=== Pixelash Site Change ===
Contributors: ektadev
Tags: monitoring, change detection, audit log, security, content changes
Requires at least: 6.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Detect and log meaningful changes to your content, plugins, themes, users and settings, with severity scoring and email alerts.

== Description ==

Pixelash Site Change watches your WordPress site and builds a complete audit trail of what changed, when, and (where WordPress can tell us) who did it — so "wait, when did this happen?" always has an answer.

**What it tracks (Phase 1 / current release)**

* Post and page content — created, deleted, title, content, excerpt, slug, status, and featured image changes
* Plugins — installed, removed, activated, deactivated, and version updates
* Themes — activation switches and version updates
* Users — accounts created/deleted, role changes, email changes, password resets, and failed login attempts, recorded in real time
* Important site settings — site title, URLs, permalink structure, search-engine visibility, public registration, default role, and more

Every change is scored **Low / Medium / High / Critical** and shown on a dashboard with real counts, a filterable Activity Log, and email alerts once a change meets your chosen severity threshold.

**Snapshots**

The plugin keeps a locked "Initial Baseline" snapshot from the moment it's activated, plus a record of every scan afterward, so you always have a clear before/after reference point.

**Built for real sites**

Regular scans only re-check content that changed since the last scan (not your entire site every time), so performance stays reasonable even on larger sites. Scheduled scanning uses WP-Cron with configurable intervals from every 5 minutes to weekly.

**Your data stays yours**

No external account, no telemetry, no required sign-up. Change history has a configurable retention period (7 days to unlimited), and is kept (not deleted) if you ever remove the plugin, unless you explicitly opt in to deletion under Settings.

**What's next**

This is the initial release, covering the core monitoring engine. Visual/screenshot comparison, file and WordPress-core monitoring, WooCommerce monitoring, SEO plugin integrations, webhook/Slack/Teams alerts, PDF reporting, multisite support, and optional AI-assisted summaries are planned for upcoming releases — each will ship fully working, not as a placeholder.

== Installation ==

1. Upload the plugin ZIP via **Plugins → Add New → Upload Plugin**, or unzip into `/wp-content/plugins/`.
2. Activate **Pixelash Site Change**.
3. You'll be taken to a short setup screen — choose your monitoring level, scan frequency, notification email, and what content to monitor. No account required.
4. A locked "Initial Baseline" snapshot is created automatically.
5. From then on, changes are detected on your chosen schedule, or any time via the Dashboard's **Scan Now** button.

== Frequently Asked Questions ==

= Does this slow down my site? =

No scanning happens on regular visitor page loads. Scans run via WP-Cron in the background, and only re-check content modified since the previous scan.

= Will this fill my inbox with alerts for every tiny change? =

No — you choose the minimum severity that triggers an email (Settings → Notifications), and Ignore Rules let you permanently silence specific pages, plugins, or change types you don't care about.

= Can an Ignore Rule hide a security-relevant event? =

No. New administrator accounts, role changes, and account deletions are always recorded regardless of any ignore rule — this is enforced in code, not just policy.

= Does this scan for malware? =

No — this is change detection, not malware scanning. It tells you *what changed*; it does not attempt to identify malicious code.

= What happens to my data if I uninstall the plugin? =

Nothing is deleted by default. If you want your data removed on uninstall, enable that explicitly under Settings → Privacy & Retention before removing the plugin.

== Screenshots ==

1. The dashboard — monitoring status, severity breakdown, and recent activity.
2. The Changes / Activity Log screen with filters.
3. The Settings screen.
4. The onboarding setup screen shown on first activation.

== Changelog ==

= 1.0.0 =
* Initial release: content, plugin, theme, user, and settings monitoring; dashboard; activity log; snapshots; ignore rules; email alerts; onboarding wizard.

== Upgrade Notice ==

= 1.0.0 =
Initial release.
