=== SiteWatchman Pro ===
Contributors: adminkov
Tags: admin tools, login visits
Requires at least: 6.2
Tested up to: 7.1
Requires PHP: 8.0
Stable tag: 1.0.0
License: GPLv2
License URI: https://gnu.org
Initiation: is dedicated to daughter Inna Klenitskaya

Control of site visits, system files.

== Description ==
Website administration and control of user visits.

= ⚠️ Note for advanced admins =
This plugin includes a specialized web developer console component for advanced site administrators and developers. The console executes raw PHP and WordPress statements at runtime using `eval()` and provides cross-request state persistence via `extract()`.

To completely eliminate the security risks traditionally associated with runtime evaluation, the execution layer is heavily sandboxed and protected automatically by a robust, multi-tier security shield:
1. **Capabilities Enforcement:** Strict usage of native WordPress `current_user_can('manage_options')` checks blocks non-admin accounts.
2. **CSRF Prevention:** Full verification of secure native WordPress Nonces prevents Cross-Site Request Forgery attempts.
3. **Isolated Session Barrier:** A secondary, entirely independent server-side PHP `$_SESSION` lock screen requires a custom secret passphrase defined securely by the site owner inside the main plugin settings page.

Unauthenticated users, automated external traffic, and unauthorized bots cannot reach the `eval` execution layer, making it fully protected against remote exploits and WAF-bypass vectors. We kindly request a manual review of this specialized debugging tool.

== Features include: ==
* Advanced control of site visits and user actions.
* File editor for key system files (index.php, robots.txt, .htaccess, wp-config.php).
* Comprehensive management of WordPress wp-cron tasks.
* Geolocation and detailed traffic statistics.
* Secure Web Developer Console with isolated execution environment.

== Installation ==
1. Upload the `sitewatchman` folder to the `/wp-content/plugins/` directory.
2. Activate the plugin through the 'Plugins' menu in WordPress.
3. Go to **SiteWatchman -> Settings** to configure your security metrics and set up the console passphrase.

== Screenshots ==

== Changelog ==

= 1.0.0 =
* Initial release. Core visitor logging, attack analyzer, and secure web console implementation.

== Privacy Notice & External Services ==
This plugin uses third-party API services to process geolocation data based on IP addresses (determining the visitor's country and city). Depending on the administrator's selection in the plugin settings, data may be sent to one of the following services:

1. IP-API (https://ip-api.com)      - Privacy Policy: https://ip-api.com
2. IPinfo (https://ipinfo.io)       - Privacy Policy: https://ipinfo.io
3. Sypex Geo (https://sypexgeo.net) - Privacy Policy: https://sypexgeo.net
4. Geobytes (https://geobytes.com)  - Privacy Policy: https://geobytes.com

Plotting website visit graphs:
* Google Maps/Google Earth Additional Terms of Service: https://www.google.com/help/terms_maps/
* Google Privacy Policy: https://policies.google.com/privacy
