=== CommVatar – Custom Avatars, Captcha & Comment Socialiser ===
Contributors: openfixx
Donate link: https://wpcmp.openfixx.com/
Tags: comments, spam protection, captcha, avatar upload, comment voting
Requires at least: 5.6
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Custom avatar, captcha, and thread interaction system. Custom avatars, comment history, gamification badges, voting, and advanced spam defense.

== Description ==

**CommVatar – Custom Avatars, Captcha & Comment Socialiser** transforms your WordPress comment section into a thriving social engagement hub. Go beyond the default comment system with custom avatars, activity feeds, gamification badges, and intelligent spam protection.

= Core Features =

* **Custom Avatar Uploads** — Let users upload and crop their own comment avatars with an integrated image cropper
* **Comment History Hub** — Users can view and navigate all their past comments from a single panel
* **Role-Based Gamification Badges** — Automatic badges for Admins, Moderators, Post Authors, Top Commenters, Most Loved, and New Members
* **Reddit-Style Voting** — Like/Dislike system with IP-based duplicate vote prevention
* **Top Commenters Widget** — Sidebar widget showing your most active community members with medals
* **Community Moderation** — Users can flag inappropriate comments for admin review
* **Rich Text Editor** — Replace the plain textarea with a TinyMCE-powered comment editor
* **Image Attachments** — Allow users to attach images to their comments with a lightbox viewer

= Spam Defense Layer =

* **6 CAPTCHA Providers** — Math, Word, Google reCAPTCHA v2, reCAPTCHA v3, hCaptcha, Cloudflare Turnstile
* **Invisible Honeypot Traps** — Catch bots without user interaction
* **Time-Based Traps** — Detect suspiciously fast form submissions
* **AI-Powered NSFW Filter** — Sightengine integration blocks explicit image uploads
* **AJAX-Driven CAPTCHAs** — Bypass page caching for always-fresh challenges

= WooCommerce Compatible =

CAPTCHA protection extends to WooCommerce login, registration, and lost password forms.

= Dashboard Analytics =

* Live spam interception feed with IP tracking
* 7-day engagement chart (comments vs spam)
* Community moderation queue with one-click actions

== Installation ==

1. Upload the plugin folder to `/wp-content/plugins/` or install via the WordPress plugin installer
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Navigate to **CommVatar – Custom Avatars, Captcha & Comment Socialiser** in the admin sidebar to configure settings
4. Customize your avatar settings, CAPTCHA provider, gamification badges, and engagement modules

== Frequently Asked Questions ==

= Does this work with page caching plugins? =

Yes! CAPTCHAs are loaded via AJAX, bypassing all page caches (WP Rocket, LiteSpeed, W3 Total Cache, etc.).

= Is it compatible with WooCommerce? =

Yes. CAPTCHA protection integrates with WooCommerce login, registration, and lost password forms.

= Can guests upload avatars? =

Guest users see a prompt to log in for avatar uploads. Only authenticated users can upload and crop avatars.

== Third-Party Services ==

This plugin connects to external third-party services under specific conditions. **No data is sent to any external service unless the site administrator explicitly enables the feature and provides API keys.** All connections use the WordPress HTTP API.

= 1. Sightengine — AI Image Moderation =

* **What it does:** Scans uploaded avatar and comment attachment images for NSFW, violent, or explicit content using AI models.
* **When it's used:** Only when the administrator enables "NSFW Image Filter" in plugin settings AND provides Sightengine API credentials.
* **Data sent:** The uploaded image file (binary), API user ID, API secret key.
* **Service URL:** `https://api.sightengine.com/1.0/check.json`
* **Provider:** [Sightengine](https://sightengine.com/)
* **Terms of Service:** [https://sightengine.com/policies/terms](https://sightengine.com/policies/terms)
* **Privacy Policy:** [https://sightengine.com/policies/privacy](https://sightengine.com/policies/privacy)

= 2. Google reCAPTCHA (v2 and v3) =

* **What it does:** Protects forms (comments, login, registration, lost password) from spam and abuse using Google's reCAPTCHA challenge system.
* **When it's used:** Only when the administrator selects "reCAPTCHA v2" or "reCAPTCHA v3" as the CAPTCHA provider AND provides Google API keys.
* **Data sent:** User interaction token, secret key, client IP address (sent server-side for verification).
* **Service URLs:**
  * Widget: `https://www.google.com/recaptcha/api.js`
  * Verification: `https://www.google.com/recaptcha/api/siteverify`
* **Provider:** [Google](https://www.google.com/recaptcha/)
* **Terms of Service:** [https://policies.google.com/terms](https://policies.google.com/terms)
* **Privacy Policy:** [https://policies.google.com/privacy](https://policies.google.com/privacy)

= 3. Cloudflare Turnstile =

* **What it does:** Provides a privacy-focused CAPTCHA alternative to protect forms from bots.
* **When it's used:** Only when the administrator selects "Turnstile" as the CAPTCHA provider AND provides Cloudflare API keys.
* **Data sent:** User interaction token, secret key (sent server-side for verification).
* **Service URLs:**
  * Widget: `https://challenges.cloudflare.com/turnstile/v0/api.js`
  * Verification: `https://challenges.cloudflare.com/turnstile/v0/siteverify`
* **Provider:** [Cloudflare](https://www.cloudflare.com/)
* **Terms of Service:** [https://www.cloudflare.com/terms/](https://www.cloudflare.com/terms/)
* **Privacy Policy:** [https://www.cloudflare.com/privacypolicy/](https://www.cloudflare.com/privacypolicy/)

= 4. hCaptcha =

* **What it does:** Provides a privacy-respecting CAPTCHA service to protect forms from automated abuse.
* **When it's used:** Only when the administrator selects "hCaptcha" as the CAPTCHA provider AND provides hCaptcha API keys.
* **Data sent:** User interaction token, secret key (sent server-side for verification).
* **Service URLs:**
  * Widget: `https://hcaptcha.com/1/api.js`
  * Verification: `https://hcaptcha.com/siteverify`
* **Provider:** [hCaptcha (Intuition Machines, Inc.)](https://www.hcaptcha.com/)
* **Terms of Service:** [https://www.hcaptcha.com/terms](https://www.hcaptcha.com/terms)
* **Privacy Policy:** [https://www.hcaptcha.com/privacy](https://www.hcaptcha.com/privacy)

== Changelog ==

= 1.0.0 =
* Initial release
* Custom avatar uploads with integrated cropper
* Comment history hub
* Role-based gamification badges
* Reddit-style like/dislike system
* Top Commenters Leaderboard widget
* 6 CAPTCHA providers with AJAX delivery
* Sightengine AI NSFW moderation
* Community reporting system
* Rich text editor for comments
* Image attachments with lightbox
* Live analytics dashboard

== Upgrade Notice ==

= 1.0.0 =
Initial release. Install and configure through CommVatar – Custom Avatars, Captcha & Comment Socialiser settings.

== Screenshots ==

1. The CommVatar admin settings panel.
2. Role Badge Gamification Tab.
3. Commvatar Analytics Tab.
4. Commvatar Reported Comment or Moderation Panel.
5. Spam Protection Settings.
6. The Frontend view of Comment Section.
7. The NSFW Sightengine ai Moderator flagged Image Message.

