=== Jacklabs Form Sentinel ===
Contributors: seowebsite0711
Tags: recaptcha, spam, comments, contact form 7, woocommerce
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.2
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Add Google reCAPTCHA v2 Checkbox protection to common WordPress forms without modifying the default wp-login.php form.

== Description ==

Jacklabs Form Sentinel helps reduce automated spam on WordPress comments, registration, frontend login forms rendered with `wp_login_form()`, Contact Form 7, and WooCommerce account forms.

The default login form at `wp-login.php` is intentionally excluded to reduce the risk of administrators being locked out by an incorrect key configuration.

This plugin requires Google reCAPTCHA v2 “I'm not a robot” Checkbox keys. It does not support reCAPTCHA v3 keys.

== Installation ==

1. Upload the plugin folder to `/wp-content/plugins/` or install the ZIP file from the WordPress admin area.
2. Activate the plugin.
3. Go to Settings > Google reCAPTCHA.
4. Enter reCAPTCHA v2 Checkbox Site Key and Secret Key.
5. Contact Form 7 widgets are inserted automatically. Optionally use `[jlfpr_recaptcha]` to control their position.

== Frequently Asked Questions ==

= Does this protect the default WordPress login page? =

No. The form at `wp-login.php` is intentionally excluded. A frontend form produced by `wp_login_form()` can be protected.

= Which reCAPTCHA key type should I use? =

Create reCAPTCHA v2 Checkbox keys for your domain in Google reCAPTCHA Admin.

= What happens if Google verification is unavailable? =

The protected submission is rejected. This fail-closed behavior prevents unverified submissions from bypassing protection.

== External services ==

This plugin connects to Google reCAPTCHA, a service provided by Google LLC, only after an administrator saves a Site Key and Secret Key.

On pages containing protected forms, the plugin loads JavaScript from `https://www.google.com/recaptcha/api.js`. Google may receive visitor information such as IP address, browser and device information, cookies, and interaction data. When a visitor submits a protected form, the plugin sends the reCAPTCHA response token, configured Secret Key, and visitor IP address to `https://www.google.com/recaptcha/api/siteverify` to determine whether the submission is valid.

This data is sent when a protected form is displayed or submitted. The service is necessary for the plugin's reCAPTCHA functionality.

Google Privacy Policy: https://policies.google.com/privacy

Google Terms of Service: https://policies.google.com/terms

Google reCAPTCHA information and terms: https://www.google.com/recaptcha/about/

== Changelog ==

= 1.0.2 =
* Renamed the plugin with a distinctive, trademark-neutral display name and slug.
* Applied a unique prefix to declarations, stored data, asset handles, settings, and form fields.
* Updated the WordPress.org contributor username.

= 1.0.1 =
* Added WordPress.org-compatible plugin metadata and documentation.
* Added external-service and privacy disclosures.
* Added suggested site privacy-policy text.
* Improved input validation, API error handling, escaping, and internationalization.
* Fixed corrupted text encoding and made frontend assets human-readable.

= 1.0.0 =
* Initial release.
