=== Human Card Check ===
Contributors: mapage
Tags: captcha, anti-spam, anti-bot, registration, ultimate-member, woocommerce, comments, login
Requires at least: 6.0
Tested up to: 6.8
Stable tag: 0.4.0
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Human-friendly card challenge for WordPress registration, WooCommerce, comments, login, lost password and Ultimate Member.

== Description ==

Human Card Check replaces a traditional captcha with a lightweight card challenge.

Users see three cards and answer a simple visual question such as:

* Where is the king?
* Which card is in the center?
* Do you see the ace?
* How many face cards do you see?
* Which card is the highest?

The plugin is designed to stay simple for humans while making scripted form abuse less predictable.

Features:

* Human-friendly card challenge
* No external captcha provider
* No third-party challenge provider
* Works with native WordPress registration
* Supports WooCommerce registration
* Supports WordPress comments
* Supports WordPress login
* Supports WordPress lost password
* Includes an Ultimate Member registration integration
* Rotating questions and shuffled answers
* Admin setting to choose French, English, Italian or Spanish
* Optional GitHub-based update flow while the plugin is distributed outside WordPress.org
* Free plugin foundation for a token-activated Pro addon

== Installation ==

1. Upload the plugin files to the `/wp-content/plugins/human-card-check` directory, or install the plugin through the WordPress plugins screen.
2. Activate the plugin through the `Plugins` screen in WordPress.
3. Test it on your native WordPress registration, WooCommerce registration, comments, login, lost password or Ultimate Member forms.
4. Optional: create a test page with the shortcode `[human_card_check_demo]`.

== Frequently Asked Questions ==

= Does it use Google reCAPTCHA or another external service? =

No. The plugin does not use an external captcha provider.

= Does it call GitHub? =

Only for plugin update checks while the plugin is installed from GitHub. The verification challenge itself does not depend on any external service.

= Which forms are supported? =

Version 0.4.0 supports native WordPress registration, WooCommerce registration, WordPress comments, WordPress login, WordPress lost password and Ultimate Member registration.

= Can I choose the challenge language? =

Yes. You can force the challenge language in `Settings > Human Card Check`, or leave it on automatic mode.

= Is there a Pro version? =

Yes. The free plugin now includes a Pro token field in `Settings > Human Card Check`.
The Pro addon is intended for advanced trust scoring, email/domain analysis, risk logs and configurable registration decisions.

= Is this a full anti-spam suite? =

No. This plugin focuses on a human verification challenge for registration flows.

== Changelog ==

= 0.4.0 =
* Added a setting to protect the native WordPress admin login screen.
* Fixed challenge assets loading on wp-login so the cards display correctly on the admin login page.

= 0.3.9 =
* Added a free-plugin setting to keep AJAX comment protection enabled by default while allowing admins to disable it if needed.

= 0.3.8 =
* Enforced comment challenge validation for AJAX comment submissions too.

= 0.3.7 =
* Fixed plugin version metadata so WordPress updates correctly detect the installed version.

= 0.3.4 =
* Added WooCommerce registration support.
* Added WordPress comments support.
* Added WordPress login support.
* Added WordPress lost password support.

= 0.3.1 =
* Added a decision filter so Human Card Check Pro can block or review registrations.
* Kept the free/pro token architecture introduced in 0.3.0.

= 0.3.0 =
* Added the free/pro architecture base.
* Added a Pro token field in the admin settings.
* Added internal hooks for a future Trust Score addon.

= 0.2.2 =
* GitHub updater now prefers packaged release ZIP files.
* Keeps the plugin folder name stable during future manual installs and updates.

= 0.2.1 =
* Added a language setting in the admin.
* Added built-in French, English, Italian and Spanish challenge texts.
* Kept GitHub-based update support for self-hosted installs.

= 0.2.0 =
* Added multiple question types.
* Shuffled answer order.
* Improved packaging for public release.
* Added WordPress.org style readme.

= 0.1.0 =
* Initial private MVP release.
