=== Secure360 ===
Contributors: diggitysolutions
Donate link: https://diggity.us/secure360
Tags: security, monitor, url-migration, go-live, database-monitor
Requires at least: 6.2
Tested up to: 7.0
Stable tag: 1.0.2
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Universal security monitor, DoS detector, and robust URL migration engine for WordPress site management and safety.

== Description ==

**Secure360** is a professional-grade security and utility suite designed for WordPress administrators who demand high visibility and control. 

This plugin combines real-time system monitoring with a powerful "Go Live" URL migration engine, ensuring your site remains secure while making complex database operations simple and safe.

== External Services ==

This plugin can optionally connect to external services to provide security diagnostics, update metadata, and optional off-site monitoring.

1. DCyber Intelligence Cloud
* Service URL: https://dcyber.diggity.us/api/v1/log
* Purpose: Provides tamper-proof off-site security audit logging and real-time alert dispatching (SMS/Slack/Email). Off-site logging ensures security logs remain intact even if the local WordPress database is compromised.
* Trigger / Usage: This service is strictly OPT-IN and DISABLED BY DEFAULT. Data is transmitted only when the site administrator explicitly enables "Cloud Sync" in the plugin settings. When Cloud Sync is enabled, Diggity monitoring may also request a status check from this site via ?action=dcyber_monitor_api using the site's stored API key.
* Data Transmitted (outbound push): Event type, timestamp, origin IP address, affected WordPress user ID, and target site URL.
* Data Returned (inbound status poll, Cloud Sync on + valid API key only): Site status, site URL, WordPress version, and local security log count.
* Terms of Service: https://diggity.us/terms-of-service
* Privacy Policy: https://diggity.us/privacy-policy

2. WordPress.org Plugin API
* Service URL: https://api.wordpress.org
* Purpose: Retrieves metadata and update status for installed plugins to detect security issues, compatibility warnings, and abandoned plugins.
* Trigger / Usage: Strictly OPT-IN and DISABLED BY DEFAULT. Triggered during scheduled daily inventory scans, or when a manual plugin scan is requested by the administrator, only when "Remote API Fetches" is enabled in settings.
* Data Transmitted: Plugin slugs and versions.
* Terms of Service / Privacy: https://wordpress.org/about/privacy/


### Key Features:
* **Go Live Engine**: Safely migrate your site URLs across the entire database. Our recursive search-and-replace algorithm is **serialized-data safe**, preventing PHP object corruption during migrations.
* **Security Monitoring**: Track failed logins, file uploads, sensitive file access, and suspicious activity in real-time.
* **DoS Detection**: Intelligent monitoring of external requests and resource usage to identify potential denial-of-service attempts.
* **Database Snapshot History**: Keep track of every URL migration with a detailed history log and one-click "Undo" capabilities.
* **Batch Processing**: Advanced multi-step wizard for migrations that prevents server timeouts on large databases through intelligent batching.

== Installation ==

1. Upload the `secure360` folder to the `/wp-content/plugins/` directory.
2. Activate the plugin through the 'Plugins' menu in WordPress.
3. Navigate to 'Secure360' in your admin sidebar to view the dashboard.
4. Go to 'Update URLs' to start a site migration or search-and-replace operation.

== Frequently Asked Questions ==

= Does the URL migration handle serialized data? =
Yes! Unlike simple SQL REPLACE queries, Secure360 uses a recursive PHP algorithm that unserializes data, replaces the string, and reserializes it with updated string lengths. This is critical for theme options and widget data.

= Can I undo a migration? =
Yes. Every "Go Live" operation is logged in the history. You can click "Undo" to automatically swap the URLs back and restore the previous state.

= What security logs are tracked? =
We track Failed Logins, File Uploads, Theme/Plugin changes, Spam attempts, and Sensitive File Access (like .htaccess or wp-config.php).

== Screenshots ==

1. The main dashboard showing real-time security metrics and system status.
2. The Go Live engine: Enter your old and new URLs in a sleek, modern interface.
3. Table Selection: Choose specific tables or scan the entire database.
4. Migration Progress: Real-time progress bar for batch processing.

== Changelog ==

= 1.0.2 =
* Packaging fix for WordPress.org upload: development files are no longer included in the distribution zip.

= 1.0.1 =
* WordPress.org compliance hardening: packaging exclusions, consent notices, and security endpoint cleanup.
* Replaced runtime Tailwind JS with a purged static CSS build; self-hosted admin fonts.

= 1.0.0 =
* Initial release.
* Integrated "Go Live" URL Migration Engine.
* Real-time security monitoring dashboard.
* Serialized data safety for search-and-replace.
* Localized all 3rd-party JS assets for repository compliance.

== Upgrade Notice ==

= 1.0.2 =
Use this build for WordPress.org submission. Development tooling is excluded from the zip.

= 1.0.1 =
Compliance and security hardening update. Recommended for all sites.

= 1.0.0 =
Initial stable release. Update to this version to secure your site and manage URL migrations.
