=== TINXDK Captcha Pro ===
Contributors: tinxdk
Tags: captcha, altcha, spam, security, invisible captcha
Requires at least: 6.3
Tested up to: 7.1
Requires PHP: 8.2.35
Requires Plugins: tinxdk-captcha
Stable tag: 2.0.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Pro extension of TINXDK Captcha Lite: invisible mode, "Under Attack" mode, event log with CSV export and statistics, IP allowlist and blocklist and a weekly summary e-mail.

== Description ==

TINXDK Captcha Pro extends the free plugin TINXDK Captcha Lite (required). It is distributed from https://tinxdkcloud.dk/wordpress-plugins/tinxdk-captcha/ and needs a licence key.

* **Invisible mode**: no checkbox. The proof of work runs when the form is submitted; only a small floating bubble shows while it works.
* **"Under Attack" mode**: much harder challenges for every visitor. Switch it on by hand, or let it switch on by itself when the failed checks of the last hour reach a threshold you choose.
* **Event log**: every check (time, form, outcome, IP address) in its own database table. IP addresses are anonymised by default (IPv4 /24, IPv6 /48). Retention 30 or 90 days with a daily clean-up. Filter by form, outcome and date, export to CSV, and see a chart of the checks per day.
* **IP allowlist and blocklist** with CIDR ranges (IPv4 and IPv6). Allowlisted addresses skip the captcha, blocklisted addresses are always refused, even with a valid proof. The blocklist wins when an address is on both.
* **Weekly summary e-mail** to the administrator (or another recipient): HTML in TINXDK styling with a plain-text alternative, checks per form and the top failing forms.
* Automatic plugin updates through the TINXDK licence server.

The free plugin keeps working when Pro is deactivated or the licence is not valid: the captcha on all forms never depends on the licence. Pro settings stay visible but disabled without a licence; the stored values are kept and apply again when a licence is activated.

Settings: Settings > TINXDK Captcha Lite (the Pro sections are added to the free plugin's page). Log, statistics and licence: Settings > TINXDK Captcha Pro. Enter the key (TINX-XXXX-XXXX-XXXX-XXXX) on the License tab and click Activate. Without contact to the licence server the licence keeps working for 7 days.

== Installation ==

1. Install and activate the free plugin TINXDK Captcha Lite.
2. Upload this plugin to `/wp-content/plugins/` (or install the zip) and activate it.
3. Enter the licence key under Settings > TINXDK Captcha Pro > License.

== Frequently Asked Questions ==

= What happens without the free plugin? =

Pro shows an admin notice and does nothing until TINXDK Captcha Lite 2.0.0 or newer is active.

= Does the invisible mode work with every form? =

It changes the attributes of the ALTCHA widget that the free plugin renders, so it applies to every protected form. The widget solves the challenge when the visitor submits the form. Test your own forms after switching it on.

= Which IP address is used? =

The one the free plugin uses (REMOTE_ADDR). Behind a reverse proxy, supply the real address with the free plugin's filter `tinxdk_captcha_client_ip`, otherwise all visitors look alike to the lists and the log.

= Is the log GDPR friendly? =

IP addresses are anonymised by default and the log is deleted after 30 or 90 days. You can store full addresses if you have a legitimate reason; the choice is on the settings page.

= What happens on uninstall? =

Deleting Pro removes the event table, the licence data, the Pro settings and the scheduled events. The free plugin's settings, the ALTCHA secret and its counters are removed only when the free plugin is not installed either.

== External services ==

This plugin contacts the TINXDK licence server at https://licens.tinxdkcloud.dk (operated by TINXDK ApS) to verify the licence and to offer automatic updates.

* When: when you activate or deactivate the licence, twice a day (WP-Cron) to validate it, when WordPress checks for plugin updates (cached 12 hours), when you open "View details" of the plugin in the plugin list and when the plugin is uninstalled (frees the site slot).
* What is sent: the licence key, the site URL, the plugin slug and version, the WordPress and PHP version. Nothing else.
* Terms and privacy policy: https://tinxdkcloud.dk/handelsbetingelser/ (terms) and https://tinxdkcloud.dk/privatliv/ (privacy policy)

== Changelog ==

= 2.0.1 =
* Changed: The free plugin is now called TINXDK Captcha Lite; this add-on's texts follow. No functional change.

= 2.0.0 =
* New: Pro extension of TINXDK Captcha Lite 2.0.0 (the free plugin replaces the combined plugin "TINXDK WP - Captcha"). Invisible mode, "Under Attack" mode with automatic switch-on, event log with retention, filters, CSV export and statistics chart, IP allowlist and blocklist with CIDR, weekly summary e-mail.
* New: Licence client, licence settings and updater.

== Upgrade Notice ==

= 2.0.1 =
The free plugin is now called TINXDK Captcha Lite (no functional change).

= 2.0.0 =
Install TINXDK Captcha Lite 2.0.0 (free) first.
