v1.0.1

Fixes

• Stale-cookie redirect loop: half-expired cookie states (logged_in cookie valid, auth cookie dead) bounced between the login slug and wp-admin, ending in a 404/redirect loop that required manually clearing cookies. The logged-in shortcut now honors reauth=1 so wp-login.php clears the stale cookies and shows the form.
• Access logging defaults to ON for real: the settings screen showed logging enabled by default, but the recorder read the option with a default of off — nothing was logged until the option was explicitly saved. Recorder now defaults on; unchecking the setting still disables it.
• Author URI corrected to clearph.com.

v1.0.0 — Initial release

Initial release of Clear pH Hide Login.

What it does

• Hides the WordPress login URL behind a configurable slug
• Serves a real 404 on wp-login.php, wp-register.php, wp-signup, wp-activate, and /wp-admin/ for logged-out users
• Optional: disable the password-reset flow entirely
• Optional: log blocked attempts with retention pruning
• Multisite: network default + per-site override
• Self-updates from this repo via plugin-update-checker

Installation

1. Download the source zip from this release
2. Upload + activate from wp-admin → Plugins
3. Configure at Settings → Clear pH Hide Login

Compatibility

• WordPress 5.5+
• PHP 7.4+
• Built for Flywheel (no wp-config edits required)
• Compatible with the cph-hidden-login mu-plugin (different option key, won't conflict)