v2.4.1

= 2.4.1 =

• Fixed: updating two of these extensions one after the other could fail on the second with "up to date" until Check for updates was pressed again. WordPress rebuilds its update list after each update by asking wordpress.org first, and gives up on the whole list when that call is slow; the plugin now keeps its own update in the list regardless.
• Changed: a release found more than an hour ago is refreshed in the background whenever the Plugins screen is opened, so the newest release is offered rather than an intermediate one.
• New: a Check for updates bulk action on the Plugins screen, which checks every selected extension in one go, and the row that says Updating no longer shrinks on phones.

v2.4.0

2.4.0

• Tidied the HivePress panel on the Turnstile settings page. The longer notes now say the same thing in a sentence or two, and no longer stretch the full width of the screen, where on a wide monitor a single line ran to a couple of hundred characters and was genuinely hard to read.
• Nothing about the captcha itself has changed: the same forms are protected, and every verification works exactly as before.

v2.3.1

• A solved captcha is no longer wiped while you are still filling the form in. The widget was reset by any background request HivePress made, which on the listing submission form meant every photo upload and every tag suggestion, so pressing Submit could answer "please verify that you are human" to somebody who just had. Only the form that was actually submitted is reset now.
• The captcha is no longer shown when Simple Cloudflare Turnstile is not active. Its settings stay in the database when it is deactivated, so a live Cloudflare widget carried on appearing on every protected form while nothing checked the answer, and any submission was accepted. The forms are now left unprotected and visibly so, and the existing admin notice explains what to reinstall.
• Simple Cloudflare Turnstile's "Failsafe Mode" no longer holds up page loading. Its check on whether Cloudflare is reachable was run while the page was being built, and with Cloudflare slow that added five seconds to the page for every visitor. The answer is now looked up in the background.
• Deleting the plugin now also clears the update check's own leftovers and cancels its background update check.

v2.3.0

New

• Login page alignment - The Turnstile widget on the WordPress login page now lines up with the username and password fields. Cloudflare draws the standard widget at a fixed 300px, which is 30px wider than the fields WordPress gives that page, and Simple Cloudflare Turnstile nudges it a further 15px to the left there, so it hung over both sides of the fields and ran into the edge of the login box. The widget is now placed and sized to the same column as the fields, and stays fully clickable. It applies only where Simple Cloudflare Turnstile is set to protect the WordPress login, registration or password reset form, nothing else on that page is changed, and no JavaScript is added to it. Sites whose login page has been restyled to a different width can set that width with the new tfhp_login_form_width filter.

v2.2.3

Fixed

• Checking for updates no longer holds up an admin page. The check ran while WordPress was building the Plugins screen, so on a site with several of these extensions one page load made one request to GitHub after another and could sit there for many seconds, once, before behaving normally again for hours. The check now runs in the background moments later. Pressing Check for updates still asks GitHub straight away, because you are waiting for that answer.
• "View details" is back on the Plugins screen. WordPress only offers that link for a plugin that has told it about itself, and this one stayed quiet whenever there was nothing to update to, which is almost always. The details popup, its changelog and the donate link inside it were all unreachable from the Plugins screen as a result.

v2.2.2

Fixed

• Checking for updates no longer reports "Could not reach GitHub" when nothing is wrong. GitHub allows one server only a limited number of anonymous update checks each hour, and that allowance is shared by every plugin on your site and, on shared hosting, by every other site on the same server. Running out of it is ordinary, but it was reported as though your site could not reach GitHub at all. Update checks now read the release from github.com, which sets no such limit, so the message no longer appears. If the limit is ever reached by another route, the notice now says so plainly instead of blaming your connection.
• A failed update check no longer hides an update that is genuinely waiting. The last successful answer is kept until a later check succeeds, so a pending update stays on the Plugins screen instead of vanishing for an hour.

Nothing else changes, and nothing on your site was ever at risk: a failed check only meant WordPress was not offered the update.

v2.2.1

Fixed

• The plugin's own link on the Plugins screen pointed at the community forum home page rather than the plugin's source.

v2.2.0

What's new in 2.2.0

Deleting the plugin now keeps your settings. Your list of protected forms survives a delete and reinstall. It is only erased if you tick the new Delete all data when this plugin is deleted box in the HivePress section of the Turnstile settings page. WordPress shows its own warning about deleting data on the delete screen, but that warning is the same for every plugin and does not apply here unless you tick that box.

Future-proofed against a HivePress Turnstile integration. The internal captcha field class has been renamed (\HivePress\Fields\Turnstile to \HivePress\Fields\Hptu_Turnstile, field type turnstile to hptu_turnstile) so it can never clash with HivePress core or a future official extension. HivePress has said it may add its own Turnstile integration, and without this change a HivePress update could have quietly replaced this plugin's widget with a different one.

A Donate link now appears on the plugin's row on the Plugins screen and in its "View details" popup.

Update checks are anonymous. The check no longer sends your site address or WordPress version to GitHub; the request now identifies only the plugin and its version.

Corrected the author credit shown on the Plugins screen.

Upgrading

Update from your WordPress dashboard as usual. Your protected form selections are preserved; nothing needs reconfiguring.

v2.1.3

2.1.3

• Fixed the widget overflowing narrow modals on small phones. Cloudflare draws the standard widget at a fixed 300px, so inside tight popups (viewports around 350px and below) it ran past the modal edge and clipped. The widget now scales down to fit its container, stays fully interactive, and re-fits on rotation or resize. Verified at 320px, 360px and 390px. Found during the staging pass on a real-device viewport.

v2.1.2

2.1.2

• Translations now load through WordPress's own just-in-time mechanism from the plugin headers, matching HivePress core and every official extension. Translate via Loco Translate into the WordPress languages folder; the bundled template file (.pot) is regenerated with the official WordPress tooling.
• Full compatibility sweep against every captcha-capable form from all 18 HivePress extensions (14 forms), all six official themes, the Social Login extension, and the Autoptimize JS/CSS optimiser.

2.1.1

• The plugin now honours Simple Cloudflare Turnstile's Cloudflare-down failsafe: when it is enabled and Cloudflare is unreachable, protected forms submit without a challenge instead of being blocked for the whole outage. The submit gate also stands down client-side if the Turnstile script never loads, letting the server decide.
• Submitting a protected form before completing the widget now shows a clear message in the form instead of silently doing nothing.
• The SCT "failure message" option now works on HivePress forms: the message appears below the widget when Turnstile reports an error and clears on success.
• Fixed the coexistence warning wording: with HivePress reCAPTCHA keys set, every Turnstile-protected form shows both captchas regardless of the HivePress form selection.
• The manual update check now distinguishes "GitHub unreachable" from "no installable release published yet".
• Added Claim Listing, Submit Request and Submit Offer to the documented form list (auto-discovery already found them).
• Added a Settings quick link on the Plugins screen; script versions now include the file modification time so updates can never serve stale JavaScript from browser caches.
• Housekeeping: author credit links to the HivePress community profile, WordPress/PHP requirement headers corrected, uninstall also removes the cached release lookup.