2.1.0

Renamed to Zero Trust Login for Cloudflare

This release prepares the plugin for the WordPress.org plugin directory, whose trademark rule does not allow a plugin name to begin with "Cloudflare". Existing installs update in place: the main file keeps its name, settings are untouched, and the updater renames the package to whatever folder your site already uses.

The text domain is now zero-trust-login-for-cloudflare. If you ship custom translations, rename the .mo files accordingly.

Changed

• Every string with a placeholder carries a translators comment; two strings now use numbered placeholders.
• Token and userinfo failures are recorded through the plugin's own logger, so they appear in the log viewer. The PHP error log is only written when WP_DEBUG is on.
• load_plugin_textdomain() is no longer called; WordPress loads translations itself.

Fixed

• All output is escaped for its context and all request input is unslashed and sanitized, as the WordPress coding standards require. Plugin Check reports no findings on the WordPress.org package.
• Log queries always go through $wpdb->prepare().
• Export filenames use gmdate().

Added

• readme.txt in the WordPress.org format, including the external-services disclosure.
• .dev/bin/build-release --wporg builds the WordPress.org package: this release minus the GitHub update checker.

Install

Upload zero-trust-login-for-cloudflare-2.1.0.zip under Plugins → Add New → Upload Plugin, or let the in-plugin updater pick it up. This GitHub package checks GitHub for updates; the WordPress.org package, once listed, updates through WordPress.org.

Full changelog: CHANGELOG.md