=== Hide My Website - Password Protect, Block AI & Hide Admin Login ===
Contributors: pranavmtn
Tags: hide my site, password protection, hide my site,hide,restrict,protect,password,ppwp
Requires at least: 5.4
Requires PHP: 7.3
Tested up to: 6.9
Stable tag: 1.6.3
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Hides your website behind a password prompt and manages various security features.
== Description ==

Hide My Website is a powerful security plugin that allows you to protect your entire WordPress site or specific pages behind a password prompt. It offers various security features to enhance your website's protection against unauthorized access.

Turn on protection in just 3 seconds!!

[Live Demo](https://tastewp.com/plugins/hide-my-website/)

Key Features:
* 🔐 Password protect the entire site or specific pages
* 🧩 Multiple login templates
* 🤖 Block bots by modifying robots.txt
* 🚫 Search engine blocking
* 🧾 IP whitelisting
* 📡 Prevent feeds & XML-RPC
* 📄 Restrict specific pages
* 🗂️ Robots.txt customization
* ✉️ Disable all outgoing emails with one toggle
* 🛑 Admin Bar badge: "Emails disabled"
* 🔗 Hide Admin Login with a custom login URL
* 🤖 Block AI Crawlers (GPTBot, ClaudeBot, CCBot) with robots.txt rules and HTTP headers (new)
* 📝 Post Exclusions: Exclude specific posts from password protection

Coming soon:
* 🛡️ Brute-force Protection & Spam IP Block
* ⏱️ Timed access control
* 👥 User role-based access
* 🎨 Customizable login page

== Installation ==

1. Upload the `hide-my-website` folder to the `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Go to the 'Hide My Website' settings page to configure the plugin or find the settings link below plugin name in the plugins page.

== Frequently Asked Questions ==

= Can I protect only certain pages of my website? =

Yes, you can choose to protect your entire website or select specific pages to hide behind the password prompt.

= Is it possible to allow access to certain IP addresses without requiring a password? =

The plugin includes an IP whitelisting feature that allows you to specify IP addresses that can access the site without entering a password.

= Is there any option to choose multiple login templates =

Yes, the plugin provides multiple login templates

== Screenshots ==

1. Main settings page


== Changelog ==

= 1.6.3 = Major
* ✨ New: Post Exclusions feature - exclude specific posts from password protection
* 🔍 Added post search and some tweaks in selection UI in settings for easier management
* 🔧 Improved IP detection and whitelisting logic for better reliability
* 🐛 Bug Fix: Resolved issues where IP whitelisting wouldn't bypass protection in certain configurations
* ⚡ Performance: Optimized exclusion checks for faster page loads
* ✅ Compatibility: Tested with WordPress 6.9

= 1.6.2 = Minor
* ✨ New: Block AI Crawlers feature - prevent GPTBot, ClaudeBot, CCBot, and other AI services from crawling your site
* 🤖 AI blocking includes robots.txt rules and X-Robots-Tag HTTP headers
* 🔧 New: Automatic cache clearing when plugin settings are updated
* 🐛 Bug Fix: Fixed redirect loop when password is changed in another window/private browsing session
* 🔒 Improved: Enhanced cookie validation to prevent authentication bypass
* ⚡ Performance: Optimized redirect handling for better performance

= 1.6.1 = Minor
* Compatibility with WordPress 6.8.3
* Minor bug fixes

= 1.6.0 = Major
* Added Hide Admin Login feature with custom login URL
* Improved security with enhanced bot blocking
* UI improvements across all settings pages

= 1.5.5 = Minor
* ✉️ New: Disable Mail tab to short-circuit all outgoing emails site-wide
* 🛑 New: Red "Emails disabled" badge in the top WordPress Admin Bar when mail is off
* 🔗 UX: Custom Login URL builder now includes a Copy URL button
* 🎨 UI: Dismissible "More Security Features" banner with a calm blue gradient
* 🧰 Polish: Smaller toggles and modernized inputs across Settings

= 1.5.4 = Minor
* UI: Hide Save Changes button on FAQ tab (no settings there)
* Caching: Fixed double password submit with page caches (no-cache headers, Vary: Cookie, cache-busting redirect)
* URL: Added temporary lock indicator (?protected) when form is shown; auto-cleaned after unlock
* Default: Settings UI now defaults to WordPress Login Template to match runtime default
* Admin: Auto-clear caches after saving settings and show a single success notice
* Compatibility: Tested with latest WordPress

=1.5.3 = Minor
*Bug fix - IP Detector enhanced.
*Compatibility with WordPress 6.8.2

=1.5.2 = Minor
*Bug fix - FAQ was unclickable
*Compatibility with WordPress 6.8.1

=1.5.1 = Minor
*Bug fix - white screen on pages

=1.5 = Major
*Change of Layout and easy UI
*New features
*More login templates
*Compatibility with WordPress 6.7.2


= 1.4 =
*Enabled page exclusions feature
*Some UI improvements
*Compatibility with WordPress 6.7.1

= 1.3 =
* IP Whitelisting, Block bots by modifying Robots.txt,minor improvements.

= 1.2 =
* Minor Improvements.

= 1.1 =
* Fatal Error on activation for some users - Fixed

= 1.0 =
* Initial release

== Upgrade Notice ==

Good Luck for protecting your WordPress site!