=== Shield WP Admin ===
Contributors: differenzsystem
Tags: security, admin safe, login security, hide login, admin shield
Requires at least: 5.0
Tested up to: 6.9.1
Requires PHP: 7.2
Stable tag: 1.0
License: GPL v2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Secure and harden your WordPress admin area with powerful features like custom login URLs, reCAPTCHA, brute-force protection, and more.

== Description ==

**Shield WP Admin** is a lightweight yet powerful plugin designed to enhance the security of your WordPress admin area. With an easy-to-use interface and essential protection tools, it helps safeguard your site against common threats and vulnerabilities.

**Key Features:**

- **Custom Admin Login URL** 
  Hide or customize the default `/wp-login.php` URL to prevent unauthorized login attempts.

- **Limit Login Attempts**
  Protect against brute-force attacks by limiting failed login retries.

- **Google reCAPTCHA Integration**  
  Add reCAPTCHA to the login screen to block bots and automated scripts.

- **Disable XML-RPC**  
  Prevent exploitation via XML-RPC by disabling its access entirely.

- **Disable File Editor**  
  Block access to the theme and plugin file editor in the WordPress dashboard.

- **Hide WordPress Version**  
  Conceal your WordPress version from source code to reduce exposure to targeted attacks.

- **Force HTTPS Redirection**  
  Redirect all HTTP requests to HTTPS to ensure secure access.

- **Disable Pingbacks & Trackbacks**  
  Protect your site from spam and DDoS attacks by disabling pingbacks and trackbacks.

- **IP Blacklisting**
  Block specific IP addresses directly from the admin panel to protect the site.

- **Admin Login Form Logo Change**
  You can change the logo of admin login form.

**Why Shield WP Admin?**  
Whether you're a developer or a site owner, Shield WP Admin provides a smart, flexible solution to strengthen your WordPress backend—without bloating your site or overwhelming your dashboard.

== Installation ==

1. Upload the plugin folder `shield_wp_admin` to the `/wp-content/plugins/` directory, or install it directly via the WordPress Plugins screen.
2. Activate the plugin through the **Plugins** menu in WordPress.
3. Navigate to **Settings → Shield WP Admin** to configure the available security features.

== Frequently Asked Questions ==

= How can I access the login page after changing the URL? =  
Make sure to bookmark or note your new login URL. If you forget it, you can disable the plugin via FTP or your hosting control panel.

= Will this plugin conflict with other security plugins? =  
Shield WP Admin is built to work alongside most major security plugins. However, it's best to avoid overlapping functionalities like multiple reCAPTCHA or login limiter features.

= Can I selectively enable or disable features? =  
Yes, every feature can be individually toggled from the plugin settings page.

= What is the default admin login slug when you've activated it? =  
Default admin login slug is `mysecretlogin`.

== Screenshots ==

1. Dashboard settings to manage all Shield WP Admin features.

== Changelog ==

= 1.0 =  
* Initial release of Shield WP Admin with core security features.

== External Services ==

This plugin uses Google reCAPTCHA to protect the admin login from automated brute-force attacks.

- **Service Used**: Google reCAPTCHA
- **Service Domain**: https://www.google.com/recaptcha
- **Purpose**: Used to verify that the user is human, preventing spam or Brute-force attacks on admin login protected by the plugin.
- **What Data is Sent**: When a user interacts with a reCAPTCHA-protected form, their interaction (including IP address, user agent, and possibly cookies) is sent to Google's reCAPTCHA service for validation and verification.
- **When Data is Sent**: This data is transmitted to Google when the form is loaded (due to the JS script) and again when the form is submitted.
- **Service Provider**: Google
- **Terms of Service**: https://policies.google.com/terms
- **Privacy Policy**: https://policies.google.com/privacy

== Upgrade Notice ==

= 1.0 = 
Initial stable release. Update recommended for enhanced WordPress admin protection.