=== BAAB Insights ===
Contributors: ingobaab
Tags: performance, insights, optimization, admin
Requires at least: 6.0
Tested up to: 6.9
Requires PHP: 7.4
Stable tag: 0.3.6
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

BAAB Insights analyzes your WordPress installation locally in the admin and helps you spot performance, database, cache, media, and SSL issues.

== Description ==

BAAB Insights runs inside your WordPress admin. It builds an on-screen report (overview table, advisor tabs) and a JSON data block you can copy. For a **more detailed report** on the BAAB site, open **https://baab.de/insights/** and paste your JSON there when you are ready (that step is optional and only happens if you copy data out of WordPress yourself).

**What this version includes**

* Admin page under "BAAB Insights" (capability: `manage_options`)
* One-click report generation (AJAX, same-site only) with database, object cache, media, and SSL advisors
* Read-only JSON export with compact formatting for large lists
* English source strings with German translations (`de_DE`)
* Optional activation redirect to the plugin screen (single activation only)

**Privacy and external connections**

* **No phoning home**: The plugin does not send analytics or telemetry to BAAB or any third party. No license pings, no usage tracking, no crash reporting.
* **Your data stays on your server** unless you explicitly copy the JSON elsewhere.
* **Outbound HTTP(S)** is limited to **your own site’s URLs**: optional HEAD requests to your configured home URL (HTTPS for HSTS detection, HTTP for redirect-to-HTTPS checks). This is not a call to the plugin author; it uses WordPress’s HTTP API to inspect your public responses.
* For SSL details, the plugin may open a **TLS connection to your site’s host** to read the presented certificate (same host as your WordPress URL). By default, fields like certificate subject, SAN list, and full site URL are **not** included in the JSON export unless you opt in by defining `BAAB_DISABLE_SENSITIVE_OUTPUT` as `false` in code.

**Optional commercial product**

* The admin screen may link to a PRO offering on the author’s site. The free plugin on WordPress.org remains fully functional for analysis; the PRO product is optional.
* The web app for extended analysis based on your JSON export: **https://baab.de/insights/**

== Installation ==

1. Upload the `baab-insights` folder to `/wp-content/plugins/`.
2. Activate the plugin in the WordPress admin under "Plugins".
3. Open "BAAB Insights" in the admin menu and use "Generate BAAB Insights Report now".

== Frequently Asked Questions ==

= Where can I use my JSON for a more detailed BAAB Insights report? =

On **https://baab.de/insights/** — only after you copy the JSON from the plugin yourself. Nothing is sent automatically.

= Does the plugin send my data to the internet? =

No. It does not transmit your report to BAAB or any third party. The only automatic outbound requests are to **your own site** (to check HTTPS, redirects, and headers). You choose whether to copy the JSON to another system.

= Does the plugin already generate a report? =

Yes. After clicking the generate button, the plugin fills the overview, advisor tabs, and the JSON field. All processing happens in your installation.

= Which languages are included? =

English is the default. German (`de_DE`) is included in the `languages` folder.

= Can I allow more detail in the JSON (URL, cert names, etc.)? =

Yes, for advanced use. In `wp-config.php` or a small custom plugin, set `BAAB_DISABLE_SENSITIVE_OUTPUT` to `false` *before* the plugin loads. The default is `true` to avoid exposing identifying details in the export.

== Changelog ==

= 0.3.6 =

* Corrected Contributers (typo)

= 0.3.4 =

* Maintenance and documentation updates.

= 0.3.3 =

* Visit link to BAAB Insights stays disabled until JSON is copied; version bump.

= 0.3.2 =

* Admin page title shows plugin version; plugin list link label updated.

= 0.3.1 =

* Index advisor: simplified `ALTER TABLE` suggestions (broader MySQL/MariaDB compatibility).

= 0.3.0 =

* Maintenance release.

= 0.2.0 =

* Report generation with database, cache, media, and SSL advisors; JSON export; PRO info tab; privacy-oriented defaults for sensitive fields.

= 0.1.0 =

* Initial version with admin interface and translations.
