=== Puzzle Gate - Login Security with Smart Puzzle CAPTCHA ===
Contributors: wpsqr
Tags: login security, puzzle, protection, anti bot
Requires at least: 6.3
Tested up to: 6.9
Requires PHP: 7.4
Stable tag: 1.0.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Stop bots in their tracks with a human-friendly puzzle CAPTCHA for WordPress logins.

== Description ==
**Puzzle Gate** is a next-generation WordPress security plugin that replaces annoying traditional CAPTCHAs with an **intelligent, interactive puzzle system**. Unlike conventional image/text CAPTCHAs that rely on external services and frustrate users, Puzzle Gate offers a fast, self-hosted solution that's both highly secure and surprisingly user-friendly.

### **Why Website Owners Choose Puzzle Gate:**

   **Blocks Automated Login Attacks** - Advanced puzzle logic stops bots before they can even attempt authentication  
   **Zero External Dependencies** - No Google services, no tracking, complete privacy compliance  
   **Lightning Fast** - Adds just 200ms to your login page load time  
   **Mobile-First Design** - Works perfectly on all devices without compromising security  
   **GDPR/Privacy Compliant** - No external API calls, no user data sharing  
   **Accessibility Focused** - Screen reader compatible with alternative input methods

### **How It Works (The Smart Way):**

1. **Interactive Puzzle Challenge** - Users arrange randomized symbols into logical order
2. **Server-Side Validation** - Each puzzle is uniquely generated and hashed for maximum security
3. **Automatic Bot Blocking** - Failed attempts trigger puzzle regeneration
4. **Seamless Login Experience** - Humans solve it in seconds, bots can't crack it

Puzzle data is generated server-side, hashed securely, and expires automatically to prevent replay attacks.

### **Features**

== Core Security ==
- Drag-and-drop puzzle CAPTCHA system
- Server-side validation with WordPress salts
- Automatic puzzle expiration (configurable)
- Brute-force attack protection
- Nonce-based replay attack prevention

== Administration & Control ==
- Simple settings panel in WordPress admin
- Adjustable puzzle difficulty (4-12 symbols)
- IP whitelisting capabilities
- Failed attempt threshold configuration

== User Experience ==
- Fully responsive design
- Mobile-optimized interface
- Keyboard navigation support
- Screen reader compatibility
- Visual feedback for interactions

== Technical Excellence ==
- 100% self-hosted solution
- No external API dependencies
- Lightweight codebase
- Regular security updates
- Compatible with most security plugins

== Admin Configuration ==
Puzzle Gate includes a settings page where administrators can:

* Enable or disable the puzzle CAPTCHA
* Set puzzle difficulty (number of symbols)
* Enable the puzzle only after X failed login attempts
* Whitelist trusted IP addresses

== Installation ==
1. Upload the `puzzle-gate` folder to the `/wp-content/plugins/` directory  
   **OR** install via the WordPress Plugins screen.
2. Activate the plugin through the *Plugins* menu.
3. Go to **Settings → Puzzle Gate** to configure options.
4. Log out and visit the login page to see the puzzle in action.

== Frequently Asked Questions ==
= Will this slow down my login page? =
No. The puzzle is lightweight and optimized to load quickly.

= Can bots solve this puzzle? =
The puzzle logic, nonce binding, expiration, and hashing make automated solving extremely difficult.

= What happens if a user fails the puzzle? =
The puzzle is regenerated and must be solved again before login is allowed.

= Does it work on mobile devices? =
Yes. The puzzle is fully responsive and automatically switches to a dropdown-based interface on mobile devices.

== Screenshots ==
1. **Puzzle Gate**
   ![Puzzle Gate](assets/screenshot-1.png)
2. **Settings**
   ![Settings](assets/screenshot-2.png)


== Changelog ==
= 1.0.1 =
* Performance optimizations on the login page
* Minor UI and accessibility improvements
* Code cleanup and stability fixes

= 1.0.0 =
* Initial release
* Puzzle #1: Order the Symbols
* Admin settings panel
* Accessibility fallback
* Secure nonce-based validation

== Documentation ==
Full documentation is available on our website:
[Puzzle Gate Documentation](https://www.sigmasqr.com/)

== Troubleshooting ==
1. Ensure the Puzzle Gate plugin is activated and your WordPress version is at least 5.2.
2. Deactivate other plugins to check for conflicts.