=== LiveFot Matches ===
Contributors: livefot
Tags: football, live scores, match lineups, standings, stats
Requires at least: 5.8
Tested up to: 6.8
Stable tag: 1.0.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A simple WordPress plugin to display live football scores, match lineups, standings, and statistics via the LiveFot API.

== Description ==
LiveFot Matches is your ultimate solution for embedding automatic, real-time football scores, match lineups, standings, statistics, and event data into any WordPress site. Powered by the LiveFot API, this plugin ensures your audience stays up-to-date with the latest fixtures and results without manual intervention.

Key highlights:
* **Automatic Updates**: Fetch fixtures from 5 days in the past to 7 days in the future at a user-specified daily time.
* **Secondary Cron Job**: Optimize performance by updating matches within a short-range window (–1 to +1 day) at configurable minute intervals.
* **Manual Fetch**: Instantly pull data for any selected date via the settings page.
* **Timezone Conversion**: Display fixtures in each visitor’s local time zone automatically.
* **Responsive Design**: Seamless display on both desktop and mobile devices.

== Installation ==
1. Upload the **livefot-matches** folder to the `/wp-content/plugins/` directory.  
2. Activate the plugin through the “Plugins” screen in WordPress.  
3. Navigate to **Settings → LiveFot Matches** to configure your API key, cron job schedules, and update intervals.  
4. Place the shortcode `[livefot_matches]` in any post or page to display live fixtures.

== Settings ==
After activation, go to **Settings → LiveFot Matches** and complete the following fields:
* **API Key**: Enter your API key to access LiveFot services.
* **API URL**: Enter your custom API base URL if different from default (default: https://api.livefootballcenter.com).

== Frequently Asked Questions ==
= How do I configure the cron jobs? =
After activation, go to **Settings → LiveFot Matches**. Set the daily and short-range cron job schedules under the “Cron Job Settings” section.

= Where can I get support? =
For questions about leagues, subscriptions, or technical assistance, email us at **info@livefootballcenter.com**.

= How do I display live matches? =
Use the shortcode `[livefot_matches]` on any page or post. Customize via the settings page to filter by league, date range, or other parameters.

== Changelog ==
= 1.0.1 =
* Fixed manual‐fetch date sanitization (`sanitize_text_field` on `$_POST['livefot_manual_date']`).  
* Escaped all dynamic outputs (e.g. lineup labels) with `esc_html()`/`esc_attr()`.  
* Added missing nonce checks to fixture and lineup search forms.  
* Converted direct `$wpdb->query` calls to `$wpdb->prepare` with placeholders.  
* General code cleanup per .org review feedback.

= 1.0.0 =
* First public release.

== Upgrade Notice ==
= 1.0.1 =
Patch release — addresses review feedback around input sanitization, output escaping, nonce handling, and prepared statements. No action required beyond updating.

= 1.0.0 =
First public release; please configure your API key and cron schedules after activating.