v1.1.0 - Enhanced Security Suite with Rate Limiting, Turnstile, and Email Verification
What's New in 1.1.0
🛡️ Rate Limiting System
- Protects login forms against brute force attacks
- IP-based monitoring of login attempts
- Configurable maximum attempts and lockout periods
- Smart IP detection supporting various proxy configurations
🤖 Cloudflare Turnstile Integration
- Advanced bot protection using Cloudflare's latest technology
- Configurable per form type
- Easy to set up with site and secret keys
- Seamless user experience
✉️ Email Verification
- Real-time email validation using Reoon API
- Configurable verification modes
- Cache system for improved performance
- Prevents registration with invalid emails
⚙️ Configuration Options
- Maximum login attempts (default: 6)
- Lockout duration (default: 15 minutes)
- Monitoring period (default: 1 hour)
- Turnstile site and secret keys
- Email verification API key and mode
🔒 Security Enhancements
- Improved error handling with clear user feedback
- Secure session management
- Robust IP detection through multiple proxy headers
🔧 Technical Details
- New WPCLM_Rate_Limiter class for centralized rate limiting
- New WPCLM_Turnstile class for bot protection
- New WPCLM_Email_Verifier class for email validation
- Transient-based storage for attempt tracking
- Integration with existing login forms
- Enhanced error messaging system
📝 Required Configuration
After updating, please configure:
- Cloudflare Turnstile site and secret keys
- Reoon Email Verification API key
- Review and adjust security settings as needed
🐛 Known Issues
None reported