Changelog

1.6.11

• Backwards compatbility fix for PHP <= 5.5 empty() quirk/bug: https://www.php.net/manual/en/function.empty.php

1.6.10

• Resolve issue whereby captcha could be bypassed for new user registrations introduced in 1.6.9
• Add option to disable default CSS entirely

1.6.9

• Resolves CSS dependency issue causing conflicts on non-login pages

1.6.8

• Prevent information disclosure by only returning error about blank captcha, not login status

1.6.7

• Revert CSS styling changes after multiple reports of problems
• Add German language support

1.6.6

• CSS styling improvement

1.6.5

• Tested with 5.3

1.6.4

• Tested with 5.2
• Using callback to disable submit buttons

1.6.3

• Resolve issue with captcha not displaying on embedded login form on WooCommerce checkout page

1.6.2

• Resolve fatal error with old versions of PHP (reported on 5.4.45)

1.6.1

• Disable submit buttons via javascript on Woo forms
• Improve error messaging

1.6

• Added IP whitelist functionality (thanks @farley1122)
• More comprehensive protection of signup endpoints, including wp-signup.php and my-account page

1.5

• Resolve issue introduced in 1.4x whereby captcha was being be bypassed
• ALL USERS STRONGLY ENCOURAGED TO UPDATE FOR SECURITY REASONS AND NOT USE 1.4x

1.4.1

• Align language text domain with plugin tag to allow translation contributions

1.4

• Added support for registration forms (thanks to d2roth)
• Align filter/hook calls with codex
• Increase priority (earlier execution) of login checking (prevents unnecessary alerts from e.g. WordFence)

1.3.3

• Fixed bug with fallback to cURL in cases where TLS is misconfigured

1.3.2

• Compatibility fix for use of empty() language construct in php 5.x

1.3.1

• Added experimental support for v3 (hidden for now)

1.3

• Added reCaptcha to lost password form
• Added Russian translation
• Tested with 5.0

1.2.5

• Revert lost password form change as it was frontend-only

1.2.4

• Add reCaptcha to lost password form

1.2.3

• Improved Section 508 compliance
• Do not check for noCaptcha values when using a non-WordPress authentication method other than WooCommerce
• Add standard WordPress shake effect to invalid login response

1.2.2

• Do not check for noCaptcha values when using a non-WordPress authentication method
• Fix bug with submit button greyed out on settings page

1.2.1

• Implement noCaptcha for WooCommerce customer login form

1.2

• Fixed an important security issue (thanks to jezevec10 for reporting) to harden the reCaptcha-enabled login page against clever bots

1.1.11

• Added French translation (thanks to fdinh)

1.1.10

• Minor bugfix for error reporting

1.1.7

• Bug fix for login form display in admin, testing on 4.5

1.1.6

• Disable login with js until NoCaptcha returns

1.1.5

• Tested compatible with 4.4x

1.1.4

• Better display of captcha when javascript disabled (thanks to webmasteral)

1.1.3

• Improved handling of certain Google responses

1.1.2

• Improved just-in-time script registration (only for admin/login)

1.1.1

• Remove warning about enqueueing css/js too early

1.1

• Major security improvement: now supporting reCaptcha checking with javascript disabled (thanks to mfjtf)

1.0.3

• Resolve issue with WordPress hosted on an inaccessible domain (e.g. localhost)

1.0.2

• Resolve bug with wp_remote_post() payload

1.0.1

• Resolve linking issue due to repository maintainers renaming the plugin

1.0.0

• Initial release