GM OTP v3.18.2

Maintenance + fixes release.

Fixes since 3.16.0

• Post-login redirect on the dialog flow now mirrors WordPress core: applies the login_redirect filter (so LoginWP / Peter's Login Redirect and QL Custom Registration/Redirector decide the destination) plus core's multisite/capability fallbacks - instead of always landing on wp-admin.
• Encoding: fixed garbled em-dashes/ellipses in the admin UI (a slip introduced when the plugin was split into includes in 3.15.0).
• Lockout-risk text rewritten as short, clear bullets.
• Opt-in logging: an "Enable logging" checkbox in the Log section (off by default). When off, nothing is written and View/Clear Log are disabled. Fixed the log form posting to the old options-general.php URL so the setting now saves and persists.
• Docs (dox/, README, CHANGELOG) and tests updated; added redirect tests.

Install: download gm-otp.3.18.2.zip, then WordPress -> Plugins -> Add New -> Upload Plugin.

GM OTP v3.16.0

Internal-structure release.

What changed since 3.12.1

• Split the single plugin file into includes/core.php, includes/admin.php, includes/login.php.
• Automatic transport fallback: normal logins use a dedicated code dialog page; AJAX logins (Wordfence reCAPTCHA) keep the inline field. XML-RPC/REST skipped.
• Wordfence two-phase grace token; captcha (wfls_captcha_verify) bypass on valid credentials.
• Dialog page CSS moved to assets/gm-otp-dialog.css.
• Added tests/ (stub harness) and dox/ (ARCHITECTURE, HISTORY, CLAUDE).
• Admin: single top-level menu, Plugins-list Settings link, Enter-to-submit, dual confirmation gate before enabling, Clear-log buttons.

Verified: 12/12 logic tests + dialog-bounce test pass.

Install: download gm-otp.3.16.0.zip, then WordPress -> Plugins -> Add New -> Upload Plugin.

GM OTP v3.12.1

Email-based one-time-password (OTP) for WordPress login.

After a correct username/password, GM OTP emails a 6-digit code and requires it as a third field on the same login form before login completes.

Highlights in 3.12.1

• Three activation checkboxes (Enable / Email delivery confirmed / Lockout risk acknowledged) laid out in one row.
• Save button stays disabled until both confirmation boxes are checked (timing fix so the gate actually applies).
• Top-level admin menu, "Settings" link on the Plugins list, Enter-to-submit in the code field.
• Wordfence Login Security (reCAPTCHA/AJAX) compatibility, incl. captcha bypass on valid credentials and a single-use grace token for its two-phase login.
• Role/user exemptions, custom login logo, lockout protection, resend cooldown, built-in log viewer.

Install: download gm-otp.3.12.1.zip below, then WordPress ? Plugins ? Add New ? Upload Plugin.