=== WPPulso ===
Contributors: devcodes
Tags: security, backup, health, monitoring, updates
Requires at least: 6.0
Tested up to: 6.6
Requires PHP: 7.4
Stable tag: 1.0.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

WordPress site health, backup, security and update risk monitoring for every website owner.

== Description ==

WPPulso helps WordPress users understand website risk in plain English.

It shows a site risk score, scans common WordPress health signals, checks backup freshness, highlights basic security issues, and logs important activity.

Version 1.0.1 is the Product Polish & Reliability release. It keeps the same commercial feature set and improves admin UI polish, backup storage reliability, report styling, upgrade handling, billing validation and customer-facing wording.

== V1.0.1 Product Polish & Reliability ==

* No new product modules added.
* Updated plugin version and stable tag to 1.0.1.
* Added an upgrade routine so existing installs apply storage, schedule and schema maintenance when updating.
* Moved new backup file storage to a protected uploads-based WPPulso folder, while preserving legacy backup path support.
* Improved backup writing with temporary files and finalisation checks before marking a backup complete.
* Improved ZIP backup reliability by counting only files successfully added to the archive.
* Improved admin dashboard hierarchy with priority findings shown near the risk score.
* Refined admin UI styling to match the dark grey, light grey and white commercial website theme.
* Removed stale V0.x wording from admin screens.
* Improved license activation and billing messages.
* Hardened settings validation for alert email, backup warning age, log retention, payment provider and currency values.
* Improved webhook payload parsing for malformed Stripe, Razorpay and PayPal events.
* Improved PayPal checkout handling when the approval URL is missing.
* Improved downloadable client report styling and empty-state handling.
* Improved weekly email report styling.
* Preserved Free, Pro and Agency feature gates, pricing and payment options.

== Stable Commercial Features ==

* WordPress risk score
* Manual health scan
* PHP version check
* SSL check
* WordPress core update check
* Plugin/theme update count
* Backup age detection
* Debug mode check
* XML-RPC check
* File editor check
* WordPress cron check
* Activity log
* Basic settings page
* Manual database backup
* Backup history
* Secure backup download
* Backup delete action
* Backup checksum and file size
* Dashboard backup status
* Security settings screen
* Login attempt limiting
* Temporary IP/username lockouts
* XML-RPC disable toggle
* Author enumeration protection
* Public REST user listing protection
* WordPress generator version hiding
* Dashboard security status
* Update Shield screen
* Pending plugin/theme/core update risk list
* Update safety score
* Pre-update database backup action
* Homepage response check
* Update risk review activity log
* Dashboard Update Shield summary
* Daily scheduled health scan
* Weekly health report email
* Critical risk email alert
* Old or missing backup alert
* High update risk alert
* Monitoring admin screen
* Test alert email tool
* Dashboard monitoring status
* Files backup ZIP
* Full backup ZIP with database.sql
* Backup verification
* ZIP integrity check
* Database backup header verification
* Backup download content type handling
* File change monitoring
* Trusted file baseline
* Added/modified/deleted file detection
* Suspicious PHP file detection in uploads
* Suspicious code pattern detection
* Daily scheduled file integrity scan
* File Monitor admin screen
* Dashboard file monitor summary
* Client-ready health report generator
* Reports admin screen
* Agency and client report settings
* Downloadable HTML health report
* Report summary for health, backup, security, update risk, monitoring, and file changes
* Recommended client action list
* Optional recent activity section
* Free, Pro, and Agency plan definitions
* License & Plans admin screen
* Pro/Agency license activation workflow
* License deactivation
* Pro feature gate helper
* Pro gating for file change monitoring actions
* Pro gating for client report downloads
* Dashboard license status
* Billing and subscription module
* Billing admin screen
* Monthly/yearly Pro and Agency pricing
* Subscription status tracking
* Checkout URL generation
* Manual payment mark-paid action
* Local subscription cancellation
* Billing settings for company, tax/GST, country, currency, provider, checkout URL, and webhook secrets
* Invoice table and invoice history
* Dashboard billing status
* Public website package
* Long homepage content
* Product pages: About, Why WPPulso, How It Works, Pricing and Comparison
* User documentation page
* Legal pages: Terms, Privacy, Refund Policy, License Policy and Security Disclaimer
* Clean public website URLs
* Page-specific SEO titles
* Page-specific meta descriptions
* Meta keywords for launch targeting
* Canonical URLs
* Open Graph metadata
* Twitter card metadata
* WebPage structured data
* Breadcrumb structured data
* Sitemap.xml
* Robots.txt
* llms.txt
* Crawl-friendly updates page
* Hourly sitemap crawl hint for updates page
* Contextual internal link building
* Keyword-focused SEO landing pages
* Image alt and title attributes
* Search-safe X-Robots-Tag headers
* Stripe Checkout Session creation
* Stripe webhook signature validation
* Razorpay Order creation
* Razorpay webhook HMAC validation
* PayPal Checkout Order creation
* PayPal webhook verification API support
* USDT EVM checkout instruction generation
* USDT EVM signed confirmation webhook support
* Real license server REST routes
* License activate/validate/deactivate API
* HMAC-signed license API requests
* License key table with hashed key storage
* Site activation limit enforcement
* Webhook-confirmed subscription activation
* Webhook-confirmed license key issuance

== Installation ==

1. Upload the `wppulso` folder to `/wp-content/plugins/`.
2. Activate WPPulso from the WordPress Plugins screen.
3. Open WPPulso from the WordPress admin menu.
4. Run your first manual scan.

== Changelog ==

= 1.0.1 =
* Product Polish & Reliability release.
* Added upgrade handling for existing installs.
* Improved persistent backup storage and temporary backup file handling.
* Improved admin dashboard, admin CSS, client report and email report styling.
* Improved settings, billing and webhook input validation.
* Removed stale internal/version wording from admin screens.
* No new feature modules were added.

= 1.0.0 =
* Stable commercial release.
* Updated plugin version and stable tag to 1.0.0.
* Aligned Pro and Agency pricing with the public website.
* Finalized customer-facing admin copy for billing and license activation.
* Confirmed health score, backup engine, security protection, Update Shield, monitoring, file-change monitoring, reports, licensing, billing, payment webhooks and license server modules.
* Prepared V1.0 packaging, regression checklist and public website release artifacts.

= 0.8.5 =
* Added live Stripe checkout flow.
* Added Razorpay order checkout flow.
* Added PayPal checkout order flow.
* Added USDT EVM checkout option with wallet, chain and payment reference instructions.
* Added verified payment webhook endpoint.
* Added Stripe, Razorpay, PayPal and USDT webhook validation paths.
* Added real license server REST API routes.
* Added HMAC-signed license activation and validation flow.
* Added hashed license key storage and site-limit activation tracking.
* Added webhook-based subscription activation and license issuance.
* Added payment options page to the public website.

= 0.8.4 =
* Added SEO launch layer for the public website.
* Added clean URL versions of all public pages.
* Added sitemap.xml and robots.txt.
* Added llms.txt.
* Added page-specific titles, descriptions, canonical tags and social metadata.
* Added structured data for WebPage and BreadcrumbList.
* Added contextual internal links and predefined SEO anchor text.
* Added product updates page with hourly sitemap crawl hint.
* Added SEO landing pages for WordPress health score, backup monitoring, security monitoring, update risk monitoring, uptime monitoring and maintenance reports.
* Added image alt/title metadata for the dashboard preview image.

= 0.8.3 =
* Added public website package for launch.
* Added long homepage content.
* Added product pages for About, Why WPPulso, How It Works, Pricing and Comparison.
* Added user documentation page.
* Added legal pages for Terms, Privacy, Refund Policy, License Policy and Security Disclaimer.

= 0.8.2 =
* Added billing and subscription module.
* Added Billing admin screen.
* Added subscription status option.
* Added billing settings option.
* Added invoice database table.
* Added checkout generation action.
* Added manual mark-paid action that activates a local Pro/Agency license.
* Added local subscription cancellation action.
* Added billing status on dashboard.
* Updated plan prices to monthly/yearly model.

= 0.8.1 =
* Added Licensing module.
* Added Free, Pro, and Agency plan definitions.
* Added License & Plans admin screen.
* Added local license activation/deactivation workflow.
* Added plan status on dashboard.
* Added Pro feature gates for file monitoring and client report downloads.
* Added upgrade messaging for locked Pro features.

= 0.8.0 =
* Added Reports module.
* Added client-ready health report generator.
* Added downloadable HTML report.
* Added Reports admin screen.
* Added agency/client report settings.
* Added report summary across health, backups, security, update risk, monitoring, and file monitor.
* Added recommended action list for client reports.

= 0.7.0 =
* Added File Monitor module.
* Added trusted file baseline creation.
* Added manual file integrity scan.
* Added added, modified, and deleted file detection.
* Added suspicious executable file detection in uploads.
* Added suspicious code pattern scanning.
* Added daily scheduled file integrity check.
* Added File Monitor admin screen and dashboard summary.

= 0.6.0 =
* Added files backup ZIP creation.
* Added full backup ZIP creation with database export.
* Added backup verification action.
* Added ZIP integrity verification.
* Added database backup header verification.
* Updated backup UI with database, files, full, download, verify, and delete actions.

= 0.5.0 =
* Added Monitoring & Alerts module.
* Added daily scheduled health scan.
* Added weekly health report email.
* Added critical risk, backup, and update risk alerts.
* Added Monitoring admin screen.
* Added test alert email action.
* Added dashboard monitoring summary.

= 0.4.0 =
* Added Update Shield module.
* Added pending update risk scoring.
* Added Update Shield admin screen.
* Added pre-update database backup action.
* Added homepage response check.
* Added update risk review logging.
* Added dashboard Update Shield summary.

= 0.3.0 =
* Added security protection module.
* Added Security admin screen.
* Added failed login attempt tracking and lockouts.
* Added XML-RPC blocking option.
* Added author enumeration protection.
* Added REST API user listing protection.
* Added WordPress generator version hiding.
* Added dashboard security summary.

= 0.2.0 =
* Added manual database backup engine.
* Added Backups admin screen.
* Added backup download and delete actions with nonce and capability checks.
* Added backup status cards to dashboard.

= 0.1.0 =
* Initial V0.1 architecture and plugin MVP.
