=== PrimePlaced - Advanced password protection ===
Contributors: dobrzepostawieni
Donate link: https://dobrzepostawieni.pl/advp
Tags: password protection, private site, restrict access, site lock, maintenance mode
Requires at least: 6.2
Requires PHP: 7.4
Tested up to: 7.0
Stable tag: 1.0.0
License: GPL-3.0-or-later
License URI: https://www.gnu.org/licenses/gpl-3.0.html

Password-protect your entire WordPress site with a customizable lock screen, session cookies, and simple admin controls.

== Description ==

**PrimePlaced - Advanced password protection** provides tools to secure your WordPress content. Lock your entire website during development, protect client presentations, or manage access to specific areas of your site.

This plugin focuses on user experience, offering clear configuration panels and logical management interfaces to handle access control efficiently.

= Free Features =
* **Global Site Lock:** Secure your entire website with a single password.
* **Customizable Login Form:** Upload your logo, change background colors, and customize text fields.
* **Cookie Management:** Control how long users stay logged in using session or duration settings.
* **Dashboard Widget:** View a quick overview of your site's protection status.
* **Performance Optimized:** Built with lightweight code execution paths.
* **Live Preview:** View form customization changes in real-time within the admin area.

= PRO Features =
The plugin supports extension packages that unlock additional premium modules depending on your subscription tier.

**BASIC Tier Modules:**
* **Time-Based Passwords:** Configure automatic activation and expiration dates for passwords.
* **Pages & Posts Protection:** Apply access control rules to individual content items instead of the full site.
* **Gutenberg Integration:** Manage password-protection states directly from the block editor sidebar.
* **User Role Bypass:** Grant automatic access to specific WordPress user roles without requiring a password.
* **Multiple Passwords:** Support for multiple concurrent passwords with unique expiration dates.
* **Form Templates:** Access pre-designed login forms or design custom branded layouts using Gutenberg blocks.
* **Strict Session Control:** Option to require re-authentication when navigating between different sections.
* **IP Whitelist:** Allow access without password from up to 2 IP addresses.
* **Event Logging:** Track recent authentication attempts with IP and user-agent diagnostic metadata.

**BUSINESS Tier Modules:**
* Everything in BASIC, plus:
* **Extended Rules:** Increase capacity for concurrent active rules and scheduled passwords.
* **Categories & WooCommerce:** Apply protection rules directly to products and product categories.
* **Advanced Templates:** Access extended pre-designed login form templates.
* **Google reCAPTCHA v2:** Integrate checkbox bot verification to secure login flows against automated scripts.
* **Activity Log Export:** Export detailed activity logs to CSV files for external audits.

**AGENCY Tier Modules:**
* Everything in BUSINESS, plus:
* **Unlimited Limits:** Remove caps on passwords, access rules, and whitelisted IP addresses.
* **Custom Taxonomies:** Apply protection rules to any public Custom Post Type or Custom Taxonomy.
* **Invisible reCAPTCHA v3:** Verify traffic silently in the background using risk scores.
* **Log Retention Control:** Configure automated database pruning and custom log retention schedules.
* **System Backup:** Generate complete JSON backup payloads of your configuration for site migration.

== Installation ==

= Using The WordPress Dashboard =
1. Navigate to 'Plugins' > 'Add New' in your WordPress admin area.
2. Search for 'PrimePlaced - Advanced password protection'.
3. Click 'Install Now' and then 'Activate'.
4. Navigate to 'Settings' > 'Advanced password protection' to configure the lock.

= Manual Installation =
1. Download the `primeplaced-advanced-password-protection.zip` archive.
2. Go to 'Plugins' > 'Add New' > 'Upload Plugin' in your dashboard.
3. Select the ZIP file and click 'Install Now'.
4. Activate the plugin through the plugins menu.

== Frequently Asked Questions ==

= Will this plugin affect site performance? =
No. The execution paths run conditionally and process access checks only when a protected resource is explicitly requested.

= Can administrators bypass the lock screen? =
Administrators can manage the plugin from the WordPress admin area. Premium modules add explicit role-based bypasses and IP whitelist configuration for frontend access.

= Is it compatible with page caching systems? =
Yes. The authentication flows use cache-busting headers and automated cache purging functions for major optimization utilities like WP Rocket and LiteSpeed Cache.

= Can I protect a specific page instead of the entire site? =
The Free version provides site-wide global locking. Premium modules add granular rules for specific posts, pages, or categories.

= Does it support multiple unique passwords? =
The Free version supports one primary password for the site-wide lock. Premium modules add multiple password entries and rule mapping.

= Does it integrate with WooCommerce? =
The Free version does not add WooCommerce-specific rules. Business and Agency modules add product and product category protection.

= Can I configure passwords to automatically expire? =
The Free version keeps the site-wide password active until you disable or change it. Premium modules add automatic start and expiration dates.

= Can I customize the design of the login form? =
Yes. The core plugin allows you to customize logos, colors, and input text fields. Advanced block-editor template capabilities are available in expansion modules.

== Screenshots ==

1. Overview Dashboard - Main control panel showing protection status and active metrics.
2. Cookie Settings - Interface to configure session lifetimes and cookie parameters.
3. Form Personalization - Design panel for customizing text fields and background styles.
4. Frontend Lock Screen - Example of the password entry form served to unauthenticated visitors.
5. Status Widget - Admin dashboard summary module.

== Privacy Policy ==

This plugin stores the following data when protection features are active:

**Cookies:**
* Functional cookies to store the temporary authentication token.
* Lifetime parameters are determined by the administrator (session or specific days).

**Activity Logs (Premium Modules Only):**
* IP addresses associated with authentication requests.
* Browser user-agent strings for device tracking.
* Timestamps of access evaluations.
* Evaluation status codes (success, error, blocked).

All local database tables are maintained entirely on your server infrastructure.

== Third-Party Services ==

This plugin includes or integrates with the following external services:

* **Freemius** - Used for optional account connection, licensing, upgrade checkout, support/account screens, and software update services. Communication with Freemius happens through administrator-initiated opt-in, account, checkout, support, or update flows. Privacy Policy: https://freemius.com/privacy/
* **Google reCAPTCHA (Premium Modules Only)** - Used only when a site administrator configures and enables a premium reCAPTCHA module for bot mitigation on password forms. Privacy Policy: https://policies.google.com/privacy

== Changelog ==

= 1.0.0 =
* Initial release.

== Upgrade Notice ==

= 1.0.0 =
Initial production release.
