=== BasisLogin ===
Contributors: roehler
Tags: login, custom login, branding, security, customization
Requires at least: 5.8
Requires PHP: 7.4
Tested up to: 6.8
Stable tag: 0.0.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Customize and secure the WordPress login page: logo, colors, typography, presets, login limits, CAPTCHA, export/import.

== Description ==
BasisLogin helps site owners customize and secure the default WordPress login page without touching code. It focuses on clarity, accessibility, and performance while following WordPress coding standards.

Features include:

- Design customization
  - Custom logo (URL, width/height with auto sizing)
  - Colors for background, buttons, links, labels
  - Typography controls (font size, weights)
  - Presets (WordPress Classic, Minimal, Dark)
  - Live-friendly autosave and per-group reset
- Security options
  - Limit login attempts with lockout durations
  - IP/user allowlist and blocklist management
  - CAPTCHA integration support (reCAPTCHA and similar)
- Behavior and admin tools
  - Optional redirects after login/logout

  - JSON export/import of all settings

Compatibility and standards:

- Works with modern WordPress (tested up to the versions listed above)
- Internationalization-ready
- Uses nonces and sanitization for all form and AJAX requests
- GPLv2 or later

Project homepage: https://basislogin.com
Maintained by: https://roehler.nrw

== Installation ==

= From your WordPress dashboard =
1. Navigate to Plugins → Add New.
2. Search for “BasisLogin”.
3. Install and activate.
4. Go to Settings → BasisLogin to configure.

= Manual installation =
1. Upload the `basislogin` folder to `/wp-content/plugins/` using FTP or your file manager.
2. Activate the plugin from Plugins in WordPress.
3. Go to Settings → BasisLogin.

= Minimum requirements =
- WordPress 5.8 or higher
- PHP 7.4 or higher

== Frequently Asked Questions ==

= Does BasisLogin change the wp-login.php URL? =
No. It customizes the appearance and adds controls around the default WordPress login experience without changing the login URL.

= How does autosave work? =
Changes to fields on the settings page are saved automatically in the background (debounced). You can still use the Save button; autosave provides convenience and reduces data loss.

= What do the design presets do? =
Presets apply a set of color and typography defaults (e.g., WordPress Classic, Minimal, Dark). You can tweak any value afterward.

= Can I reset only part of my settings? =
Yes. Each settings group offers a “Reset group” button to restore its values to sensible defaults.

= Is there an export/import feature? =
Yes. In the Advanced section you can export all settings as JSON and import them on another site. Imported values are sanitized and merged with your current settings.

= Does it work on multisite? =
Yes. Network Admins can activate the plugin network‑wide or per site. Settings are stored per site.

= Which CAPTCHA is supported? =
The plugin provides a CAPTCHA integration layer (e.g., Google reCAPTCHA). Availability depends on your configuration in the CAPTCHA tab.

= Will this slow down my site? =
The plugin only affects the login screen and loads assets conditionally in the admin to avoid impacting frontend performance.


== External Services ==
The plugin can optionally load external CAPTCHA libraries on the login page when you enable them in Settings → BasisLogin → CAPTCHA.

- Google reCAPTCHA v2
  - Service: https://www.google.com/recaptcha/
  - Script loaded: https://www.google.com/recaptcha/api.js
  - Data: Your site key is embedded to render the widget; user interactions are processed by Google to determine validity.
  - Purpose: Prevent automated login attempts.
  - Terms / Privacy: https://policies.google.com/terms, https://policies.google.com/privacy

- Cloudflare Turnstile
  - Service: https://www.cloudflare.com/products/turnstile/
  - Script loaded: https://challenges.cloudflare.com/turnstile/v0/api.js
  - Data: Your site key is embedded to render the widget; user interactions are processed by Cloudflare to determine validity.
  - Purpose: Prevent automated login attempts.
  - Terms / Privacy: https://www.cloudflare.com/website-terms/, https://www.cloudflare.com/privacypolicy/

Notes:
- No external requests are made unless you explicitly enable a CAPTCHA provider and set a site key.
- These scripts load only on the wp-login.php screen, not on your site frontend.

== Screenshots ==
1. Design tab with logo, colors, and presets
2. Typography controls
3. Security: limit login attempts with allowlist/blocklist
4. CAPTCHA settings
5. Behavior options (redirects)
6. Advanced tab with Export/Import

== Changelog ==
= 0.0.1 =
- Initial public release
- Custom logo, colors, links, labels
- Typography controls
- Presets (Classic, Minimal, Dark)
- Autosave and per-group reset
- Limit login attempts; allowlist/blocklist tools
- CAPTCHA integration support

- JSON export/import of settings