=== Visitor Login Notice ===
Contributors: mariaak
Tags: login notice, login reminder, login
Requires at least: 5.3
Tested up to: 7.1
Requires PHP: 7.0
Stable tag: 1.1.1
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Display a login notice to your website's visitors.

== Description ==

The `Visitor Login Notice` plugin displays a notice to non-logged in users reminding them to login to your website.

= Features =

* Display a sticky login notice bar (visible even when the user scrolls).
* Choose position on your website where the notice will be displayed (header / footer).
* Customize the notice title & message.
* Add custom login and/or registration URLs.
* Add a custom button to display on the notice bar, if needed.
* Show / hide the notice from login & registration pages and exclude specific URLs.
* Allow close functionality. When the user closes the notice, the plugin stores a cookie on the user's browser. If the cookie is present, the notice will not be shown again to the user.
* Trigger close event using custom CSS class.
* Customize background and button colors.


== Installation ==

1. Upload the `Visitor Login Notice` plugin into the `wp-content/plugins/` directory or install the .zip via the `Plugins` menu in your WordPress admin dashboard.
2. Activate the plugin through the `Plugins` menu in your WordPress admin dashboard.
3. That's it! You should now be able to access the plugin's options via `Visitor Login Notice` link under `Settings` on your WordPress admin dashboard.

== Frequently Asked Questions ==

There are no FAQ just yet.

== Screenshots ==

1. Example login notice using the default settings.
2. You can customize the plugin's appearance on your website through the admin settings page.

== Changelog ==

= 1.1.1 =
* Security: the front-end script now receives only the setting it uses, instead of every saved setting (excluded URLs, custom URLs).
* Tweak: updated the js-cookie library to 3.0.5.

= 1.1.0 =
* Compatibility: tested with WordPress 7.1.2 and PHP 8.3. Replaced the deprecated jQuery `.click()` shorthand and `$(document).ready()` so no jQuery Migrate warnings are logged.
* Security: all settings are sanitized on save and all output is escaped.
* Fix: settings saved by 1.0.0 no longer trigger PHP notices; missing values fall back to defaults and unchecked boxes stay unchecked.
* Fix: an empty custom login/registration URL now falls back to the WordPress default when excluding those pages.
* Fix: the close button is a real button, reachable by keyboard and screen readers, with a visible focus outline.
* Tweak: settings fields are properly labelled, and the cookie note shows the actual (filterable) cookie length.
* Tweak: text domain changed to `visitor-login-notice`.
* Dev: the localized JS object is renamed from `ajaxObject` to `vlnData`; unused AJAX URL and nonce removed.

= 1.0.0 =
* Initial release of the plugin.

== Upgrade Notice ==

= 1.1.1 =
Security fix: plugin settings are no longer exposed in the page source. Recommended for all users.

= 1.1.0 =
Security hardening: settings are now sanitized and all output escaped. Recommended for all users.
