=== Manzari Anti-Spam Shield ===
Contributors: manzari
Tags: anti-spam, comments, recaptcha, security, spam
Requires at least: 5.0
Tested up to: 6.8
Stable tag: 1.4.6
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html
Text Domain: manzari-anti-spam-shield

A lightweight anti-spam plugin using honeypot, timing, keyword, and reCAPTCHA v2 Checkbox protection. Blocks bots silently while keeping UX clean.

== Description ==
**Manzari Anti-Spam Shield** protects your WordPress comment forms from automated spam using multiple layers of defense:

- 🔒 Hidden honeypot field to catch bots
- ⏱️ Submission timing detection to block fast spam bots
- 🧠 Keyword blocking for suspicious phrases
- ✅ Optional Google reCAPTCHA v2 Checkbox
- 📊 Dashboard widget showing total spam blocked

Lightweight, fast, and privacy-friendly — no unnecessary external calls (unless you enable reCAPTCHA).  
Built for performance, simplicity, and full WordPress.org compliance.

== External Services ==
This plugin uses Google reCAPTCHA v2 to help protect comment forms from automated spam.

When reCAPTCHA is enabled, the plugin loads the Google reCAPTCHA script from:
https://www.google.com/recaptcha/api.js

When a comment form is submitted, the plugin sends the following data to Google for verification:
• The reCAPTCHA response token  
• The user’s IP address  
• Your site’s secret key  

This verification request is sent to:
https://www.google.com/recaptcha/api/siteverify

Google reCAPTCHA is provided by Google LLC.  
Terms of Service: https://policies.google.com/terms  
Privacy Policy: https://policies.google.com/privacy

== Installation ==
1. Upload the `manzari-anti-spam-shield` folder to `/wp-content/plugins/`.
2. Activate the plugin via **Plugins → Installed Plugins**.
3. Go to **Settings → Anti-Spam Shield** to configure reCAPTCHA keys and keyword blocking.

== Frequently Asked Questions ==

= Does this affect real users? =
No. Genuine visitors won’t see or interact with the hidden honeypot or timing fields. reCAPTCHA is optional.

= Does it work with caching or optimization plugins? =
Yes. It runs before WordPress processes a comment submission, so caching plugins won’t interfere.

= Does it work with custom themes or comment forms? =
Yes. As long as your theme uses `comment_form()`, the plugin automatically integrates.

= Is it translation-ready? =
Yes. The plugin includes a `/languages/` directory and supports localization via translate.wordpress.org.

== Screenshots ==
1. Settings page under **Settings → Anti-Spam Shield**
2. Dashboard widget showing total spam attempts blocked

== Changelog ==
= 1.4.6 =
* Updated readme with External Services disclosure.
* Updated contributors list.
* Prepared for WordPress.org resubmission.

= 1.4.5 =
* Added translators comment for placeholder-based strings.
* Escaped dynamic attributes and output in admin settings.
* Added empty `/languages/` folder to remove domain path warning.
* Final compliance cleanup and preparation for submission.

= 1.4.4 =
* Fixed escaping and translator comment warnings from Plugin Check.
* Added `/languages/` folder for WordPress.org compatibility.
* Fully validated against WordPress Plugin Guidelines.

= 1.4.3 =
* Improved sanitization and escaping for admin fields.
* Code refactoring for clarity and consistency.

= 1.4.2 =
* Full WordPress.org compliance and enhanced validation.
* Better reCAPTCHA handling and improved UX.

= 1.4.1 =
* Added translation text domain.
* Improved sanitization and admin UI.
* Refined plugin headers for repository compliance.

= 1.4 =
* Initial public release.

== Upgrade Notice ==
= 1.4.6 =
This update includes compliance fixes requested during the WordPress.org review process.