=== XO Security ===
Contributors: ishitaka
Tags: security, login, xmlrpc, rest, maintenance
Requires at least: 4.9
Tested up to: 6.5
Requires PHP: 5.6
Stable tag: 3.8.1
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

XO Security is a plugin to enhance login related security.

== Description ==

XO Security is a plugin to enhance login related security.
This plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.

= Functions =

* Record login log.
* Limit login attempts.
* Login Alert.
* Add Captcha to the login form and comment form.
* Change the URL of the login page.
* Disable login by mail address.
* Disable login by user name.
* Change login error message.
* Disable XML-RPC and XML-RPC Pingback.
* Disable REST API.
* Change REST API URL prefix.
* Disable author archive page.
* Remove comment author class of comments list.
* Remove the username from the oEmbed response data.
* WooCommerce login page protection.
* Anti-spam comment.
* Hide WordPress version information.
* Edit the author slug.
* Disable RSS and Atom feeds.
* Activate maintenance mode.

= WordPress multisite considerations =

If you set the login page separately for the main site and the subsite, you will not be able to use the password loss function of the subsite. We recommend that you set the login page to be common to all sites.

== Installation ==

1. Upload the `XO-Security` folder to the `/wp-content/plugins/` directory.
2. Activate the plugin through the Plugins menu in WordPress.
3. Go to "Settings" -> "XO Security" and customize behaviour as needed.

== Screenshots ==

1. Login log page.
2. Status page.
3. Login setting page.
4. Profile page.

== Frequently Asked Questions ==

= Login page is not displayed. =

Please initialize the settings.

* In wp_options table, the value of the option_name field (column) is to remove the record of "xo_security_options".
* If you have set the login page, please delete the file.

= The CAPTCHA is not displayed. =

Please install mbstring and GD module.

== Changelog ==

= 3.8.1 =

* Supported WordPress 6.5.
* Added ability to delete readme.html file.
* Tweaked wording on the admin page.
* Tweaked CSS on the admin page.

= 3.8.0 =

* Added maintenance mode.

= 3.7.1 =

* Fixed a bug with the limit on the number of login attempts when logging in with XML-RPC.
* Adhered WordPress coding standards 3.0.1.

= 3.7.0 =

* Supported WordPress 6.4.

= 3.6.4 =

* Fixed a bug where logs could not be deleted on the login log page.

= 3.6.3 =

* Added `required` attribute to CAPTCHA field in login form.
* Supported WordPress 6.3.

= 3.6.2 =

* Fixed a bug that the login type was not displayed in the login log.
* Faster admin pages.
* Added option to enable/disable login information widget.

= 3.6.1 =

* Fixed a bug that the table optimization function did not work.
* Fixed errors output issue.

= 3.6.0 =

* Added a function to optimize database table.
* Code refactoring to meet WordPress PHP Coding Standards.
* Supported WordPress 6.2.

--------

[See the previous changelogs here](https://xakuro.com/wordpress/xo-security/#changelog)