=== Plugin Name ===
Contributors: hondamarlboro
Donate link: 
Tags: Admin, Login Alert, Security, Notification, Pushover
Requires at least: 5.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 0.60
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Notify alerts with Email and Push Notification Services if detected someone accessing login form.

== Description ==

Notify alerts of login success/failure to your Windows, Mac, Tablet PC and Smartphones via Email and push notification services such as Prowl and Pushover if detected someone trying to your WordPress login form.

You can also exclude annoying notification like admin user's access if you've already removed it from user list. And if someone fails to login then redirected to blog top page URL.

Version 0.60 is a maintenance release that modernizes the plugin for PHP 8, fixes a long-standing redirect bug, removes support for two notification services that have permanently shut down, and adds "Send test notification" buttons to the settings screen so you can verify each channel without waiting for a real login attempt.

**Notify My Android and im.kayac.com have been removed.** Both third-party services have permanently shut down (im.kayac.com in October 2017, Notify My Android in May 2018) and their APIs no longer respond. If you were using either of them, please switch to Prowl, Pushover, or Email instead.

== Installation ==

1. Upload `plugin-name.php` to the `/wp-content/plugins/` directory
1. Activate the plugin through the 'Plugins' menu in WordPress
1. 'Login Alert Notification' menu in Settings
1. Enable/Disable notification method(s) and input username and/or key etc.
1. Use the "Send test notification" button next to each service to confirm delivery
1. Save Settings

== Frequently Asked Questions ==

= I can't receive the notification via email. =

Please check whether or not you fill in the email address of General &gt; Settings. I strongly recommend you put another email address to 'From' box of plugin settings — ideally an address on your own site's domain, since email sent with a 'From' address on a domain you don't control (e.g. a free gmail.com/icloud.com address on a server that isn't Google's/Apple's) is increasingly likely to be rejected by that provider's spam filters. Leaving the 'From' field blank so it matches your admin email's domain is usually the safest choice.

= My test notification says "sent" but I never receive the email. =

This almost always means the message left your server successfully but was rejected afterwards by the receiving mail provider. Check your host's mail delivery log (many hosts, including Sakura, provide one in the control panel) for a bounce message. A bounce mentioning something like "554 5.7.1 rejected due to local policy" means the *receiving* provider (e.g. Apple/iCloud) refused it — this is a deliverability/reputation issue between your server and that provider, not a bug in this plugin. Trying a different recipient address, or sending through an authenticated SMTP service (e.g. via a plugin like WP Mail SMTP), usually resolves it.

= What happened to Notify My Android and im.kayac.com support? =

Both services shut down permanently (im.kayac.com in 2017, NMA in 2018) and their old API endpoints simply time out or 404. Rather than leave dead, silently-failing options in the settings screen, they were removed in version 0.60. Prowl, Pushover, and Email remain fully supported.

== Screenshots ==
1. Notification on Prowl for iOS
2. Settings screen (v0.60)

== Changelog ==

= 0.60 =
* Removed: Notify My Android support (service permanently shut down May 2018)
* Removed: im.kayac.com support (service permanently shut down October 2017)
* Fixed: "redirect after failed login" was hard-coded to redirect to google.com instead of your own site, regardless of what the settings screen said
* Fixed: PHP 8 compatibility — undefined array key / undefined variable notices when the login form is reached without a referrer or without a submitted username
* Fixed: the "login page opened" alert never actually received its status argument, so it always evaluated as an undefined value internally
* Added: "Send test notification" button for Email, Prowl, and Pushover so you can verify each channel works without waiting for a real login attempt
* Added: settings are now sanitized on save
* Changed: settings screen redesigned with a clearer, card-based layout

= 0.51 =

* Update: Alert shows you login success/failure and submit status from login form
* Minor bug fix

= 0.46 =
* Minor bug fix

= 0.45 =
* Add new feature of redirecting to blog top if login attempt failed
* Update Don't disturb options - Notification of successful login only

= 0.40 =
* Add Don't disturb options - excluding notification of admin user's access, etc.

= 0.38 =
* Set sender address as you like

= 0.35 =
* Add Email Notification

= 0.30 =
* Add some push notification services (Prowl, NMA, Pushover)

== Upgrade Notice ==

= 0.60 =
Important fixes: the failed-login redirect no longer sends visitors to google.com, and PHP 8 warnings are resolved. Notify My Android and im.kayac.com (both defunct since 2017-2018) have been removed — switch to Prowl, Pushover, or Email if you were using either.

= 0.51 =
* More detail alert - login success/failure and login form submitted with blank or not

= 0.45 =
* NEW: Redirection after login failure
* UPDATE: Don't disturb options

= 0.38 =
This update enables you to change the sender address of email notification.

== Arbitrary section ==

