=== Anti DDOS/BOT reCAPTCHA Protection ===
Contributors: webtouchgr
Tags: protection, ddos, bot, recaptcha, security
Requires at least: 5.0
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.1.2
License: LGPL v2.1
License URI: http://www.gnu.org/licenses/lgpl-2.1.html

Stop bad bots and limit DDOS attacks with Google reCAPTCHA. One-time human verification keeps automated traffic away. Translated in 132 languages.

== Description ==

Stop bad traffic before it reaches your content. This plugin requires visitors to complete a one-time reCAPTCHA verification, effectively blocking automated bots and reducing the impact of DDOS attacks.

= Key Features =

* **One-Click Protection** - Enable protection with a single click after reCAPTCHA verification
* **URL Targeting** - Protect specific pages or your entire website
* **Logged-in Users Bypass** - Admins and editors never see the captcha
* **Emergency Override** - Enable via wp-config.php if you lose admin access
* **Fully Translated** - Available in 132 languages with professional human-quality translations
* **Lightweight** - Minimal impact on your site's performance

== Installation ==

= Automatic =
1. Go to Plugins → Add New
2. Search for "Anti DDOS/BOT reCAPTCHA Protection"
3. Install and activate

= Manual =
1. Upload `anti-ddosbot-recaptcha-protection.zip` to `/wp-content/plugins/`
2. Extract the files
3. Activate through the Plugins menu in WordPress

== Frequently Asked Questions ==

= How do I get reCAPTCHA keys? =
Visit https://www.google.com/recaptcha/admin and register your site. You'll receive a Site Key and a Secret Key.

= I lost admin panel access, what do I do? =
Add `define( 'ANTI_DDOS_ENABLED', true );` to your wp-config.php file, above the line that says `require_once ABSPATH . 'wp-settings.php';`. This bypasses the plugin settings.

= Which pages can I protect? =
You can protect specific URLs or parts of URLs. For example, entering "product" will protect all URLs containing that word. Leave the field empty to protect your entire site.

== Screenshots ==
1. Admin settings page
2. Captcha overlay as seen by visitors

== Changelog ==

= 1.1.2 - 30 June 2026 =
* **Security Fix** — Added urlencode() to reCAPTCHA verification parameters
* **Admin Fix** — Added reCAPTCHA API JS enqueue in admin for proper captcha loading
* **Debugging** — Added error_log() for reCAPTCHA error codes

= 1.1.0 - 29 June 2026 =
* **New Design** - Completely redesigned admin settings page. Cleaner, modern, and easier to use
* **More Secure** - Added extra security measures to protect your admin settings
* **Translation Ready** - Now supports 132 languages. Fully translated with professional human-quality translations
* **Better Compatibility** - Works perfectly with WordPress 6.9 and PHP 8.x
* **Improved Handling** - Fixed issues with special characters in URLs and reCAPTCHA verification
* **Logged-in Users** - They now skip the captcha automatically so you can browse your own site freely
* **User-Friendly** - New status indicator, live preview of your captcha messages, and quick link to get your reCAPTCHA keys
* **Full URL Support** - You can now use underscores, dots, query strings, and any other URL-safe characters when setting up protected URLs

= 1.0.0 - 16 February 2023 =
* First public release
