Апісанне
HSArticle Login Math Verification protects your WordPress login page from bots and brute-force attacks using a simple math question. No Google reCAPTCHA, no Cloudflare, no API keys required.
Features
- Math captcha (e.g. “8 + 5 = ?”) on the login page
- Answer signed directly into the form token, no server-side storage or PHP sessions needed
- Beautiful light and dark-themed login page design
- Customizable accent color with live preview
- Enable/disable toggle from admin settings
- Login attempt stats (passed vs. blocked) in the admin dashboard
- Lightweight — no external scripts loaded on the front end
Ўсталёўка
- Upload the
hsarticle-login-math-verificationfolder to/wp-content/plugins/ - Activate the plugin from the Plugins menu in WordPress
- Go to Settings Login Math Verification to configure
Часта задаваныя пытанні
-
Does this require any API keys?
-
No. Everything runs on your WordPress server using PHP. The captcha answer is signed into a token embedded in the login form, so there is nothing stored on the server to look up.
-
Will this slow down my site?
-
No. The plugin only loads on the login page and admin settings page.
-
What if the captcha expires?
-
Each captcha token is valid for 10 minutes. If it expires, the user just needs to refresh the login page.
-
What happens when I uninstall the plugin?
-
All plugin settings are automatically cleaned from your database when you delete the plugin via the WordPress admin, including any leftover captcha data from older versions.
Водгукі
Удзельнікі і распрацоўшчыкі
“HSArticle Login Math Verification” з’яўляецца праграмным забеспячэннем з адкрытым зыходным кодам. Наступныя людзі ўнеслі свой уклад у гэты плагін.
Удзельнікі
Перакласці “HSArticle Login Math Verification” на вашу мову.
Зацікаўлены ў распрацоўцы?
Праглядзіце код, праверце SVN рэпазітарый, або падпішыцеся на журнал распрацоўкі па RSS.
Журнал змяненняў
1.0.3
- Captcha no longer relies on WordPress transients for storing the answer
- Fixes “incorrect answer” errors on sites where page caching, a CDN, or a persistent object cache prevented the transient from being read back correctly
- Answer is now signed directly into the form token (HMAC), verified with no server-side lookup
1.0.1
- Plugin renamed to HSArticle Login Math Verification with new slug hsarticle-login-math-verification
- All prefixes updated from slc_ to almv_ throughout
- Inline CSS moved to wp_add_inline_style() — no more raw style tags
- Inline JS moved to wp_add_inline_script() — no more raw script tags
- Google Fonts loaded via wp_enqueue_style() on both login and admin pages
- Stat counters (passed/blocked) now increment correctly on each login attempt
- All text domain references updated to hsarticle-login-math-verification
1.0.0
- Initial release