check caching rules."
      fix "Ensure Cloudflare caches HTML pages. A cache miss on the crawler path causes slow TTFB."
    elif [[ "$CF_CACHE" == "BYPASS" ]]; then
      fail "Cloudflare cache is BYPASS. Every crawler request hits your origin server."
      fix "Remove the Cache-Control: no-store or Cache bypass rule for this URL path."
    else
      info "CF-Cache-Status: $CF_CACHE"
    fi
  fi
else
  info "No Cloudflare detected (no cf-ray header). Skipping Cloudflare-specific checks."
fi

# ==============================================================================
section "4. Meta Refresh Redirects"
# ==============================================================================

HTML=$(curl -s -A "$WA_UA" -L --max-time 15 "$TARGET_URL" 2>/dev/null) || HTML=""
HTML_LEN=${#HTML}

if (( HTML_LEN > 10000 )); then
  pass "HTML response received (${HTML_LEN} bytes). Page is rendering content."
elif (( HTML_LEN > 0 )); then
  warn "HTML response is only ${HTML_LEN} bytes. Page may be returning a stub or error page."
else
  fail "Empty HTML response. Crawler would find no OG tags at all."
fi

META_REFRESH=$(echo "$HTML" | grep -oi '<meta[^>]*http-equiv=.*refresh[^>]*>' | head -3 || true)
if [[ -n "$META_REFRESH" ]]; then
  fail "Meta refresh redirect found: $META_REFRESH"
  fix "Remove meta refresh tags. Social crawlers do not execute them and will read the pre-redirect page."
else
  pass "No meta refresh redirects in HTML"
fi

# ==============================================================================
section "5. Response Time and TTFB"
# ==============================================================================

TTFB=$(curl -o /dev/null -s \
  -w "%{time_starttransfer}" \
  -A "$WA_UA" -L --max-time 15 \
  "$TARGET_URL" 2>/dev/null) || TTFB="0"

TOTAL_MS=$(echo "$TOTAL_TIME * 1000 / 1" | bc 2>/dev/null || echo "9999")
TTFB_MS=$(echo "$TTFB * 1000 / 1" | bc 2>/dev/null || echo "9999")

info "Total response time: ${TOTAL_TIME}s"
info "Time to first byte:  ${TTFB}s"

if (( TTFB_MS < 800 )); then
  pass "TTFB ${TTFB}s is under 800ms. Well within WhatsApp crawler tolerance."
elif (( TTFB_MS < 2000 )); then
  warn "TTFB ${TTFB}s is slow. WhatsApp crawler may timeout on cold cache misses."
  fix "Enable full-page caching. Target TTFB under 800ms."
else
  fail "TTFB ${TTFB}s is too slow. WhatsApp crawler will timeout before reading any OG tags."
  fix "Enable aggressive caching. Origin is too slow for social crawlers."
fi

if (( TOTAL_MS < 3000 )); then
  pass "Total response time ${TOTAL_TIME}s is under 3s. Fine for all crawlers."
elif (( TOTAL_MS < 5000 )); then
  warn "Total response time ${TOTAL_TIME}s is borderline. WhatsApp may timeout on slow connections."
else
  fail "Total response time ${TOTAL_TIME}s exceeds 5s. Crawler will timeout before reading OG tags."
fi

# ==============================================================================
section "6. Open Graph Tags"
# ==============================================================================

check_og() {
  local prop="$1"
  local val=""
  val=$(echo "$HTML" | grep -oi "property=['\"]${prop}['\"][^>]*content=['\"][^'\"]*['\"]" \
    | grep -oi "content=['\"][^'\"]*['\"]" \
    | sed "s/content=['\"]//;s/['\"]$//" | head -1 || true)
  if [[ -z "$val" ]]; then
    val=$(echo "$HTML" | grep -oi "content=['\"][^'\"]*['\"][^>]*property=['\"]${prop}['\"]" \
      | grep -oi "content=['\"][^'\"]*['\"]" \
      | sed "s/content=['\"]//;s/['\"]$//" | head -1 || true)
  fi
  echo "$val"
}

OG_TITLE=$(check_og "og:title")
OG_DESC=$(check_og "og:description")
OG_IMAGE=$(check_og "og:image")
OG_URL=$(check_og "og:url")
OG_TYPE=$(check_og "og:type")
TW_CARD=$(echo "$HTML" | grep -oi 'name=["\x27]twitter:card["\x27][^>]*content=["\x27][^"\x27]*["\x27]' \
  | grep -oi 'content=["\x27][^"\x27]*["\x27]' \
  | sed 's/content=["'"'"']//;s/["'"'"']$//' | head -1 || true)

if [[ -n "$OG_TITLE" ]]; then
  pass "og:title found: ${OG_TITLE:0:80}"
else
  fail "og:title missing. All platforms require this tag."
  fix 'Add <meta property="og:title" content="Your Title" /> to the page head.'
fi

if [[ -n "$OG_DESC" ]]; then
  pass "og:description found"
else
  fail "og:description missing. Preview cards will show no description."
  fix 'Add <meta property="og:description" content="..." /> to the page head.'
fi

if [[ -n "$OG_IMAGE" ]]; then
  pass "og:image found: ${OG_IMAGE:0:80}"
else
  fail "og:image missing. No thumbnail will appear on any platform."
  fix "Set a featured image in WordPress. Your SEO plugin generates og:image from it."
fi

if [[ -n "$OG_URL" ]]; then
  pass "og:url found: ${OG_URL:0:80}"
else
  warn "og:url missing. Platforms may cache the wrong canonical URL."
  fix 'Add <meta property="og:url" content="https://yoursite.com/canonical-url" />.'
fi

if [[ -n "$OG_TYPE" ]]; then
  pass "og:type found: $OG_TYPE"
else
  warn "og:type missing. Defaults to website but best practice is to set it explicitly."
  fix 'Add <meta property="og:type" content="article" />.'
fi

if [[ -n "$TW_CARD" ]]; then
  pass "twitter:card found: $TW_CARD. X/Twitter will render large image format."
else
  warn "twitter:card missing. X/Twitter will fall back to a small summary card with no prominent image."
  fix 'Add <meta name="twitter:card" content="summary_large_image" />.'
fi

# ==============================================================================
section "7. og:image Validation"
# ==============================================================================

if [[ -z "$OG_IMAGE" ]]; then
  warn "Skipping og:image validation because the tag is missing (see Section 6)."
else
  IMG_FILE="$TMP/og_image"

  IMG_HTTP=$(curl -sI -A "$WA_UA" -L --max-time 15 "$OG_IMAGE" 2>/dev/null \
    | grep -i "^HTTP/" | tail -1 | awk '{print $2}') || IMG_HTTP=""

  IMG_MIME=$(curl -sI -A "$WA_UA" -L --max-time 15 "$OG_IMAGE" 2>/dev/null \
    | grep -i "^content-type:" | tail -1 | cut -d: -f2- | tr -d ' \r\n') || IMG_MIME=""

  if [[ "$IMG_HTTP" == "200" ]]; then
    pass "og:image URL is accessible. Returns HTTP 200 to WhatsApp crawler UA."
  else
    fail "og:image URL returns HTTP ${IMG_HTTP:-unknown} to WhatsApp crawler. Thumbnail will not load."
    fix "Check S3 bucket policy, CDN rules, or Cloudflare firewall on the image URL itself."
  fi

  if [[ "$OG_IMAGE" =~ ^https:// ]]; then
    pass "og:image uses HTTPS"
  else
    fail "og:image uses HTTP. WhatsApp will not load mixed-content images."
    fix "Update the og:image URL to HTTPS."
  fi

  if [[ "$IMG_MIME" =~ image/(jpeg|png|gif|webp) ]]; then
    pass "og:image MIME type is correct: $IMG_MIME"
  else
    warn "og:image MIME type is unexpected: ${IMG_MIME:-unknown}. Expected image/jpeg or image/png."
    fix "Ensure the image is served with a correct Content-Type header."
  fi

  curl -sL -A "$WA_UA" --max-time 20 -o "$IMG_FILE" "$OG_IMAGE" 2>/dev/null || true

  if [[ -f "$IMG_FILE" ]]; then
    IMG_BYTES=$(wc -c < "$IMG_FILE" | tr -d ' ')
    IMG_KB=$((IMG_BYTES / 1024))

    info "og:image file size: ${IMG_KB}KB (WhatsApp hard limit is ~300KB; Facebook/LinkedIn allow up to 5-8MB)"

    if (( IMG_KB < 200 )); then
      pass "og:image is ${IMG_KB}KB. Well under the WhatsApp 300KB limit. Will render on all platforms."
    elif (( IMG_KB < 300 )); then
      warn "og:image is ${IMG_KB}KB. Approaching the WhatsApp 300KB hard limit. Compress now to be safe."
      fix "Run: convert input.jpg -resize 1200x630 -quality 80 -strip output.jpg"
    else
      fail "og:image is ${IMG_KB}KB and exceeds the WhatsApp 300KB hard limit. Thumbnail will NOT appear on WhatsApp even though it works on LinkedIn and Facebook."
      fix "Run: convert input.jpg -resize 1200x630 -quality 75 -strip output.jpg"
    fi

    if command -v identify &>/dev/null; then
      DIMS=$(identify -format "%wx%h" "$IMG_FILE" 2>/dev/null || true)
      W=$(echo "$DIMS" | cut -dx -f1)
      H=$(echo "$DIMS" | cut -dx -f2)
      info "og:image dimensions: ${W}x${H}px (recommended minimum is 1200x630px)"
      if (( W >= 1200 && H >= 630 )); then
        pass "og:image dimensions ${W}x${H}px meet the 1200x630 minimum for all platforms."
      else
        warn "og:image dimensions ${W}x${H}px are below the recommended 1200x630px. Some platforms may show a small or cropped thumbnail."
        fix "Resize: convert input.jpg -resize 1200x630^ -gravity center -extent 1200x630 output.jpg"
      fi
    else
      warn "ImageMagick not installed so image dimensions could not be checked. Install: brew install imagemagick"
    fi
  fi
fi

# ==============================================================================
section "8. Content-Security-Policy"
# ==============================================================================

CSP=$(curl -sI -A "$WA_UA" -L --max-time 10 "$TARGET_URL" 2>/dev/null \
  | grep -i "^content-security-policy:" | cut -d: -f2-) || CSP=""

if [[ -z "$CSP" ]]; then
  pass "No Content-Security-Policy header present. No CSP restrictions to worry about."
else
  IMG_DOMAIN=$(echo "$OG_IMAGE" | grep -oE 'https?://[^/]+' | head -1 || true)
  info "CSP header found. Checking img-src for og:image domain: $IMG_DOMAIN"
  if echo "$CSP" | grep -q "img-src"; then
    if echo "$CSP" | grep -qE "${IMG_DOMAIN}|'self'|\*"; then
      pass "CSP img-src allows the og:image domain. No blocking."
    else
      warn "CSP img-src may be blocking your og:image domain ($IMG_DOMAIN). Preview image may not render."
      fix "Add $IMG_DOMAIN to your CSP img-src directive."
    fi
  else
    pass "CSP does not restrict img-src. No blocking."
  fi
fi

# ==============================================================================
section "9. robots.txt"
# ==============================================================================

ROBOTS_URL=$(echo "$TARGET_URL" | grep -oE 'https?://[^/]+')/robots.txt
info "Fetching $ROBOTS_URL"
ROBOTS=$(curl -s -L --max-time 10 "$ROBOTS_URL" 2>/dev/null) || ROBOTS=""

for BOT in "facebookexternalhit" "WhatsApp" "Facebot" "LinkedInBot" "Twitterbot"; do
  BLOCK=$(echo "$ROBOTS" | grep -A5 -i "User-agent: $BOT" | grep -i "Disallow" || true)
  if [[ -n "$BLOCK" ]]; then
    fail "robots.txt is blocking $BOT ($BLOCK). This crawler cannot fetch your page."
    fix "Remove the Disallow rule for $BOT or add Allow: / under its User-agent block."
  else
    pass "robots.txt does not block $BOT"
  fi
done

# ==============================================================================
section "10. Crawler User Agent Tests"
# ==============================================================================

info "Testing each crawler UA for HTTP 200 and absence of Cloudflare challenge page..."

check_ua() {
  local name="$1"
  local ua="$2"
  local response="" full_html="" cf_challenge=""

  response=$(curl -s -o /dev/null -w "%{http_code}" -A "$ua" -L --max-time 15 "$TARGET_URL" 2>/dev/null) || response="000"
  full_html=$(curl -s -A "$ua" -L --max-time 15 "$TARGET_URL" 2>/dev/null) || full_html=""
  cf_challenge=$(echo "$full_html" | grep -oi "ray id\|challenge\|cf-browser-verification\|just a moment" | head -1 || true)

  if [[ "$response" == "200" && -z "$cf_challenge" ]]; then
    pass "$name: HTTP $response and no challenge page. Crawler can read your OG tags."
  elif [[ -n "$cf_challenge" ]]; then
    fail "$name: HTTP $response but Cloudflare returned a challenge page. Crawler sees no OG tags and will cache a blank preview."
    fix "Create a Cloudflare WAF Skip rule for this UA. See Section 6 of the blog post."
  else
    fail "$name: HTTP $response. Crawler is being blocked."
    fix "Check WAF, firewall, or bot protection rules blocking $name."
  fi
}

check_ua "WhatsApp"            "$WA_UA"
check_ua "facebookexternalhit" "$FB_UA"
check_ua "Facebot"             "$FACEBOT_UA"
check_ua "LinkedInBot"         "$LI_UA"
check_ua "Twitterbot"          "$TW_UA"

# ==============================================================================
echo -e "\n${BOLD}=============================================="
echo -e "  Summary"
echo -e "==============================================${RESET}"
echo -e "  ${GREEN}PASS: $PASS${RESET}   ${YELLOW}WARN: $WARN${RESET}   ${RED}FAIL: $FAIL${RESET}"

if (( FAIL == 0 && WARN == 0 )); then
  echo -e "\n  ${GREEN}${BOLD}All checks passed. Social previews should render correctly on all platforms.${RESET}"
elif (( FAIL == 0 )); then
  echo -e "\n  ${YELLOW}${BOLD}No hard failures but $WARN warning(s) found. Review WARN items above.${RESET}"
else
  echo -e "\n  ${RED}${BOLD}$FAIL failure(s) detected. Fix the FAIL items above before sharing links.${RESET}"
fi
echo ""
EOF

chmod +x diagnose-social-preview.sh
echo "Written: diagnose-social-preview.sh"

convert input.jpg -resize 1200x630 -quality 80 -strip output.jpg
jpegoptim --size=250k --strip-all image.jpg
cwebp -q 80 input.png -o output.webp

Content-Security-Policy: img-src 'self' https://your-cdn-domain.com https://s3.af-south-1.amazonaws.com;

(http.user_agent contains "WhatsApp") or
(http.user_agent contains "facebookexternalhit") or
(http.user_agent contains "Facebot")

cat > audit-wp-og.sh << 'EOF'
#!/usr/bin/env bash
# audit-wp-og.sh
# Usage: bash audit-wp-og.sh audit|fix [post-id]
# Audits WordPress posts for missing og:image via WP-CLI on remote EC2.
#
# Update the four variables below before running.

set -euo pipefail

MODE="${1:-audit}"
SPECIFIC_POST="${2:-}"

EC2_HOST="[email protected]"
SSH_KEY="$HOME/.ssh/your-key.pem"
WP_PATH="/var/www/html"
SITE_URL="https://yoursite.com"

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
CYAN='\033[0;36m'
BOLD='\033[1m'
RESET='\033[0m'

echo -e "\n${BOLD}${CYAN}WordPress OG Tag Auditor${RESET}"
echo -e "Mode: ${BOLD}$MODE${RESET}\n"

if [[ "$MODE" == "audit" ]]; then
  echo -e "${YELLOW}Fetching published posts with no featured image...${RESET}\n"

  ssh -i "$SSH_KEY" -o StrictHostKeyChecking=no "$EC2_HOST" bash <<'REMOTE'
echo "Posts with no featured image (og:image will be missing for these):"
wp post list \
  --post_type=post \
  --post_status=publish \
  --fields=ID,post_title,post_date \
  --format=table \
  --meta_query='[{"key":"_thumbnail_id","compare":"NOT EXISTS"}]' \
  --path=/var/www/html \
  --allow-root \
  2>/dev/null || echo "(WP-CLI not available or no posts found)"

echo ""
echo "Total published posts:"
wp post list \
  --post_type=post \
  --post_status=publish \
  --format=count \
  --path=/var/www/html \
  --allow-root \
  2>/dev/null

echo ""
echo "Posts with featured image set:"
wp post list \
  --post_type=post \
  --post_status=publish \
  --format=count \
  --meta_key=_thumbnail_id \
  --path=/var/www/html \
  --allow-root \
  2>/dev/null
REMOTE

  echo -e "\n${YELLOW}Spot-checking live og:image tags on recent posts...${RESET}\n"
  WA_UA="WhatsApp/2.23.24.82 A"
  URLS=$(curl -s "${SITE_URL}/post-sitemap.xml" \
    | grep -oE '<loc>[^<]+</loc>' \
    | sed 's|<loc>||;s|</loc>||' \
    | head -10)

  if [[ -z "$URLS" ]]; then
    echo -e "${YELLOW}Could not fetch sitemap at ${SITE_URL}/post-sitemap.xml${RESET}"
  else
    printf "%-70s %s\n" "URL" "og:image"
    printf "%-70s %s\n" "---" "--------"
    while IFS= read -r url; do
      html=$(curl -s -A "$WA_UA" -L --max-time 8 "$url" 2>/dev/null)
      og_img=$(echo "$html" \
        | grep -oiE 'property="og:image"[^>]+content="[^"]+"' \
        | grep -oiE 'content="[^"]+"' \
        | sed 's/content="//;s/"//' \
        | head -1)
      if [[ -n "$og_img" ]]; then
        printf "%-70s ${GREEN}%s${RESET}\n" "$(echo "$url" | sed "s|${SITE_URL}||")" "PRESENT"
      else
        printf "%-70s ${RED}%s${RESET}\n" "$(echo "$url" | sed "s|${SITE_URL}||")" "MISSING"
      fi
    done <<< "$URLS"
  fi

elif [[ "$MODE" == "fix" ]]; then
  if [[ -z "$SPECIFIC_POST" ]]; then
    echo -e "${RED}Provide a post ID: bash audit-wp-og.sh fix <post-id>${RESET}"
    exit 1
  fi

  ssh -i "$SSH_KEY" -o StrictHostKeyChecking=no "$EC2_HOST" bash <<REMOTE
echo "Available media attachments (most recent 10):"
wp post list \
  --post_type=attachment \
  --posts_per_page=10 \
  --fields=ID,post_title,guid \
  --format=table \
  --path=$WP_PATH \
  --allow-root \
  2>/dev/null
REMOTE

  echo -e "\n${YELLOW}To assign a featured image to post $SPECIFIC_POST:${RESET}"
  echo "  ssh -i $SSH_KEY $EC2_HOST \\"
  echo "    wp post meta set $SPECIFIC_POST _thumbnail_id <ATTACHMENT_ID> --path=$WP_PATH --allow-root"
  echo ""
  echo "Then retest: bash diagnose-social-preview.sh ${SITE_URL}/?p=${SPECIFIC_POST}"

else
  echo -e "${RED}Unknown mode: $MODE. Use 'audit' or 'fix'.${RESET}"
  exit 1
fi
EOF

chmod +x audit-wp-og.sh
echo "Written and made executable: audit-wp-og.sh"