=== Secure My WP Site - Login ===
Contributors: securemywpsite
Tags: login, registration, user management, profile, security
Requires at least: 5.0
Tested up to: 6.7
Stable tag: 1.2.1
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A secure and user-friendly login and registration system with email verification, profile management, and enhanced security features.

== Description ==

Secure My WP Site - Login enhances your WordPress site's user management by providing secure authentication, streamlined registration processes, and mobile responsive forms. It automatically creates all necessary pages and offers ready-to-use shortcodes for seamless integration with enhanced security features.

= Core Features =
* Email-based login system
* User registration (requires WordPress registration enabled)
* Registration with optional email verification
* Secure password reset with encrypted links
* User profile management
* Account deletion option (admin-controllable)
* Custom login redirects 
* Custom logout link for WordPress menus
* Customizer integration for menu logout links
* Responsive and theme-compatible forms

= Security Features =
* Email verification for new accounts
* Nonce verification on all forms
* Input sanitization
* Protected admin roles
* Secure password reset system

= Admin Tools =
* Unconfirmed users management panel
* Email verification control
* Account deletion settings
* Custom redirect settings
* User action notifications
* Customizer menu integration

= Theme Compatibility =
* Works with any WordPress theme
* Mobile-responsive forms
* Standard CSS classes for easy styling

= Included Pages & Forms =
The plugin automatically creates all necessary pages with pre-configured forms and corresponding shortcodes:

1. Login Page - `[smwps_login_form]`
2. Registration Page - `[smwps_register_form]`
3. Profile Page - `[smwps_profile_form]`
4. Lost Password Page - `[smwps_lost_password_form]`
5. Reset Password Page - `[smwps_reset_password_form]`
6. Email Confirmation Page - `[smwps_confirm_email_form]`
7. Delete Account Page - `[smwps_delete_account_form]`
8. Delete Account Success Page - `[smwps_delete_account_successful]`
9. Logout Success Page - `[smwps_successful_logout]`

== Installation ==

1. Upload the plugin files to `/wp-content/plugins/secure-my-wp-site-login` directory
2. Activate the plugin through the 'Plugins' screen in WordPress
3. Use the Settings->Secure My WP Site->Login screen to configure the plugin
4. Place shortcodes in your pages or use the automatically created pages
5. Add logout links to menus through Appearance > Customize > Logout Link

== Frequently Asked Questions ==

= Why can't users register on my site? =
Make sure you have enabled user registration in WordPress. Go to Settings -> General and check "Anyone can register" option to allow new user registrations.

= Can I disable user registration? =
Yes, you can control user registration through WordPress settings. Go to Settings -> General and uncheck "Anyone can register" option to disable new user registrations.

= Where can I find my login and registration pages? =
The plugin automatically creates all necessary pages during activation. You can find them in your Pages section in WordPress admin. You can also use the shortcodes on any existing page.

= Can I customize the redirect URL after login? =
Yes, you can set a custom redirect URL in the plugin settings.

= Can I disable account deletion? =
Yes, administrators can disable the account deletion feature in the plugin settings.

= What happens when users delete their account? =
When a user deletes their account, both they and the admin receive email notifications. All user data is permanently removed from the database.

= Can I add a logout link to my menu? =
Yes, you can add a logout link to any registered menu using the WordPress Customizer under the "Logout Link" section.

= How can I add a logout link using the Customizer? =
1. Go to Appearance > Customize in your WordPress admin
2. Look for the "Logout Link" section
3. Select which menu should display the logout link
4. Save your changes

= Is email verification required for new users? =
Email verification can be enabled or disabled in the plugin settings. When enabled, new users must verify their email before they can log in.

= What happens if email verification fails? =
Users can request a new verification email from the login page if their verification link expires or fails.

= How does the password reset system work? =
Users can request a password reset link which is sent to their email. The link is secure, encrypted, and expires after use.

= Can I manage users who haven't confirmed their email? =
Yes, there's an admin panel specifically for managing unconfirmed users where you can view and clean up unconfirmed accounts.

= Can I customize the form styles? =
Yes, the forms use standard CSS classes and can be styled using your theme's stylesheet.

= Do you provide support for custom styling? =
While we don't provide custom styling, all forms use standard CSS classes that can be styled through your theme's stylesheet.

= Are administrator accounts protected? =
Yes, administrator accounts cannot be deleted through the frontend account deletion feature for security reasons.

= Will this work with my existing users? =
Yes, the plugin works seamlessly with your existing WordPress users and doesn't affect their current login status.

= Does this replace the default WordPress login? =
No, it creates additional login pages while keeping the default WordPress login system intact for admin access.

== Screenshots ==

1. Admin Settings Panel
2. Unconfirmed Users Panel
3. Logout Link Menu Settings

== Changelog ==

= 1.2.1 =
* Added: Support for Secure My WP Site - Profile Photos addon
* Added: Extension hooks for profile form customization
* Improved: Profile form extensibility
* Improved: Profile update message handling

= 1.2.0 =
* Added: Customizer integration for adding logout links to menus
* Added: New Customizer section for easy logout link placement
* Added: Ability to add logout links to any registered menu
* Improved: Menu management with customizer support

= 1.1.1 =
* Fixed: Headers already sent warning in profile and reset password pages
* Fixed: Account deletion functionality in non-admin context
* Fixed: Duplicate password reset confirmation emails
* Fixed: Added proper nonce verification for password reset links
* Improved: Error handling for invalid password reset links

= 1.1.0 =
* Improved compatibility with page builders. Template override is no longer needed.

= 1.0.0 =
* Initial release

== Upgrade Notice ==

= 1.2.1 =
This update adds support for the Profile Photos addon and improves profile form extensibility. Update recommended if you plan to use profile photo features.

= 1.2.0 =
This update adds Customizer support for easily managing logout links in your menus. Update recommended for improved menu management.

= 1.1.1 =
This update includes important bug fixes for account management and security improvements. Update recommended.

= 1.1.0 =
This update improves compatibility with page builders. No need to override templates manually anymore.

= 1.0.0 =
Initial release of Secure My WP Site - Login plugin.

== Additional Notes ==
For documentation on implementation and customization, visit our [website](https://securemywpsite.com/)