Verifyistic 1.5.0 — First Public Release

Verifyistic 1.5.0 — first public release

Industry-agnostic age verification & age gate for WordPress. Three verification modes (Date of Birth, Yes/No, ID & Face), verification logging with CSV export, multi-connection webhooks with HMAC signatures and retry, per-IP rate limiting, and full popup customization. No third-party service required — everything runs locally. Built by WordPressistic.

What's in 1.5.0

• Full Guns2Ammo decoupling — every legacy codebase reference, theme token, and industry-specific default removed. The plugin is now fully standalone and industry-agnostic.
• Standalone Verifyistic brand styling — the popup previously depended on the old Guns2Ammo theme's CSS variables (var(--color-gunmetal), --color-brass, …) and rendered broken on any other site. All 22+ token references replaced with self-contained brand values (teal #14b8a6 / slate #0f172a). var(--token) values are still accepted in settings for host-theme integration.
• WCAG AA default contrast — yes-button text is now dark ink on teal (~6.9:1) instead of white (~2.5:1), across activation defaults, settings fallbacks, and CSS.
• Privacy fix — removed the remote Google Fonts @import from the admin stylesheet; privacy-safe system font stack instead (no admin IP disclosed to third parties).
• Complete uninstall cleanup — all 39 plugin options now removed on delete (6 were previously orphaned, including the webhook connection list); uploaded ID documents are deleted when destructive uninstall is enabled.
• Translation-ready — 187 strings wrapped in i18n functions across the popup, admin screens, and JS; languages/verifyistic.pot bundled.
• Version hygiene — header, constant, and readme stable tag all in sync at 1.5.0; dead minified stylesheet removed from the package.

Security posture

Nonce + honeypot + HMAC-signed anti-bot timing tokens, per-IP rate limiting with atomic MySQL advisory locks (HTTP 429 + Retry-After), cache-fail-open verification for page-cached sites, SSRF-guarded webhook delivery with capped exponential backoff, trusted-proxy-aware client IP resolution (Cloudflare ranges preconfigured), private ID/selfie storage outside the public uploads tree with signed admin-only download URLs, and CSV-injection-guarded export.

Install

WordPress 5.8+ and PHP 7.4+. Upload verifyistic-1.5.0.zip via Plugins → Add New → Upload Plugin, activate, then configure under Verifyistic → Settings.

Full changelog: see readme.txt in the repository.