Сүрөттөө
HSArticle Login Math Verification protects your WordPress login page from bots and brute-force attacks using a simple math question. No Google reCAPTCHA, no Cloudflare, no API keys required.
Features
- Math captcha (e.g. “8 + 5 = ?”) on the login page
- Answer signed directly into the form token, no server-side storage or PHP sessions needed
- Beautiful light and dark-themed login page design
- Customizable accent color with live preview
- Enable/disable toggle from admin settings
- Login attempt stats (passed vs. blocked) in the admin dashboard
- Lightweight — no external scripts loaded on the front end
Орнотуу
- Upload the
hsarticle-login-math-verificationfolder to/wp-content/plugins/ - Activate the plugin from the Plugins menu in WordPress
- Go to Settings Login Math Verification to configure
FAQ.KG
-
Does this require any API keys?
-
No. Everything runs on your WordPress server using PHP. The captcha answer is signed into a token embedded in the login form, so there is nothing stored on the server to look up.
-
Will this slow down my site?
-
No. The plugin only loads on the login page and admin settings page.
-
What if the captcha expires?
-
Each captcha token is valid for 10 minutes. If it expires, the user just needs to refresh the login page.
-
What happens when I uninstall the plugin?
-
All plugin settings are automatically cleaned from your database when you delete the plugin via the WordPress admin, including any leftover captcha data from older versions.
Сын-пикирлер
Contributors & Developers
“HSArticle Login Math Verification” is open source software. The following people have contributed to this plugin.
Мүчөлөрү
Translate “HSArticle Login Math Verification” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Өзгөртүүлөр
1.0.3
- Captcha no longer relies on WordPress transients for storing the answer
- Fixes “incorrect answer” errors on sites where page caching, a CDN, or a persistent object cache prevented the transient from being read back correctly
- Answer is now signed directly into the form token (HMAC), verified with no server-side lookup
1.0.1
- Plugin renamed to HSArticle Login Math Verification with new slug hsarticle-login-math-verification
- All prefixes updated from slc_ to almv_ throughout
- Inline CSS moved to wp_add_inline_style() — no more raw style tags
- Inline JS moved to wp_add_inline_script() — no more raw script tags
- Google Fonts loaded via wp_enqueue_style() on both login and admin pages
- Stat counters (passed/blocked) now increment correctly on each login attempt
- All text domain references updated to hsarticle-login-math-verification
1.0.0
- Initial release