=== HSArticle Login Math Verification ===
Contributors: hsarticle
Plugin URI: https://hsarticle.com/wordpress-login-captcha-plugin/
Tags: login, captcha, security, brute-force, bot protection
Requires at least: 5.0
Tested up to: 7.0
Stable tag: 1.0.1
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Adds a beautiful math CAPTCHA to the WordPress login page. No API keys, no paid services — 100% free.

== Description ==

HSArticle Login Math Verification protects your WordPress login page from bots and brute-force attacks using a simple math question. No Google reCAPTCHA, no Cloudflare, no API keys required.

= Features =
* Math captcha (e.g. "8 + 5 = ?") on the login page
* Secure answer stored as WordPress transient (no PHP sessions)
* Beautiful light and dark-themed login page design
* Customizable accent color with live preview
* Enable/disable toggle from admin settings
* Login attempt stats (passed vs. blocked) in the admin dashboard
* Lightweight — no external scripts loaded on the front end

== Installation ==

1. Upload the `hsarticle-login-math-verification` folder to `/wp-content/plugins/`
2. Activate the plugin from the Plugins menu in WordPress
3. Go to **Settings → Login Math Verification** to configure

== Frequently Asked Questions ==

= Does this require any API keys? =
No. Everything runs on your WordPress server using PHP and WordPress transients.

= Will this slow down my site? =
No. The plugin only loads on the login page and admin settings page.

= What if the captcha expires? =
Each captcha token is valid for 10 minutes. If it expires, the user just needs to refresh the login page.

= What happens when I uninstall the plugin? =
All plugin settings and captcha transients are automatically cleaned from your database when you delete the plugin via the WordPress admin.

== Changelog ==

= 1.0.1 =
* Plugin renamed to HSArticle Login Math Verification with new slug hsarticle-login-math-verification
* All prefixes updated from slc_ to almv_ throughout
* Inline CSS moved to wp_add_inline_style() — no more raw style tags
* Inline JS moved to wp_add_inline_script() — no more raw script tags
* Google Fonts loaded via wp_enqueue_style() on both login and admin pages
* Stat counters (passed/blocked) now increment correctly on each login attempt
* All text domain references updated to hsarticle-login-math-verification

= 1.0.0 =
* Initial release
