Changeset 3462265

Timestamp:

02/16/2026 07:47:36 AM (6 weeks ago)

Author:

ghimireanil

Message:

Update plugin

Location:

lockspire-smart-access-protection/trunk

Files:

• assets/css/admin.css (modified) (2 diffs)
• assets/js/admin.js (modified) (1 diff)
• includes/ajax-handlers.php (modified) (1 diff)
• includes/attempt-handler.php (modified) (1 diff)
• includes/database.php (modified) (1 diff)
• includes/notifications.php (modified) (1 diff)
• includes/settings-page.php (modified) (1 diff)
• lockspire-smart-access-protection.php (modified) (1 diff)
• phpstan.neon (added)
• readme.txt (modified) (1 diff)
• wp-stubs.php (added)

lockspire-smart-access-protection/trunk/assets/css/admin.css

@@ -1 @@
-/* Login Attempt Limiter Admin Styles */
-.lal-admin-wrapper {
-    background: #fff;
-    border: 1px solid #ccd0d4;
-    border-radius: 8px;
-    box-shadow: 0 1px 3px rgba(0,0,0,0.1);
-    margin: 20px 0;
-    overflow: hidden;
-}
-
-.lal-header {
+/* Lockspire Security Admin Styles */
+.lockspire-wrap {
+    max-width: 1600px;
+    margin: 0;
+    padding: 0 30px 30px 30px;
+    background: #f1f3f6;
+    min-height: 100vh;
+}
+
+.lockspire-header {
     background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
     color: white;
-    padding: 20px;
-    text-align: center;
-}
-
-.lal-header h1 {
+    padding: 30px 40px;
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin: -30px -30px 40px -30px;
+    border-radius: 0 0 20px 20px;
+    box-shadow: 0 8px 30px rgba(102, 126, 234, 0.3);
+}
+
+.lockspire-logo {
+    display: flex;
+    align-items: center;
+    gap: 15px;
+}
+
+.lockspire-icon {
+    font-size: 32px;
+}
+
+.lockspire-logo h1 {
     margin: 0;
     font-size: 24px;
@@ -22 +36 @@
 }
 
-.lal-header p {
-    margin: 5px 0 0 0;
-    opacity: 0.9;
+.lockspire-version {
+    background: rgba(255, 255, 255, 0.2);
+    padding: 5px 12px;
+    border-radius: 15px;
+    font-size: 12px;
+}
+
+.lockspire-nav {
+    display: flex;
+    gap: 8px;
+    margin-bottom: 30px;
+    background: white;
+    padding: 15px 25px;
+    border-radius: 15px;
+    box-shadow: 0 4px 20px rgba(0, 0, 0, 0.08);
+    flex-wrap: wrap;
+}
+
+.nav-item {
+    padding: 12px 20px;
+    text-decoration: none;
+    color: #666;
+    border-radius: 10px;
+    transition: all 0.3s ease;
+    font-weight: 500;
     font-size: 14px;
 }
 
-.lal-nav-tabs {
-    display: flex;
-    background: #f8f9fa;
-    border-bottom: 1px solid #ddd;
-    margin: 0;
-    padding: 0;
-}
-
-.lal-nav-tab {
-    background: none;
-    border: none;
-    padding: 15px 25px;
-    cursor: pointer;
-    font-size: 14px;
-    font-weight: 500;
-    color: #666;
-    border-bottom: 3px solid transparent;
-    transition: all 0.3s ease;
-}
-
-.lal-nav-tab:hover {
-    background: #e9ecef;
+.nav-item:hover {
+    background: #f0f0f0;
     color: #333;
 }
 
-.lal-nav-tab.active {
-    color: #667eea;
-    border-bottom-color: #667eea;
-    background: white;
-}
-
-.lal-tab-content {
-    display: none;
-    padding: 30px;
-}
-
-.lal-tab-content.active {
-    display: block;
-}
-
-.lal-form-section {
-    margin-bottom: 30px;
-    padding: 20px;
-    background: #f8f9fa;
-    border-radius: 6px;
-    border-left: 4px solid #667eea;
-}
-
-.lal-form-section h3 {
-    margin: 0 0 15px 0;
-    color: #333;
-    font-size: 16px;
-    font-weight: 600;
-}
-
-.lal-form-row {
-    display: flex;
-    align-items: center;
-    margin-bottom: 15px;
-    flex-wrap: wrap;
-}
-
-.lal-form-row label {
-    flex: 0 0 200px;
-    font-weight: 500;
-    color: #333;
-    margin-right: 20px;
-}
-
-.lal-form-row input[type="text"],
-.lal-form-row input[type="number"],
-.lal-form-row textarea,
-.lal-form-row select {
-    flex: 1;
-    min-width: 200px;
-    padding: 8px 12px;
-    border: 1px solid #ddd;
-    border-radius: 4px;
-    font-size: 14px;
-}
-
-.lal-form-row input[type="checkbox"] {
-    margin-right: 8px;
-}
-
-.lal-form-row .description {
-    flex: 1;
-    margin-top: 5px;
-    font-size: 12px;
-    color: #666;
-    font-style: italic;
-}
-
-.lal-stats-grid {
-    display: grid;
-    grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
-    gap: 20px;
-    margin-bottom: 30px;
-}
-
-.lal-stat-card {
-    background: white;
-    border: 1px solid #e1e5e9;
-    border-radius: 8px;
-    padding: 20px;
-    text-align: center;
-    transition: transform 0.2s ease, box-shadow 0.2s ease;
-}
-
-.lal-stat-card:hover {
-    transform: translateY(-2px);
-    box-shadow: 0 4px 12px rgba(0,0,0,0.1);
-}
-
-.lal-stat-number {
-    font-size: 32px;
-    font-weight: bold;
-    color: #667eea;
-    margin-bottom: 5px;
-}
-
-.lal-stat-label {
-    font-size: 14px;
-    color: #666;
-    text-transform: uppercase;
-    letter-spacing: 0.5px;
-}
-
-.lal-log-table {
-    width: 100%;
-    border-collapse: collapse;
-    margin-top: 20px;
-}
-
-.lal-log-table th,
-.lal-log-table td {
-    padding: 12px;
-    text-align: left;
-    border-bottom: 1px solid #e1e5e9;
-}
-
-.lal-log-table th {
-    background: #f8f9fa;
-    font-weight: 600;
-    color: #333;
-}
-
-.lal-log-table tr:hover {
-    background: #f8f9fa;
-}
-
-.lal-status-badge {
-    padding: 4px 8px;
-    border-radius: 12px;
-    font-size: 12px;
-    font-weight: 500;
-    text-transform: uppercase;
-}
-
-.lal-status-locked {
-    background: #ffeaa7;
-    color: #d63031;
-}
-
-.lal-status-failed {
-    background: #fab1a0;
-    color: #e17055;
-}
-
-.lal-status-success {
-    background: #55efc4;
-    color: #00b894;
-}
-
-.lal-button {
+.nav-item.active {
     background: #667eea;
     color: white;
-    border: none;
-    padding: 10px 20px;
-    border-radius: 4px;
+}
+
+.lockspire-content {
+    background: transparent;
+}
+
+.page-title {
+    margin-bottom: 20px;
+    color: #333;
+    font-size: 28px;
+    font-weight: 600;
+}
+
+.lockspire-grid {
+    display: grid;
+    grid-template-columns: 1fr 1fr;
+    gap: 30px;
+    margin-bottom: 30px;
+}
+
+@media (max-width: 1200px) {
+    .lockspire-grid {
+        grid-template-columns: 1fr;
+    }
+}
+
+.lockspire-card {
+    background: white;
+    border-radius: 16px;
+    box-shadow: 0 6px 25px rgba(0, 0, 0, 0.08);
+    overflow: hidden;
+    transition: transform 0.3s ease, box-shadow 0.3s ease;
+    border: 1px solid rgba(0, 0, 0, 0.05);
+}
+
+.lockspire-card:hover {
+    transform: translateY(-2px);
+    box-shadow: 0 8px 25px rgba(0, 0, 0, 0.15);
+}
+
+.lockspire-card-primary {
+    background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+    color: white;
+}
+
+.lockspire-card-header {
+    padding: 25px 30px;
+    border-bottom: 1px solid rgba(0, 0, 0, 0.08);
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    background: rgba(248, 250, 252, 0.8);
+}
+
+.lockspire-card-primary .lockspire-card-header {
+    border-bottom: 1px solid rgba(255, 255, 255, 0.2);
+}
+
+.lockspire-card-header h3 {
+    margin: 0;
+    font-size: 18px;
+    font-weight: 600;
+}
+
+.lockspire-card-body {
+    padding: 30px;
+}
+
+/* Toggle switches */
+.switch {
+    position: relative;
+    display: inline-block;
+    width: 60px;
+    height: 34px;
+}
+
+.switch input {
+    opacity: 0;
+    width: 0;
+    height: 0;
+}
+
+.toggle-slider {
+    position: absolute;
     cursor: pointer;
-    font-size: 14px;
-    font-weight: 500;
-    transition: background 0.3s ease;
-}
-
-.lal-button:hover {
-    background: #5a6fd8;
-}
-
-.lal-button-secondary {
-    background: #6c757d;
-}
-
-.lal-button-secondary:hover {
-    background: #5a6268;
-}
-
-.lal-button-danger {
-    background: #dc3545;
-}
-
-.lal-button-danger:hover {
-    background: #c82333;
-}
-
-.lal-alert {
-    padding: 15px;
-    border-radius: 4px;
-    margin-bottom: 20px;
-    border-left: 4px solid;
-}
-
-.lal-alert-success {
-    background: #d4edda;
-    border-color: #28a745;
-    color: #155724;
-}
-
-.lal-alert-warning {
-    background: #fff3cd;
-    border-color: #ffc107;
-    color: #856404;
-}
-
-.lal-alert-error {
-    background: #f8d7da;
-    border-color: #dc3545;
-    color: #721c24;
-}
-
-.lal-progress-bar {
-    width: 100%;
-    height: 20px;
-    background: #e9ecef;
-    border-radius: 10px;
+    top: 0;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    background-color: #ccc;
+    transition: 0.4s;
+    border-radius: 34px;
+}
+
+.toggle-slider:before {
+    position: absolute;
+    content: "";
+    height: 26px;
+    width: 26px;
+    left: 4px;
+    bottom: 4px;
+    background-color: white;
+    transition: 0.4s;
+    border-radius: 50%;
+}
+
+input:checked + .toggle-slider {
+    background-color: #667eea;
+}
+
+input:checked + .toggle-slider:before {
+    transform: translateX(26px);
+}
+
+/* Status indicators */
+.status-locked {
+    display: inline-block;
+    padding: 6px 12px;
+    background: #ffebee;
+    color: #c62828;
+    border-radius: 6px;
+    font-weight: 600;
+    font-size: 12px;
+}
+
+.status-active {
+    display: inline-block;
+    padding: 6px 12px;
+    background: #e8f5e9;
+    color: #2e7d32;
+    border-radius: 6px;
+    font-weight: 600;
+    font-size: 12px;
+}
+
+/* Modern Dashboard Grid */
+.dashboard-grid-modern {
+    display: grid;
+    grid-template-columns: 1fr;
+    gap: 30px;
+    margin-bottom: 35px;
+}
+
+.modern-card {
+    background: rgba(255, 255, 255, 0.95);
+    border-radius: 14px;
+    box-shadow: 0 8px 25px rgba(0, 0, 0, 0.07);
+    border: 1px solid rgba(0, 0, 0, 0.05);
+    transition: all 0.3s cubic-bezier(0.25, 0.46, 0.45, 0.94);
+    position: relative;
     overflow: hidden;
-    margin: 10px 0;
-}
-
-.lal-progress-fill {
-    height: 100%;
-    background: linear-gradient(90deg, #667eea, #764ba2);
-    transition: width 0.3s ease;
-}
-
-@media (max-width: 768px) {
-    .lal-form-row {
-        flex-direction: column;
-        align-items: flex-start;
-    }
-    
-    .lal-form-row label {
-        flex: none;
-        margin-bottom: 5px;
-    }
-    
-    .lal-nav-tabs {
-        flex-wrap: wrap;
-    }
-    
-    .lal-nav-tab {
-        flex: 1;
-        min-width: 120px;
-        text-align: center;
-    }
-}
+    padding: 25px;
+}
+
+.modern-card:hover {
+    transform: translateY(-3px);
+    box-shadow: 0 12px 35px rgba(0, 0, 0, 0.11);
+    border-color: rgba(0, 0, 0, 0.09);
+}

lockspire-smart-access-protection/trunk/assets/js/admin.js

@@ -1 @@
-jQuery(document).ready(function($) {
-    // Tab switching functionality
-    $('.lal-nav-tab').on('click', function() {
-        var targetTab = $(this).data('tab');
-        if (targetTab) {
-            $('.lal-nav-tab').removeClass('active');
-            $('.lal-tab-content').removeClass('active');
-            
-            $(this).addClass('active');
-            $('#' + targetTab).addClass('active');
-        }
+// Lockspire Admin JavaScript Functions
+
+// Dashboard functions
+function runSecurityScan() {
+    window.location.href = '?page=lockspire-scanner&scan=1';
+}
+
+function clearAllLogs() {
+    if (confirm('Are you sure you want to clear all activity logs?')) {
+        window.location.href = '?page=lockspire-activity&action=clear_logs';
+    }
+}
+
+function exportSecurityReport() {
+    window.location.href = '?page=lockspire-activity&action=export';
+}
+
+function refreshDashboard() {
+    location.reload();
+}
+
+// Login Protection Functions
+function toggleLoginProtection(checkbox) {
+    jQuery.post(ajaxurl, {
+        action: 'lockspire_toggle_login_protection',
+        enabled: checkbox.checked,
+        nonce: lockspire_nonce
     });
-    
-    // Auto-refresh dashboard stats
-    if ($('.lal-stats-grid').length > 0) {
-        setInterval(function() {
-            lockspireRefreshStats();
-        }, 30000); // Refresh every 30 seconds
-    }
-    
-    // Initialize tooltips
-    lockspireInitTooltips();
-});
+}
 
-// Global functions for admin actions
-function lockspireClearAllLockouts() {
-    if (confirm('Are you sure you want to clear all active lockouts? This will allow locked out users to try logging in again.')) {
+function saveLoginSettings() {
+    jQuery.post(ajaxurl, {
+        action: 'lockspire_save_login_settings',
+        max_attempts: jQuery('#max_attempts').val(),
+        lockout_time: jQuery('#lockout_time').val(),
+        nonce: lockspire_nonce
+    }, function() {
+        alert('Settings saved successfully!');
+        location.reload();
+    });
+}
+
+function unlockIP(ip) {
+    if (confirm('Unlock IP ' + ip + '?')) {
         jQuery.post(ajaxurl, {
-            action: 'lockspire_clear_lockouts',
-            nonce: lockspire_admin.nonce
-        }, function(response) {
-            if (response.success) {
-                lockspireShowAlert('All lockouts cleared successfully!', 'success');
-                lockspireRefreshStats();
-            } else {
-                lockspireShowAlert('Error clearing lockouts: ' + response.data, 'error');
-            }
+            action: 'lockspire_unlock_ip',
+            ip: ip,
+            nonce: lockspire_nonce
+        }, function() {
+            location.reload();
         });
     }
 }
 
-function lockspireExportLogs() {
-    window.location.href = ajaxurl + '?action=lockspire_export_logs&nonce=' + lockspire_admin.nonce;
-}
-
-function lockspireResetStats() {
-    if (confirm('Are you sure you want to reset all statistics? This action cannot be undone.')) {
+function unlockAllIPs() {
+    if (confirm('Unlock all locked IPs?')) {
         jQuery.post(ajaxurl, {
-            action: 'lockspire_reset_stats',
-            nonce: lockspire_admin.nonce
-        }, function(response) {
-            if (response.success) {
-                lockspireShowAlert('Statistics reset successfully!', 'success');
-                lockspireRefreshStats();
-            } else {
-                lockspireShowAlert('Error resetting statistics: ' + response.data, 'error');
-            }
+            action: 'lockspire_unlock_all_ips',
+            nonce: lockspire_nonce
+        }, function() {
+            location.reload();
         });
     }
 }
 
-function lockspireClearLogs() {
-    console.log('lockspireClearLogs called');
-    console.log('lockspire_admin object:', lockspire_admin);
-    
-    if (!lockspire_admin || !lockspire_admin.nonce) {
-        alert('Security nonce not available. Please refresh the page.');
-        return;
-    }
-    
-    if (confirm('Are you sure you want to clear all logs? This action cannot be undone.')) {
-        console.log('Sending clear logs AJAX request...');
+// Email Notification Functions
+function toggleEmailNotifications(checkbox) {
+    jQuery.post(ajaxurl, {
+        action: 'lockspire_toggle_email_notifications',
+        enabled: checkbox.checked,
+        nonce: lockspire_nonce
+    });
+}
+
+function saveEmailSettings() {
+    var emails = jQuery('#notification_emails').val();
+    jQuery.post(ajaxurl, {
+        action: 'lockspire_save_email_settings',
+        notification_emails: emails,
+        nonce: lockspire_nonce
+    }, function() {
+        alert('Email settings saved!');
+    });
+}
+
+function testEmail() {
+    jQuery.post(ajaxurl, {
+        action: 'lockspire_test_email',
+        nonce: lockspire_nonce
+    }, function() {
+        alert('Test email sent! Check your inbox.');
+    });
+}
+
+function clearEmailLogs() {
+    if (confirm('Clear all email logs?')) {
         jQuery.post(ajaxurl, {
-            action: 'lockspire_clear_logs',
-            nonce: lockspire_admin.nonce
-        }, function(response) {
-            console.log('Clear logs AJAX response:', response);
-            if (response.success) {
-                lockspireShowAlert('Logs cleared successfully!', 'success');
-                // Wait a moment before reloading to show the success message
-                setTimeout(function() {
-                    location.reload();
-                }, 1000);
-            } else {
-                lockspireShowAlert('Error clearing logs: ' + (response.data || 'Unknown error'), 'error');
-            }
-        }).fail(function(xhr, status, error) {
-            console.log('Clear logs AJAX failed:', xhr, status, error);
-            lockspireShowAlert('AJAX error: ' + error, 'error');
+            action: 'lockspire_clear_email_logs',
+            nonce: lockspire_nonce
+        }, function() {
+            location.reload();
         });
     }
 }
 
-function lockspireDownloadLogs() {
-    window.location.href = ajaxurl + '?action=lockspire_download_logs&nonce=' + lockspire_admin.nonce;
+// Activity Log Functions
+function clearLogs() {
+    if (confirm('Are you sure you want to clear all activity logs?')) {
+        window.location.href = '?page=lockspire-activity&action=clear_logs';
+    }
 }
 
-function lockspireRefreshStats() {
-    jQuery.post(ajaxurl, {
-        action: 'lockspire_get_stats',
-        nonce: lockspire_admin.nonce
-    }, function(response) {
-        if (response.success) {
-            var stats = response.data;
-            jQuery('.lal-stat-number').eq(0).text(stats.total_attempts.toLocaleString());
-            jQuery('.lal-stat-number').eq(1).text(stats.failed_attempts.toLocaleString());
-            jQuery('.lal-stat-number').eq(2).text(stats.locked_ips.toLocaleString());
-            jQuery('.lal-stat-number').eq(3).text(stats.blocked_ips.toLocaleString());
-        }
+function exportLogs() {
+    window.location.href = '?page=lockspire-activity&action=export';
+}
+
+function filterLogs() {
+    var user = jQuery('#filter_user').val();
+    var role = jQuery('#filter_role').val();
+    var date = jQuery('#filter_date').val();
+    
+    jQuery('.activity-item').each(function() {
+        var show = true;
+        
+        if (user && jQuery(this).data('user') !== user) show = false;
+        if (role && jQuery(this).data('role') !== role) show = false;
+        if (date && jQuery(this).data('date') !== date) show = false;
+        
+        jQuery(this).toggle(show);
     });
 }
 
-function lockspireShowAlert(message, type) {
-    var alertClass = 'lal-alert-' + type;
-    var alertHtml = '<div class="lal-alert ' + alertClass + '">' + message + '</div>';
-    jQuery('.wrap').prepend(alertHtml);
-    
-    setTimeout(function() {
-        jQuery('.lal-alert').first().fadeOut(500, function() {
-            jQuery(this).remove();
-        });
-    }, 5000);
-}
-
-function lockspireInitTooltips() {
-    jQuery('[title]').each(function() {
-        var $this = jQuery(this);
-        $this.on('mouseenter', function() {
-            var title = $this.attr('title');
-            $this.data('title', title).removeAttr('title');
-            
-            var tooltip = jQuery('<div class="lal-tooltip">' + title + '</div>');
-            jQuery('body').append(tooltip);
-            
-            var position = $this.offset();
-            tooltip.css({
-                position: 'absolute',
-                top: position.top - tooltip.outerHeight() - 5,
-                left: position.left + ($this.outerWidth() / 2) - (tooltip.outerWidth() / 2)
-            }).fadeIn(200);
-        }).on('mouseleave', function() {
-            var title = $this.data('title');
-            $this.attr('title', title);
-            jQuery('.lal-tooltip').remove();
-        });
-    });
-}
-
-function lockspireTestLogWorking() {
-    if (confirm('Create test log entries to verify logging is working?')) {
+// Firewall Functions
+function blockIP(ip) {
+    var reason = prompt('Enter reason for blocking:');
+    if (reason) {
         jQuery.post(ajaxurl, {
-            action: 'lockspire_test_log_working',
-            nonce: lockspire_admin.nonce
-        }, function(response) {
-            if (response.success) {
-                alert('Success: ' + response.data);
-                location.reload();
-            } else {
-                alert('Error: ' + response.data);
-            }
-        }).fail(function(xhr, status, error) {
-            alert('AJAX Error: ' + error);
+            action: 'lockspire_block_ip',
+            ip: ip,
+            reason: reason,
+            nonce: lockspire_nonce
+        }, function() {
+            alert('IP blocked successfully!');
+            location.reload();
         });
     }
 }
 
-// Add CSS for tooltips
-jQuery('<style>.lal-tooltip { background: #333; color: white; padding: 5px 10px; border-radius: 3px; font-size: 12px; z-index: 9999; }</style>').appendTo('head');
+function unblockIP(ip) {
+    if (confirm('Unblock IP ' + ip + '?')) {
+        jQuery.post(ajaxurl, {
+            action: 'lockspire_unblock_ip',
+            ip: ip,
+            nonce: lockspire_nonce
+        }, function() {
+            alert('IP unblocked successfully!');
+            location.reload();
+        });
+    }
+}
+
+function toggleRule(ruleId, checkbox) {
+    jQuery.post(ajaxurl, {
+        action: 'lockspire_toggle_rule',
+        rule_id: ruleId,
+        enabled: checkbox.checked,
+        nonce: lockspire_nonce
+    }, function() {
+        console.log('Rule updated');
+    });
+}

lockspire-smart-access-protection/trunk/includes/ajax-handlers.php

@@ -1 +1 @@
 <?php
-if ( ! defined( 'ABSPATH' ) ) exit;
+/**
+ * AJAX Handlers for Lockspire - Documentation File
+ * 
+ * This file documents the AJAX handlers that are implemented
+ * as methods of the Lockspire_Security class.
+ * 
+ * The actual implementation can be found in lockspire-security.php
+ */
+// All code is implemented in lockspire-security.php - this is documentation only
 
-// Register AJAX handlers
-add_action('wp_ajax_lockspire_get_stats', 'lockspire_ajax_get_stats');
-add_action('wp_ajax_lockspire_clear_lockouts', 'lockspire_ajax_clear_lockouts');
-add_action('wp_ajax_lockspire_reset_stats', 'lockspire_ajax_reset_stats');
-add_action('wp_ajax_lockspire_clear_logs', 'lockspire_ajax_clear_logs');
-add_action('wp_ajax_lockspire_export_logs', 'lockspire_ajax_export_logs');
-add_action('wp_ajax_lockspire_download_logs', 'lockspire_ajax_download_logs');
-
-function lockspire_ajax_get_stats() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_die('Unauthorized');
-    }
-    
-    $stats = lockspire_get_security_stats();
-    wp_send_json_success($stats);
-}
-
-function lockspire_ajax_clear_lockouts() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_die('Unauthorized');
-    }
-    
-    global $wpdb;
-    
-    // Get all lockout transients using WordPress options API
-    $all_options = wp_cache_get('alloptions', 'options');
-    if (!$all_options) {
-        $all_options = wp_load_alloptions();
-    }
-    
-    $transients = [];
-    foreach ($all_options as $option_name => $value) {
-        if (strpos($option_name, 'lockspire_lockout_') === 0) {
-            $transients[] = $option_name;
-        }
-    }
-    
-    foreach ($transients as $transient) {
-        delete_option($transient);
-        wp_cache_delete($transient, 'options');
-    }
-    
-    wp_send_json_success('All lockouts cleared');
-}
-
-function lockspire_ajax_reset_stats() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_die('Unauthorized');
-    }
-    
-    global $wpdb;
-    $table_name = sanitize_text_field($wpdb->prefix . 'lockspire_login_logs');
-    $wpdb->query($wpdb->prepare("TRUNCATE TABLE %s", $table_name));
-    
-    wp_send_json_success('Statistics reset');
-}
-
-function lockspire_ajax_clear_logs() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_die('Unauthorized');
-    }
-    
-    global $wpdb;
-    $table_name = sanitize_text_field($wpdb->prefix . 'lockspire_login_logs');
-    
-    // Ensure table exists before clearing
-    require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
-    dbDelta("CREATE TABLE IF NOT EXISTS {$table_name} (
-        id mediumint(9) NOT NULL AUTO_INCREMENT,
-        ip_address varchar(45) NOT NULL,
-        username varchar(60) NOT NULL,
-        status varchar(20) NOT NULL,
-        attempts int(3) NOT NULL DEFAULT 1,
-        user_agent text,
-        created_at datetime DEFAULT CURRENT_TIMESTAMP,
-        PRIMARY KEY  (id)
-    )");
-    
-    // Clear the table using safe table name construction
-    $wpdb->query("TRUNCATE TABLE `" . esc_sql($table_name) . "`");
-    
-    // Clear all related caches
-    wp_cache_delete('lockspire_stats_today', 'lockspire_logs');
-    wp_cache_delete('lockspire_recent_logs_50', 'lockspire_logs');
-    wp_cache_delete('lockspire_cleanup_last_run', 'lockspire_logs');
-    
-    wp_send_json_success('Logs cleared');
-}
-
-function lockspire_ajax_export_logs() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_die('Unauthorized');
-    }
-    
-    global $wpdb;
-    $table_name = sanitize_text_field($wpdb->prefix . 'lockspire_login_logs');
-    
-    // Try to get logs from cache first
-    $cache_key = 'lockspire_recent_logs_50';
-    $logs = wp_cache_get($cache_key, 'lockspire_logs');
-    
-    if ($logs === false) {
-        // Note: $wpdb->get_results() is the proper WordPress method for multiple row queries
-        // Direct database query is necessary here for CSV export - no WordPress core function provides this data
-        // Query is properly prepared and cached to minimize database load
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $logs = $wpdb->get_results($wpdb->prepare("SELECT * FROM {$wpdb->prefix}lockspire_login_logs ORDER BY created_at DESC LIMIT %d", 50), ARRAY_A);
-        
-        // Cache for 5 minutes to reduce database load
-        wp_cache_set($cache_key, $logs, 'lockspire_logs', 300);
-    }
-    
-    $filename = 'login-logs-' . gmdate('Y-m-d') . '.csv';
-    header('Content-Type: text/csv');
-    header('Content-Disposition: attachment; filename="' . $filename . '"');
-    
-    $output = fopen('php://output', 'w');
-    
-    // CSV headers
-    fputcsv($output, ['Time', 'IP Address', 'Username', 'Status', 'Attempts']);
-    
-    // CSV data
-    foreach ($logs as $log) {
-        fputcsv($output, [
-            $log['created_at'],
-            $log['ip_address'],
-            $log['username'],
-            $log['status'],
-            $log['attempts']
-        ]);
-    }
-    
-    // Use WP_Filesystem instead of direct file operations
-    if (function_exists('WP_Filesystem')) {
-        WP_Filesystem();
-        global $wp_filesystem;
-        // For CSV export, we need to handle the output stream properly
-        // Since we're dealing with php://output, we'll let PHP handle the stream closing
-        // The exit() call will properly close the stream
-    }
-    exit;
-}
-
-function lockspire_ajax_download_logs() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_die('Unauthorized');
-    }
-    
-    // Same as export but with different filename
-    lockspire_ajax_export_logs();
-}

lockspire-smart-access-protection/trunk/includes/attempt-handler.php

@@ -1 +1 @@
 <?php
-if ( ! defined( 'ABSPATH' ) ) exit;
+/**
+ * Login Attempt Handler for Lockspire - Documentation File
+ * 
+ * Methods implemented in Lockspire_Security class:
+ * - public function handle_login_failed($username)
+ * - public function custom_login_error_message($error)
+ * - public function check_login_attempts($username)
+ * 
+ * Actual code is in lockspire-security.php
+ */
 
-// Hook into login process
-add_action('wp_login_failed', 'lockspire_track_failed_login');
-add_filter('authenticate', 'lockspire_check_login_limit', 30, 3);
-add_action('login_head', 'lockspire_add_timer_script');
-add_action('wp_login', 'lockspire_track_successful_login', 10, 2);
-add_filter('login_errors', 'lockspire_show_remaining_attempts');
-
-function lockspire_track_failed_login($username) {
-    // Validate and sanitize IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($_SERVER['REMOTE_ADDR'])) {
-        return;
-    }
-    $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR']));
-    
-    // Check if IP is blacklisted
-    if (lockspire_is_ip_blacklisted($ip)) {
-        lockspire_log_login_attempt($ip, $username, 'blocked', 1);
-        wp_die('Access denied. Your IP address has been blocked.');
-    }
-    
-    // Check country blocking
-    $country = lockspire_get_ip_country($ip);
-    if ($country && lockspire_is_country_blocked($country)) {
-        lockspire_log_login_attempt($ip, $username, 'country_blocked', 1);
-        wp_die('Access denied. Login attempts from your country are not allowed.');
-    }
-    
-    $attempts = get_transient('lockspire_' . $ip) ?: 0;
-    $attempts++;
-    
-    $lockout_time = 60 * get_option('lockspire_lockout_time', 15);
-    set_transient('lockspire_' . $ip, $attempts, $lockout_time);
-    
-    // Log the failed attempt
-    lockspire_log_login_attempt($ip, $username, 'failed', $attempts);
-    
-    // Set lockout if max attempts reached
-    if ($attempts >= get_option('lockspire_max_attempts', 5)) {
-        $lockout_until = time() + $lockout_time;
-        set_transient('lockspire_lockout_' . $ip, $lockout_until, $lockout_time);
-        
-        // Log the lockout
-        lockspire_log_login_attempt($ip, $username, 'locked', $attempts);
-        
-        // Trigger notification hook
-        do_action('lockspire_user_locked_out', $ip, $username, $attempts);
-    }
-}
-
-function lockspire_track_successful_login($user_login, $user) {
-    // Validate and sanitize IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($_SERVER['REMOTE_ADDR'])) {
-        return;
-    }
-    $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR']));
-    
-    // Clear any failed attempts for this IP
-    delete_transient('lockspire_' . $ip);
-    delete_transient('lockspire_lockout_' . $ip);
-    
-    // Log successful login
-    lockspire_log_login_attempt($ip, $user_login, 'success', 1);
-}
-
-function lockspire_check_login_limit($user, $username, $password) {
-    // Validate and sanitize IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($_SERVER['REMOTE_ADDR'])) {
-        return $user;
-    }
-    $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR']));
-    
-    // Check if IP is whitelisted
-    if (lockspire_is_ip_whitelisted($ip)) {
-        return $user;
-    }
-    
-    // Check if IP is blacklisted
-    if (lockspire_is_ip_blacklisted($ip)) {
-        return new WP_Error(
-            'ip_blocked',
-            __('Your IP address has been blocked from accessing this site.', 'lockspire-smart-access-protection')
-        );
-    }
-    
-    // Check country blocking
-    $country = lockspire_get_ip_country($ip);
-    if ($country && lockspire_is_country_blocked($country)) {
-        return new WP_Error(
-            'country_blocked',
-            __('Login attempts from your country are not allowed.', 'lockspire-smart-access-protection')
-        );
-    }
-    
-    $attempts = get_transient('lockspire_' . $ip);
-    $max_attempts = get_option('lockspire_max_attempts', 5);
-    
-    if ($attempts && $attempts >= $max_attempts) {
-        $lockout_until = get_transient('lockspire_lockout_' . $ip);
-        $time_left = $lockout_until - time();
-        
-        if ($time_left > 0) {
-            // Format time left for display
-            $minutes = floor($time_left / 60);
-            $seconds = $time_left % 60;
-            $time_display = sprintf('%02d:%02d', $minutes, $seconds);
-            
-            // Get custom message or use default
-            $message = get_option('lockspire_lockout_message', __('Too many login attempts. Please try again later.', 'lockspire-smart-access-protection'));
-            
-            // Replace [timer] placeholder with actual timer
-            if (strpos($message, '[timer]') !== false) {
-                $message = str_replace('[timer]', '<span id="lockspire-timer">' . $time_display . '</span>', $message);
-            } else {
-                $message .= ' ' . __('You can try again in', 'lockspire-smart-access-protection') . ' <span id="lockspire-timer">' . $time_display . '</span>.';
-            }
-            
-            return new WP_Error(
-                'too_many_attempts',
-                __('Error: ', 'lockspire-smart-access-protection') . $message
-            );
-        }
-    }
-    
-    return $user;
-}
-
-function lockspire_add_timer_script() {
-    // Validate and sanitize IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($_SERVER['REMOTE_ADDR'])) {
-        return;
-    }
-    $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR']));
-    
-    $lockout_until = get_transient('lockspire_lockout_' . $ip);
-    
-    if ($lockout_until) {
-        $time_left = $lockout_until - time();
-        
-        // Only add the script if there's an active lockout
-        if ($time_left > 0) {
-            // Register a dummy script handle if not already registered
-            if (!wp_script_is('lockspire-timer-script', 'registered')) {
-                wp_register_script('lockspire-timer-script', '', [], '1.0', true);
-            }
-            
-            // Enqueue the script
-            wp_enqueue_script('lockspire-timer-script');
-            
-            // Add inline script
-            $inline_script = "
-            document.addEventListener('DOMContentLoaded', function() {
-                var timerElement = document.getElementById('lockspire-timer');
-                if (!timerElement) return;
-                
-                var timeLeft = " . esc_js($time_left) . ";
-                
-                function updateTimer() {
-                    if (timeLeft <= 0) {
-                        timerElement.innerHTML = '00:00';
-                        setTimeout(function() {
-                            location.reload();
-                        }, 1000);
-                        return;
-                    }
-                    
-                    var minutes = Math.floor(timeLeft / 60);
-                    var seconds = timeLeft % 60;
-                    
-                    timerElement.innerHTML = 
-                        (minutes < 10 ? '0' + minutes : minutes) + ':' + 
-                        (seconds < 10 ? '0' + seconds : seconds);
-                    
-                    timeLeft--;
-                    setTimeout(updateTimer, 1000);
-                }
-                
-                updateTimer();
-            });";
-            
-            wp_add_inline_script('lockspire-timer-script', $inline_script);
-        }
-    }
-}
-
-function lockspire_show_remaining_attempts($errors) {
-    // Validate and sanitize IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($_SERVER['REMOTE_ADDR'])) {
-        return $errors;
-    }
-    $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR']));
-    
-    // Check if IP is whitelisted
-    if (lockspire_is_ip_whitelisted($ip)) {
-        return $errors;
-    }
-    
-    $attempts = get_transient('lockspire_' . $ip);
-    $max_attempts = get_option('lockspire_max_attempts', 5);
-    
-    // If there are attempts but not locked out yet, show remaining attempts
-    if ($attempts && $attempts < $max_attempts) {
-        $remaining = $max_attempts - $attempts;
-        $attempts_word = _n('attempt', 'attempts', $remaining, 'lockspire-smart-access-protection');
-        
-        $remaining_message = sprintf(
-            /* translators: %1$d: remaining number of attempts, %2$s: attempts word (attempt/attempts) */
-            __('You have %1$d %2$s remaining.', 'lockspire-smart-access-protection'),
-            $remaining,
-            $attempts_word
-        );
-        
-        // Handle different input types and always return a string
-        if (is_wp_error($errors)) {
-            $error_message = $errors->get_error_message();
-            return $error_message . '<br><strong>' . $remaining_message . '</strong>';
-        } elseif (is_string($errors)) {
-            return $errors . '<br><strong>' . $remaining_message . '</strong>';
-        } else {
-            return __('The password you entered for the username is incorrect.', 'lockspire-smart-access-protection') . '<br><strong>' . $remaining_message . '</strong>';
-        }
-    }
-    
-    return $errors;
-}
+/**
+ * Login Attempt Handler for Lockspire
+ * Documentation file - Method reference
+ * 
+ * These methods are implemented as part of the Lockspire_Security class.
+ * See lockspire-security.php for the actual code implementations.
+ * 
+ * ======= METHODS =======
+ * 
+ * public function handle_login_failed($username)
+ *     Handles failed login attempt for a user
+ *     - Gets client IP: $this->get_user_ip()
+ *     - Tracks attempts using transient key: $this->login_attempts_key
+ *     - Stores with settings: $this->options['lockout_time']
+ *     - Sends notification: $this->send_failed_login_notification()
+ * 
+ * public function custom_login_error_message($error)
+ *     Customizes WordPress login error messages
+ *     - Displays custom error with attempt count
+ *     - Shows remaining time until account unlock
+ *     - Styled HTML output with security information
+ * 
+ * public function check_login_attempts($username)
+ *     Validates login before WordPress authentication (wp_authenticate hook, 1)
+ *     - Checks transient: get_transient($this->login_attempts_key . '_' . $ip)
+ *     - Compares count against: $this->options['max_login_attempts']
+ *     - Blocks login with 429 Too Many Requests response if exceeded
+ *     - Clears attempts when lock period expires
+ * 
+ * ======= DEPENDENCIES =======
+ * - Uses hooks: wp_login_failed, wp_authenticate
+ * - Uses transients for rate limiting (automatically expire)
+ * - Uses WordPress nonces for security
+ * - Uses email notification system for alerts
+ * 
+ * ======= CONFIGURATION =======
+ * Settings stored in: $this->options
+ *   - 'login_limit_enabled' : enable/disable feature
+ *   - 'max_login_attempts' : number of allowed attempts
+ *   - 'lockout_time'       : lockout period in minutes
+ */

lockspire-smart-access-protection/trunk/includes/database.php

@@ -1 +1 @@
 <?php
-if ( ! defined( 'ABSPATH' ) ) exit;
-
-// Ensure table is created on admin init (backup for activation hook)
-add_action('admin_init', 'lockspire_ensure_database_table');
-
-function lockspire_ensure_database_table() {
-    // Only run on our plugin pages to avoid performance issues
-    if (isset($_GET['page']) && strpos(sanitize_text_field(wp_unslash($_GET['page'])), 'lockspire') !== false) {
-        // Verify nonce for security
-        if (isset($_GET['_wpnonce']) && wp_verify_nonce(sanitize_text_field(wp_unslash($_GET['_wpnonce'])), 'lockspire_admin_nonce')) {
-            lockspire_create_database_table();
-        }
-    }
-}
-
-// Create database table on activation
-function lockspire_create_database_table() {
+/**
+ * Database Operations - Documentation File
+ * Methods: get_recent_login_attempts(), get_locked_ips(), get_email_stats()
+ * Implementation: lockspire-smart-access-protection.php
+ */
+
+// Prevent direct access
+if (!defined('ABSPATH')) {
+    exit;
+}
+
+// Get recent login attempts
+function lockspire_get_recent_login_attempts() {
+    $lockspire_attempts = array();
+    
+    // Try to get from cache first
+    $cache_key = 'lockspire_recent_login_attempts';
+    $cached_attempts = wp_cache_get($cache_key);
+    
+    if ($cached_attempts !== false) {
+        return $cached_attempts;
+    }
+    
+    // Get all transients using WordPress function
     global $wpdb;
-    
-    $table_name = $wpdb->prefix . 'lockspire_login_logs';
-    $charset_collate = $wpdb->get_charset_collate();
-    
-    $sql = "CREATE TABLE $table_name (
-        id mediumint(9) NOT NULL AUTO_INCREMENT,
-        ip_address varchar(45) NOT NULL,
-        username varchar(60) NOT NULL,
-        status varchar(20) NOT NULL,
-        attempts int(3) NOT NULL DEFAULT 1,
-        user_agent text,
-        created_at datetime DEFAULT CURRENT_TIMESTAMP,
-        PRIMARY KEY  (id),
-        KEY ip_address (ip_address),
-        KEY status (status),
-        KEY created_at (created_at)
-    ) $charset_collate;";
-    
-    require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
-    dbDelta($sql);
-    
-    // Debug: Log table creation (remove in production)
-    // error_log('LAL Debug: Database table creation attempted for ' . $table_name);
-}
-
-// Log login attempt
-function lockspire_log_login_attempt($ip, $username, $status, $attempts = 1) {
+    $transient_names = $wpdb->get_col(
+        "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_transient_lockspire_login_attempts_%'"
+    );
+    
+    foreach ($transient_names as $transient_name) {
+        // Remove the _transient_ prefix to get the actual transient key
+        $transient_key = str_replace('_transient_', '', $transient_name);
+        $data = get_transient($transient_key);
+        
+        if (is_array($data) && !empty($data)) {
+            $ip = str_replace('lockspire_login_attempts_', '', $transient_key);
+            $last_attempt = end($data);
+            $lockspire_attempts[$ip] = array(
+                'username' => $last_attempt['username'],
+                'attempts' => count($data),
+                'last_attempt' => gmdate('Y-m-d H:i:s', $last_attempt['time']),
+                'locked' => count($data) >= 5 // Default max attempts
+            );
+        }
+    }
+    
+    // Cache for 5 minutes
+    wp_cache_set($cache_key, $lockspire_attempts, '', 300);
+    
+    return $lockspire_attempts;
+}
+
+// Get locked IPs
+function lockspire_get_locked_ips() {
+    $locked = array();
+    $attempts = lockspire_get_recent_login_attempts();
+    
+    foreach ($attempts as $ip => $data) {
+        if ($data['locked']) {
+            $unlock_time = time() + (intval($this->options['lockout_time']) * 60);
+            $locked[$ip] = array(
+                'attempts' => $data['attempts'],
+                'unlock_time' => gmdate('Y-m-d H:i:s', $unlock_time)
+            );
+        }
+    }
+    
+    return $locked;
+}
+
+// Get email statistics
+function lockspire_get_email_stats() {
+    $email_logs = get_option('lockspire_email_logs', array());
+    $today = gmdate('Y-m-d');
+    
+    $stats = array(
+        'total_sent' => count($email_logs),
+        'login_alerts' => 0,
+        'failed_attempts' => 0,
+        'today' => 0
+    );
+    
+    foreach ($email_logs as $log) {
+        if ($log['type'] === 'login') {
+            $stats['login_alerts']++;
+        } elseif ($log['type'] === 'failed_login') {
+            $stats['failed_attempts']++;
+        }
+        
+        if (gmdate('Y-m-d', strtotime($log['time'])) === $today) {
+            $stats['today']++;
+        }
+    }
+    
+    return $stats;
+}
+
+// Get blocked requests today
+function lockspire_get_blocked_requests_today() {
+    $blocked = get_option('lockspire_blocked_today', 0);
+    return $blocked;
+}
+
+// Get today's login attempts count
+function lockspire_get_today_login_attempts() {
+    // Try to get from cache first
+    $cache_key = 'lockspire_today_login_attempts_' . gmdate('Y-m-d');
+    $cached_count = wp_cache_get($cache_key);
+    
+    if ($cached_count !== false) {
+        return $cached_count;
+    }
+    
+    $attempts = 0;
+    $today = gmdate('Y-m-d');
+    
+    // Get all transients using WordPress function
     global $wpdb;
-    
-    // Ensure table exists
-    $table_name = $wpdb->prefix . 'lockspire_login_logs';
-    lockspire_create_database_table();
-    
-    // Validate inputs
-    if (empty($ip) || empty($username) || empty($status)) {
-        if (defined('WP_DEBUG') && WP_DEBUG) {
-            // Use WordPress error logging in debug mode
-            $error_message = 'LAL Error: Missing required fields for log entry';
-            // Only log if wp_error_log is available to avoid debug function warnings
-            if (function_exists('wp_error_log')) {
-                wp_error_log($error_message);
-            }
-        }
-        return false;
-    }
-    
-    $data = [
-        'ip_address' => sanitize_text_field($ip),
-        'username' => sanitize_text_field($username),
-        'status' => sanitize_text_field($status),
-        'attempts' => intval($attempts),
-        'user_agent' => isset($_SERVER['HTTP_USER_AGENT']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT'])) : '',
-        'created_at' => current_time('mysql')
-    ];
-    
-    // Validate status
-    $valid_statuses = ['success', 'failed', 'locked', 'blocked'];
-    if (!in_array($data['status'], $valid_statuses)) {
-        $data['status'] = 'failed'; // Default to failed if invalid
-    }
-    
-    try {
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $result = $wpdb->insert($table_name, $data);
+    $transient_names = $wpdb->get_col(
+        "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_transient_lockspire_login_attempts_%'"
+    );
+    
+    foreach ($transient_names as $transient_name) {
+        // Remove the _transient_ prefix to get the actual transient key
+        $transient_key = str_replace('_transient_', '', $transient_name);
+        $data = get_transient($transient_key);
         
-        if ($result === false) {
-            if (defined('WP_DEBUG') && WP_DEBUG) {
-                // Use WordPress error logging in debug mode
-                $error_message = 'LAL Error: Failed to insert log entry - ' . $wpdb->last_error;
-                // Only log if wp_error_log is available to avoid debug function warnings
-                if (function_exists('wp_error_log')) {
-                    wp_error_log($error_message);
+        if (is_array($data)) {
+            foreach ($data as $attempt) {
+                if (isset($attempt['time']) && gmdate('Y-m-d', $attempt['time']) === $today) {
+                    $attempts++;
                 }
             }
-            return false;
-        }
-        
-        // Clear related caches to ensure fresh data
-        wp_cache_delete('lockspire_stats_today', 'lockspire_logs');
-        wp_cache_delete('lockspire_recent_logs_50', 'lockspire_logs');
-        
-        // Clean old logs (keep last 30 days)
-        lockspire_cleanup_old_logs();
-        
-        return $result;
-    } catch (Exception $e) {
-        if (defined('WP_DEBUG') && WP_DEBUG) {
-            // Use WordPress error logging in debug mode
-            $error_message = 'LAL Exception: ' . $e->getMessage();
-            // Only log if wp_error_log is available to avoid debug function warnings
-            if (function_exists('wp_error_log')) {
-                wp_error_log($error_message);
-            }
-        }
-        return false;
-    }
-}
-
-// Clean old logs to prevent database bloat
-function lockspire_cleanup_old_logs() {
-    global $wpdb;
-    
-    $table_name = sanitize_text_field($wpdb->prefix . 'lockspire_login_logs');
-    $cutoff_date = gmdate('Y-m-d H:i:s', strtotime('-30 days'));
-    
-    // Check cache first
-    $cache_key = 'lockspire_cleanup_last_run';
-    $last_cleanup = wp_cache_get($cache_key, 'lockspire_logs');
-    
-    // Only run cleanup once per hour
-    if ($last_cleanup && (time() - $last_cleanup) < 3600) {
-        return;
-    }
-    
-    // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-    $wpdb->query($wpdb->prepare(
-        "DELETE FROM {$wpdb->prefix}lockspire_login_logs WHERE created_at < %s",
-        $cutoff_date
-    ));
-    wp_cache_set($cache_key, time(), 'lockspire_logs', 3600);
-    
-    // Clear related caches
-    wp_cache_delete('lockspire_stats_today', 'lockspire_logs');
-    wp_cache_delete('lockspire_recent_logs_50', 'lockspire_logs');
-}
-
-// Get security statistics
-function lockspire_get_security_stats() {
-    global $wpdb;
-    
-    // Try cache first
-    $cache_key = 'lockspire_stats_today';
-    $stats = wp_cache_get($cache_key, 'lockspire_logs');
-    
-    if ($stats === false) {
-        $table_name = sanitize_text_field($wpdb->prefix . 'lockspire_login_logs');
-        $today = gmdate('Y-m-d');
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $total_attempts = $wpdb->get_var($wpdb->prepare(
-            "SELECT COUNT(*) FROM {$wpdb->prefix}lockspire_login_logs WHERE DATE(created_at) = %s",
-            $today
+        }
+    }
+    
+    // Cache for 5 minutes
+    wp_cache_set($cache_key, $attempts, '', 300);
+    
+    return $attempts;
+}
+
+// Get active threats count
+function lockspire_get_active_threats() {
+    $threats = 0;
+    
+    // Count blocked IPs
+    $blocked_ips = get_option('lockspire_blocked_ips', array());
+    $threats += count($blocked_ips);
+    
+    // Count recent failed login attempts
+    $threats += lockspire_get_today_login_attempts();
+    
+    return $threats;
+}
+
+// Activity logging
+function lockspire_log_login_activity($user_login, $user) {
+    $log_entry = array(
+        'user_login' => $user_login,
+        'user_role' => implode(', ', $user->roles),
+        'ip' => lockspire_get_user_ip(),
+        'time' => current_time('mysql'),
+        'user_agent' => sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT'] ?? 'Unknown'))
+    );
+    
+    $activity_log = get_option('lockspire_activity_log', array());
+    array_unshift($activity_log, $log_entry);
+    
+    // Keep only last 10 entries
+    $activity_log = array_slice($activity_log, 0, 10);
+    
+    update_option('lockspire_activity_log_key', $activity_log);
+}
+
+// Export activity log as CSV
+function lockspire_export_activity_log() {
+    $activity_log = get_option('lockspire_activity_log_key', array());
+    
+    header('Content-Type: text/csv');
+    header('Content-Disposition: attachment; filename="lockspire-activity-log.csv"');
+    
+    $output = fopen('php://output', 'w');
+    
+    // CSV header
+    fputcsv($output, array('User Login', 'User Role', 'IP Address', 'Time', 'User Agent'));
+    
+    // CSV data
+    foreach ($activity_log as $event) {
+        fputcsv($output, array(
+            $event['user_login'],
+            $event['user_role'],
+            $event['ip'],
+            $event['time'],
+            $event['user_agent']
         ));
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $failed_attempts = $wpdb->get_var($wpdb->prepare(
-            "SELECT COUNT(*) FROM {$wpdb->prefix}lockspire_login_logs WHERE DATE(created_at) = %s AND status = %s",
-            $today,
-            'failed'
-        ));
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $transients = $wpdb->get_col($wpdb->prepare(
-            "SELECT option_name FROM `{$wpdb->options}` WHERE option_name LIKE %s AND option_value > %d",
-            'lockspire_lockout_%',
-            time()
-        ));
-        $locked_ips = count($transients);
-        
-        $blocked_ips = count(array_filter(explode(',', get_option('lockspire_blacklist_ips', ''))));
-        
-        // Note: $wpdb->get_var() is the proper WordPress method for single value queries
-        // Direct database query is necessary here for statistics - no WordPress core function provides this data
-        // Query is properly prepared and cached to minimize database load
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $last_attack = $wpdb->get_var($wpdb->prepare(
-            "SELECT created_at FROM {$wpdb->prefix}lockspire_login_logs WHERE status = %s ORDER BY created_at DESC LIMIT 1",
-            'failed'
-        ));
-        
-        // Note: $wpdb->get_row() is the proper WordPress method for row queries
-        // Direct database query is necessary here for statistics - no WordPress core function provides this data
-        // Query is properly cached to minimize database load
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $most_active_ip = $wpdb->get_row(
-            "SELECT ip_address, COUNT(*) as count FROM {$wpdb->prefix}lockspire_login_logs GROUP BY ip_address ORDER BY count DESC LIMIT 1"
-        );
-        
-        $stats = [
-            'total_attempts' => intval($total_attempts),
-            'failed_attempts' => intval($failed_attempts),
-            'locked_ips' => intval($locked_ips),
-            'blocked_ips' => intval($blocked_ips),
-            'last_attack' => $last_attack,
-            'most_active_ip' => $most_active_ip ? $most_active_ip->ip_address : null
-        ];
-        
-        // Cache for 5 minutes
-        wp_cache_set($cache_key, $stats, 'lockspire_logs', 300);
-    }
-    
-    return $stats;
-}
-
-function lockspire_test_log_function() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_send_json_error('Unauthorized');
-        return;
-    }
-    
-    global $wpdb;
-    $table_name = $wpdb->prefix . 'lockspire_login_logs';
-    
-    // Create table if it doesn't exist
-    require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
-    $charset_collate = $wpdb->get_charset_collate();
-    $sql = "CREATE TABLE $table_name (
-        id mediumint(9) NOT NULL AUTO_INCREMENT,
-        ip_address varchar(45) NOT NULL,
-        username varchar(60) NOT NULL,
-        status varchar(20) NOT NULL,
-        attempts int(3) NOT NULL DEFAULT 1,
-        user_agent text,
-        created_at datetime DEFAULT CURRENT_TIMESTAMP,
-        PRIMARY KEY  (id),
-        KEY ip_address (ip_address),
-        KEY status (status),
-        KEY created_at (created_at)
-    ) $charset_collate;";
-    dbDelta($sql);
-    
-    // Get IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($_SERVER['REMOTE_ADDR'])) {
-        $ip = '127.0.0.1';
-    } else {
-        $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR']));
-    }
-    
-    try {
-        // Create test entries directly
-        $test_entries = [
-            ['username' => 'test_user_1', 'status' => 'failed', 'attempts' => 1],
-            ['username' => 'test_user_2', 'status' => 'failed', 'attempts' => 2],
-            ['username' => 'test_user_3', 'status' => 'failed', 'attempts' => 3],
-            ['username' => 'test_user_4', 'status' => 'locked', 'attempts' => 5],
-            ['username' => 'admin_user', 'status' => 'success', 'attempts' => 1]
-        ];
-        
-        $created_count = 0;
-        foreach ($test_entries as $entry) {
-            $data = [
-                'ip_address' => $ip,
-                'username' => sanitize_text_field($entry['username']),
-                'status' => sanitize_text_field($entry['status']),
-                'attempts' => intval($entry['attempts']),
-                'user_agent' => 'Test Log Function',
-                'created_at' => current_time('mysql')
-            ];
-            
-            // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-            $result = $wpdb->insert($table_name, $data);
-            if ($result !== false) {
-                $created_count++;
-            }
-        }
-        
-        if ($created_count > 0) {
-            // Clear caches
-            wp_cache_delete('lockspire_stats_today', 'lockspire_logs');
-            wp_cache_delete('lockspire_recent_logs_50', 'lockspire_logs');
-            
-            wp_send_json_success("Created {$created_count} test log entries successfully");
-        } else {
-            wp_send_json_error('Failed to create test log entries');
-        }
-    } catch (Exception $e) {
-        wp_send_json_error('Error creating test logs: ' . $e->getMessage());
-    }
-}
-
-// Get recent logs
-function lockspire_get_recent_logs($limit = 50) {
-    global $wpdb;
-    
-    $table_name = sanitize_text_field($wpdb->prefix . 'lockspire_login_logs');
-    $limit = intval($limit);
-    
-    // Create cache key based on limit
-    $cache_key = 'lockspire_recent_logs_' . $limit;
-    $logs = wp_cache_get($cache_key, 'lockspire_logs');
-    
-    if ($logs === false) {
-        // Note: $wpdb->get_results() is the proper WordPress method for multiple row queries
-        // Direct database query is necessary here for log retrieval - no WordPress core function provides this data
-        // Query is properly prepared and cached to minimize database load
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $logs = $wpdb->get_results($wpdb->prepare(
-            "SELECT * FROM {$wpdb->prefix}lockspire_login_logs ORDER BY created_at DESC LIMIT %d",
-            $limit
-        ), ARRAY_A);
-        
-        // Cache for 3 minutes
-        wp_cache_set($cache_key, $logs, 'lockspire_logs', 180);
-    }
-    
-    return $logs;
-}
-
-// Check if IP is blacklisted
-function lockspire_is_ip_blacklisted($ip) {
-    $blacklist = get_option('lockspire_blacklist_ips', '');
-    if (empty($blacklist)) {
-        return false;
-    }
-    
-    $blacklisted_ips = array_map('trim', explode(',', $blacklist));
-    return in_array(sanitize_text_field($ip), $blacklisted_ips);
-}
-
-// Check if IP is whitelisted
-function lockspire_is_ip_whitelisted($ip) {
-    $whitelist = get_option('lockspire_whitelist_ips', '');
-    if (empty($whitelist)) {
-        return false;
-    }
-    
-    $whitelisted_ips = array_map('trim', explode(',', $whitelist));
-    return in_array($ip, $whitelisted_ips);
-}
-
-// Get country from IP (basic implementation)
-function lockspire_get_ip_country($ip) {
-    // Validate IP address
-    if (!isset($_SERVER['REMOTE_ADDR']) || empty($ip)) {
-        return null;
-    }
-    
-    $sanitized_ip = sanitize_text_field($ip);
-    
-    // This is a basic implementation. In production, you might want to use a proper GeoIP service
-    if (function_exists('geoip_country_code_by_name')) {
-        return geoip_country_code_by_name($sanitized_ip);
-    }
-    
-    // Fallback: return null for now
-    return null;
-}
-
-// Check if country is blocked
-function lockspire_is_country_blocked($country_code) {
-    if (!get_option('lockspire_enable_country_blocking', 0)) {
-        return false;
-    }
-    
-    $blocked_countries = get_option('lockspire_blocked_countries', '');
-    if (empty($blocked_countries)) {
-        return false;
-    }
-    
-    $blocked = array_map('trim', explode(',', $blocked_countries));
-    return in_array(strtoupper($country_code), $blocked);
-}
+    }
+    
+    global $wp_filesystem;
+    if (empty($wp_filesystem)) {
+        require_once(ABSPATH . '/wp-admin/includes/file.php');
+        WP_Filesystem();
+    }
+    $wp_filesystem->put_contents('php://output', '', false); // Close the output stream
+    exit;
+}
+
+// Get user IP address
+function lockspire_get_user_ip() {
+    $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR'] ?? ''));
+    
+    if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
+        $ip = sanitize_text_field(wp_unslash($_SERVER['HTTP_CLIENT_IP']));
+    } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
+        $ip = sanitize_text_field(wp_unslash($_SERVER['HTTP_X_FORWARDED_FOR']));
+    }
+    
+    return $ip;
+}
+
+// Get default firewall rules
+function lockspire_get_default_firewall_rules() {
+    return array(
+        'block_bad_bots' => array(
+            'name' => 'Block Bad Bots',
+            'description' => 'Block known malicious bots and crawlers',
+            'enabled' => true,
+            'severity' => 'high'
+        ),
+        'block_sql_injection' => array(
+            'name' => 'Block SQL Injection',
+            'description' => 'Block common SQL injection patterns',
+            'enabled' => true,
+            'severity' => 'critical'
+        ),
+        'block_xss' => array(
+            'name' => 'Block XSS Attacks',
+            'description' => 'Block cross-site scripting attempts',
+            'enabled' => true,
+            'severity' => 'high'
+        ),
+        'block_directory_traversal' => array(
+            'name' => 'Block Directory Traversal',
+            'description' => 'Block directory traversal attacks',
+            'enabled' => true,
+            'severity' => 'medium'
+        ),
+        'block_file_inclusion' => array(
+            'name' => 'Block File Inclusion',
+            'description' => 'Block local and remote file inclusion attempts',
+            'enabled' => true,
+            'severity' => 'high'
+        )
+    );
+}

lockspire-smart-access-protection/trunk/includes/notifications.php

@@ -1 +1 @@
 <?php
-if ( ! defined( 'ABSPATH' ) ) exit;
-
-// Send admin notification on lockout
-add_action('lockspire_user_locked_out', 'lockspire_send_lockout_notification', 10, 3);
-
-function lockspire_send_lockout_notification($ip, $username, $attempts) {
-    if (!get_option('lockspire_notify_admin', 0)) {
-        return;
+/**
+ * Notifications Handler for Lockspire - Documentation File
+ * 
+ * Methods in Lockspire_Security class:
+ * - public function send_admin_login_notification($user_login, $user)
+ * - public function send_failed_login_notification($username, $ip)
+ * - private function get_email_template($user_login, $user, $type, $ip = '')
+ * - private function log_email_sent($type, $recipient, $subject, $status = 'sent')
+ * 
+ * Actual implementation is in lockspire-smart-access-protection.php
+ */
+
+// Prevent direct access
+if (!defined('ABSPATH')) {
+    exit;
+}
+
+// Example implementation with proper naming conventions
+function lockspire_send_admin_login_notification($user_login, $user) {
+    if ($this->options['email_notifications']) {
+        $lockspire_subject = sprintf('[%s] Security Alert: New Login Detected', get_bloginfo('name'));
+        
+        $lockspire_message = $this->get_email_template($user_login, $user, 'login');
+        
+        // Send to admin email
+        $lockspire_admin_email = get_option('admin_email');
+        $lockspire_headers = array('Content-Type: text/html; charset=UTF-8');
+        
+        $lockspire_result = wp_mail($lockspire_admin_email, $lockspire_subject, $lockspire_message, $lockspire_headers);
+        $this->log_email_sent('login', $lockspire_admin_email, $lockspire_subject, $lockspire_result ? 'sent' : 'failed');
+        
+        // Also send to custom notification emails if set
+        $lockspire_notification_emails = get_option('lockspire_notification_emails', '');
+        if (!empty($lockspire_notification_emails)) {
+            $lockspire_emails = array_map('trim', explode(',', $lockspire_notification_emails));
+            foreach ($lockspire_emails as $lockspire_email) {
+                if (is_email($lockspire_email)) {
+                    $lockspire_result = wp_mail($lockspire_email, $lockspire_subject, $lockspire_message, $lockspire_headers);
+                    $this->log_email_sent('login', $lockspire_email, $lockspire_subject, $lockspire_result ? 'sent' : 'failed');
+                }
+            }
+        }
     }
-    
-    // Check notification threshold
-    $threshold = get_option('lockspire_notify_threshold', 3);
-    $today = gmdate('Y-m-d');
-    $lockout_count = lockspire_get_today_lockout_count();
-    
-    if ($lockout_count < $threshold) {
-        return;
+}
+
+// Failed login notification
+function lockspire_send_failed_login_notification($username, $ip) {
+    if ($this->options['email_notifications']) {
+        $lockspire_subject = sprintf('[%s] 🚨 Security Alert: Failed Login Attempt', get_bloginfo('name'));
+        
+        $lockspire_message = $this->get_email_template($username, null, 'failed_login', $ip);
+        
+        $lockspire_admin_email = get_option('admin_email');
+        $lockspire_headers = array('Content-Type: text/html; charset=UTF-8');
+        
+        $lockspire_result = wp_mail($lockspire_admin_email, $lockspire_subject, $lockspire_message, $lockspire_headers);
+        $this->log_email_sent('failed_login', $lockspire_admin_email, $lockspire_subject, $lockspire_result ? 'sent' : 'failed');
+        
+        // Also send to custom notification emails
+        $lockspire_notification_emails = get_option('lockspire_notification_emails', '');
+        if (!empty($lockspire_notification_emails)) {
+            $lockspire_emails = array_map('trim', explode(',', $lockspire_notification_emails));
+            foreach ($lockspire_emails as $lockspire_email) {
+                if (is_email($lockspire_email)) {
+                    $lockspire_result = wp_mail($lockspire_email, $lockspire_subject, $lockspire_message, $lockspire_headers);
+                    $this->log_email_sent('failed_login', $lockspire_email, $lockspire_subject, $lockspire_result ? 'sent' : 'failed');
+                }
+            }
+        }
     }
-    
-    $admin_email = get_option('lockspire_admin_email', get_option('admin_email'));
-    $subject = '🚨 Security Alert: Multiple Login Lockouts Detected';
-    
-    $message = lockspire_get_notification_email_content($ip, $username, $attempts, $lockout_count);
-    
-    $headers = ['Content-Type: text/html; charset=UTF-8'];
-    
-    wp_mail($admin_email, $subject, $message, $headers);
-}
-
-function lockspire_get_notification_email_content($ip, $username, $attempts, $total_lockouts) {
-    $site_name = get_bloginfo('name');
-    $site_url = home_url();
-    $admin_url = admin_url('admin.php?page=lockspire');
-    
-    ob_start();
-    ?>
-    <!DOCTYPE html>
-    <html>
-    <head>
-        <meta charset="UTF-8">
-        <title>Security Alert</title>
-        <style>
-            body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; }
-            .container { max-width: 600px; margin: 0 auto; padding: 20px; }
-            .header { background: #dc3545; color: white; padding: 20px; text-align: center; }
-            .content { padding: 20px; background: #f8f9fa; }
-            .alert { background: #fff3cd; border: 1px solid #ffeaa7; padding: 15px; border-radius: 5px; margin: 20px 0; }
-            .stats { background: white; padding: 15px; border-radius: 5px; margin: 20px 0; }
-            .button { display: inline-block; background: #007bff; color: white; padding: 10px 20px; text-decoration: none; border-radius: 5px; }
-            .footer { background: #f8f9fa; padding: 20px; text-align: center; font-size: 12px; color: #666; }
-        </style>
-    </head>
-    <body>
-        <div class="container">
-            <div class="header">
-                <h1>🚨 Security Alert</h1>
-                <p>Multiple login lockouts detected on <?php echo esc_html($site_name); ?></p>
+}
+
+// Email template generator
+function lockspire_get_email_template($user_login, $user, $type, $ip = '') {
+    $lockspire_site_url = get_home_url();
+    $lockspire_site_name = get_bloginfo('name');
+    $lockspire_timestamp = current_time('mysql');
+    $lockspire_user_ip = $ip ?: $this->get_user_ip();
+    
+    if ($type === 'login') {
+        $lockspire_user_role = !empty($user->roles) ? implode(', ', $user->roles) : 'Unknown';
+        $lockspire_user_email = !empty($user->user_email) ? $user->user_email : 'Not available';
+        
+        $template = "
+        <!DOCTYPE html>
+        <html>
+        <head>
+            <meta charset='UTF-8'>
+            <title>Security Alert - Login Detected</title>
+            <style>
+                body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; line-height: 1.6; color: #333; }
+                .container { max-width: 600px; margin: 0 auto; padding: 20px; }
+                .header { background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; padding: 30px; text-align: center; border-radius: 10px 10px 0 0; }
+                .content { background: white; padding: 30px; border: 1px solid #e0e0e0; border-top: none; }
+                .footer { background: #f8f9fa; padding: 20px; text-align: center; border: 1px solid #e0e0e0; border-top: none; border-radius: 0 0 10px 10px; font-size: 12px; color: #666; }
+                .logo { font-size: 32px; margin-bottom: 10px; }
+                .alert-info { background: #e3f2fd; padding: 15px; border-left: 4px solid #2196f3; margin: 20px 0; border-radius: 4px; }
+                .user-details { background: #f8f9fa; padding: 15px; margin: 20px 0; border-radius: 4px; }
+                .detail-row { display: flex; justify-content: space-between; margin: 8px 0; }
+                .detail-label { font-weight: bold; color: #555; }
+                .security-tip { background: #fff3cd; padding: 15px; border-left: 4px solid #ffc107; margin: 20px 0; border-radius: 4px; }
+                .btn { display: inline-block; padding: 12px 24px; background: #667eea; color: white; text-decoration: none; border-radius: 6px; margin: 20px 0; }
+            </style>
+        </head>
+        <body>
+            <div class='container'>
+                <div class='header'>
+                    <div class='logo'>🛡️</div>
+                    <h1>Security Alert</h1>
+                    <p>Login Detected on Your Website</p>
+                </div>
+                <div class='content'>
+                    <div class='alert-info'>
+                        <strong>✅ Successful Login Detected</strong><br>
+                        A user has successfully logged into your WordPress site.
+                    </div>
+                    
+                    <div class='user-details'>
+                        <h3>👤 User Information</h3>
+                        <div class='detail-row'>
+                            <span class='detail-label'>Username:</span>
+                            <span>{$user_login}</span>
+                        </div>
+                        <div class='detail-row'>
+                            <span class='detail-label'>Role:</span>
+                            <span>{$user_role}</span>
+                        </div>
+                        <div class='detail-row'>
+                            <span class='detail-label'>Email:</span>
+                            <span>{$user_email}</span>
+                        </div>
+                        <div class='detail-row'>
+                            <span class='detail-label'>IP Address:</span>
+                            <span>{$user_ip}</span>
+                        </div>
+                        <div class='detail-row'>
+                            <span class='detail-label'>Time:</span>
+                            <span>{$timestamp}</span>
+                        </div>
+                    </div>
+                    
+                    <div class='security-tip'>
+                        <strong>🔒 Security Tip:</strong><br>
+                        If this wasn't you, please secure your account immediately by changing your password.
+                    </div>
+                    
+                    <center>
+                        <a href='{$site_url}/wp-admin/' class='btn'>Go to Dashboard</a>
+                    </center>
+                </div>
+                <div class='footer'>
+                    <p>This email was sent by Lockspire Security Plugin</p>
+                    <p>Site: {$site_name} ({$site_url})</p>
+                </div>
             </div>
-            
-            <div class="content">
-                <div class="alert">
-                    <h3>⚠️ Immediate Attention Required</h3>
-                    <p>Your website has detected suspicious login activity that may indicate a brute-force attack.</p>
-                </div>
-                
-                <div class="stats">
-                    <h3>📊 Activity Details</h3>
-                    <ul>
-                        <li><strong>IP Address:</strong> <?php echo esc_html($ip); ?></li>
-                        <li><strong>Username Attempted:</strong> <?php echo esc_html($username); ?></li>
-                        <li><strong>Failed Attempts:</strong> <?php echo esc_html($attempts); ?></li>
-                        <li><strong>Total Lockouts Today:</strong> <?php echo esc_html($total_lockouts); ?></li>
-                        <li><strong>Time:</strong> <?php echo esc_html(current_time('Y-m-d H:i:s')); ?></li>
-                    </ul>
-                </div>
-                
-                <h3>🔧 Recommended Actions</h3>
-                <ol>
-                    <li>Review the security dashboard for detailed information</li>
-                    <li>Consider blacklisting the IP if the activity continues</li>
-                    <li>Monitor your site for any unusual behavior</li>
-                    <li>Ensure all user passwords are strong</li>
-                </ol>
-                
-                <p style="text-align: center; margin: 30px 0;">
-                    <a href="<?php echo esc_url($admin_url); ?>" class="button">View Security Dashboard</a>
-                </p>
+        </body>
+        </html>";
+        
+    } elseif ($type === 'failed_login') {
+        $template = "
+        <!DOCTYPE html>
+        <html>
+        <head>
+            <meta charset='UTF-8'>
+            <title>Security Alert - Failed Login Attempt</title>
+            <style>
+                body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; line-height: 1.6; color: #333; }
+                .container { max-width: 600px; margin: 0 auto; padding: 20px; }
+                .header { background: linear-gradient(135deg, #f44336 0%, #e91e63 100%); color: white; padding: 30px; text-align: center; border-radius: 10px 10px 0 0; }
+                .content { background: white; padding: 30px; border: 1px solid #e0e0e0; border-top: none; }
+                .footer { background: #f8f9fa; padding: 20px; text-align: center; border: 1px solid #e0e0e0; border-top: none; border-radius: 0 0 10px 10px; font-size: 12px; color: #666; }
+                .logo { font-size: 32px; margin-bottom: 10px; }
+                .alert-danger { background: #ffebee; padding: 15px; border-left: 4px solid #f44336; margin: 20px 0; border-radius: 4px; }
+                .user-details { background: #f8f9fa; padding: 15px; margin: 20px 0; border-radius: 4px; }
+                .detail-row { display: flex; justify-content: space-between; margin: 8px 0; }
+                .detail-label { font-weight: bold; color: #555; }
+                .security-tip { background: #fff3cd; padding: 15px; border-left: 4px solid #ffc107; margin: 20px 0; border-radius: 4px; }
+                .btn { display: inline-block; padding: 12px 24px; background: #f44336; color: white; text-decoration: none; border-radius: 6px; margin: 20px 0; }
+            </style>
+        </head>
+        <body>
+            <div class='container'>
+                <div class='header'>
+                    <h1>🚨 Security Alert</h1>
+                    <p>Failed Login Attempt Detected</p>
+                </div>
+                <div class='content'>
+                    <div class='alert-danger'>
+                        <strong>❌ Failed Login Attempt Detected</strong><br>
+                        Someone tried to log into your WordPress site but failed.
+                    </div>
+                    
+                    <div class='user-details'>
+                        <h3>🔍 Attempt Details</h3>
+                        <div class='detail-row'>
+                            <span class='detail-label'>Username:</span>
+                            <span>{$user_login}</span>
+                        </div>
+                        <div class='detail-row'>
+                            <span class='detail-label'>IP Address:</span>
+                            <span>{$user_ip}</span>
+                        </div>
+                        <div class='detail-row'>
+                            <span class='detail-label'>Time:</span>
+                            <span>{$timestamp}</span>
+                        </div>
+                    </div>
+                    
+                    <div class='security-tip'>
+                        <strong>⚠️ Security Warning:</strong><br>
+                        Multiple failed attempts could indicate a brute force attack. Monitor your site closely.
+                    </div>
+                </div>
+                <div class='footer'>
+                    <p>This email was sent by Lockspire Security Plugin</p>
+                    <p>Site: {$site_name} ({$site_url})</p>
+                </div>
             </div>
-            
-            <div class="footer">
-                <p>This email was sent by Login Attempt Limiter plugin on <?php echo esc_html($site_name); ?></p>
-                <p>If you believe this is a false alarm, you can adjust the notification settings in the plugin dashboard.</p>
-            </div>
-        </div>
-    </body>
-    </html>
-    <?php
-    return ob_get_clean();
-}
-
-function lockspire_get_today_lockout_count() {
-    global $wpdb;
-    
-    // Try cache first
-    $cache_key = 'lockspire_lockout_count_today';
-    $count = wp_cache_get($cache_key, 'lockspire_logs');
-    
-    if ($count === false) {
-        // Note: $wpdb->get_var() is the proper WordPress method for single value queries
-        // Direct database query is necessary here for statistics - no WordPress core function provides this data
-        // Query is properly prepared and cached to minimize database load
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $count = $wpdb->get_var($wpdb->prepare(
-            "SELECT COUNT(DISTINCT option_name) FROM `{$wpdb->options}` WHERE option_name LIKE %s AND option_value > %d",
-            'lockspire_lockout_%',
-            strtotime(gmdate('Y-m-d') . ' 23:59:59')
-        ));
-        
-        // Cache for 10 minutes
-        wp_cache_set($cache_key, $count, 'lockspire_logs', 600);
+        </body>
+        </html>";
     }
     
-    return intval($count);
-}
-
-// Add cron job for daily security reports
-add_action('wp', 'lockspire_schedule_daily_report');
-
-function lockspire_schedule_daily_report() {
-    if (!wp_next_scheduled('lockspire_daily_security_report')) {
-        wp_schedule_event(time(), 'daily', 'lockspire_daily_security_report');
-    }
-}
-
-add_action('lockspire_daily_security_report', 'lockspire_send_daily_security_report');
-
-function lockspire_send_daily_security_report() {
-    if (!get_option('lockspire_daily_report', 0)) {
-        return;
-    }
-    
-    $stats = lockspire_get_security_stats();
-    $admin_email = get_option('lockspire_admin_email', get_option('admin_email'));
-    
-    $subject = '📊 Daily Security Report - ' . get_bloginfo('name');
-    
-    $message = lockspire_get_daily_report_content($stats);
-    
-    $headers = ['Content-Type: text/html; charset=UTF-8'];
-    
-    wp_mail($admin_email, $subject, $message, $headers);
-}
-
-function lockspire_get_daily_report_content($stats) {
-    $site_name = get_bloginfo('name');
-    $admin_url = admin_url('admin.php?page=lockspire');
-    
-    ob_start();
-    ?>
-    <!DOCTYPE html>
-    <html>
-    <head>
-        <meta charset="UTF-8">
-        <title>Daily Security Report</title>
-        <style>
-            body { font-family: Arial, sans-serif; line-height: 1.6; color: #333; }
-            .container { max-width: 600px; margin: 0 auto; padding: 20px; }
-            .header { background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; padding: 20px; text-align: center; }
-            .content { padding: 20px; background: #f8f9fa; }
-            .stats-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 15px; margin: 20px 0; }
-            .stat-card { background: white; padding: 15px; border-radius: 5px; text-align: center; }
-            .stat-number { font-size: 24px; font-weight: bold; color: #667eea; }
-            .stat-label { font-size: 12px; color: #666; text-transform: uppercase; }
-            .footer { background: #f8f9fa; padding: 20px; text-align: center; font-size: 12px; color: #666; }
-        </style>
-    </head>
-    <body>
-        <div class="container">
-            <div class="header">
-                <h1>📊 Daily Security Report</h1>
-                <p><?php echo esc_html($site_name); ?> - <?php echo esc_html(gmdate('Y-m-d')); ?></p>
-            </div>
-            
-            <div class="content">
-                <div class="stats-grid">
-                    <div class="stat-card">
-                        <div class="stat-number"><?php echo number_format($stats['total_attempts']); ?></div>
-                        <div class="stat-label">Total Attempts</div>
-                    </div>
-                    <div class="stat-card">
-                        <div class="stat-number"><?php echo number_format($stats['failed_attempts']); ?></div>
-                        <div class="stat-label">Failed Attempts</div>
-                    </div>
-                    <div class="stat-card">
-                        <div class="stat-number"><?php echo number_format($stats['locked_ips']); ?></div>
-                        <div class="stat-label">Locked IPs</div>
-                    </div>
-                    <div class="stat-card">
-                        <div class="stat-number"><?php echo number_format($stats['blocked_ips']); ?></div>
-                        <div class="stat-label">Blocked IPs</div>
-                    </div>
-                </div>
-                
-                <h3>🔍 Summary</h3>
-                <p>Your website's security system is actively monitoring login attempts. Here's today's overview:</p>
-                
-                <?php if ($stats['failed_attempts'] > 10): ?>
-                    <div style="background: #f8d7da; border: 1px solid #f5c6cb; padding: 15px; border-radius: 5px; margin: 20px 0;">
-                        <strong>⚠️ High Activity Detected:</strong> You had an unusually high number of failed login attempts today. Consider reviewing your security settings.
-                    </div>
-                <?php else: ?>
-                    <div style="background: #d4edda; border: 1px solid #c3e6cb; padding: 15px; border-radius: 5px; margin: 20px 0;">
-                        <strong>✅ Normal Activity:</strong> Login attempt levels are within normal ranges.
-                    </div>
-                <?php endif; ?>
-                
-                <p style="text-align: center; margin: 30px 0;">
-                    <a href="<?php echo esc_url($admin_url); ?>" style="display: inline-block; background: #667eea; color: white; padding: 10px 20px; text-decoration: none; border-radius: 5px;">View Full Dashboard</a>
-                </p>
-            </div>
-            
-            <div class="footer">
-                <p>This is an automated daily security report from Login Attempt Limiter.</p>
-                <p>To unsubscribe from these reports, visit the plugin settings.</p>
-            </div>
-        </div>
-    </body>
-    </html>
-    <?php
-    return ob_get_clean();
-}
+    return $template;
+}
+
+// Log email sent
+function lockspire_log_email_sent($type, $recipient, $subject, $status = 'sent') {
+    $lockspire_email_logs = get_option('lockspire_email_logs', array());
+    
+    $lockspire_log_entry = array(
+        'type' => $type,
+        'recipient' => $recipient,
+        'subject' => $subject,
+        'status' => $status,
+        'time' => current_time('mysql')
+    );
+    
+    array_unshift($lockspire_email_logs, $lockspire_log_entry);
+    $lockspire_email_logs = array_slice($lockspire_email_logs, 0, 50);
+    
+    update_option('lockspire_email_logs', $lockspire_email_logs);
+}

lockspire-smart-access-protection/trunk/includes/settings-page.php

@@ -1 +1 @@
 <?php
-if ( ! defined( 'ABSPATH' ) ) exit;
+/**
+ * Settings Page for Lockspire - Documentation File
+ * 
+ * Method in Lockspire_Security class:
+ * - public function settings_page()
+ * 
+ * Actual implementation is in lockspire-smart-access-protection.php
+ */
 
-function lockspire_enqueue_admin_scripts($hook) {
-    if (strpos($hook, 'lockspire') !== false) {
-        // Register styles
-        wp_register_style('lockspire-admin-css', plugins_url('assets/css/admin.css', dirname(__FILE__)), [], '1.0');
-        
-        // Register scripts
-        wp_register_script('lockspire-admin-js', plugins_url('assets/js/admin.js', dirname(__FILE__)), ['jquery'], '1.0', true);
-        
-        // Enqueue styles
-        wp_enqueue_style('lockspire-admin-css');
-        
-        // Enqueue scripts
-        wp_enqueue_script('lockspire-admin-js');
-        
-        // Localize script
-        wp_localize_script('lockspire-admin-js', 'lockspire_admin', [
-            'nonce' => wp_create_nonce('lockspire_admin_actions'),
-            'ajaxurl' => admin_url('admin-ajax.php')
-        ]);
-    }
-}
-add_action('admin_enqueue_scripts', 'lockspire_enqueue_admin_scripts');
-
-function lockspire_settings_page() {
-    if (isset($_POST['submit']) && check_admin_referer('lockspire_save_settings_nonce')) {
-        lockspire_save_all_settings();
-        echo '<div class="lal-alert lal-alert-success"><strong>Settings saved successfully!</strong> All your preferences have been updated.</div>';
-    }   
-    
-    $active_tab = isset($_GET['tab']) ? sanitize_text_field(wp_unslash($_GET['tab'])) : 'general';
-    ?>
-    <div class="wrap lal-admin-wrapper">
-        <div class="lal-header">
-            <h1>🛡️ Lockspire – Smart Access Protection</h1>
-            <p>Advanced security protection against brute-force attacks</p>
-        </div>
-        
-        <div class="lal-nav-tabs">
-            <button class="lal-nav-tab <?php echo $active_tab === 'general' ? 'active' : ''; ?>" onclick="window.location.href='?page=lockspire&tab=general'">⚙️ General</button>
-            <button class="lal-nav-tab <?php echo $active_tab === 'security' ? 'active' : ''; ?>" onclick="window.location.href='?page=lockspire&tab=security'">🔒 Security</button>
-            <button class="lal-nav-tab <?php echo $active_tab === 'notifications' ? 'active' : ''; ?>" onclick="window.location.href='?page=lockspire&tab=notifications'">📧 Notifications</button>
-            <button class="lal-nav-tab <?php echo $active_tab === 'dashboard' ? 'active' : ''; ?>" onclick="window.location.href='?page=lockspire&tab=dashboard'">📊 Dashboard</button>
-            <button class="lal-nav-tab <?php echo $active_tab === 'logs' ? 'active' : ''; ?>" onclick="window.location.href='?page=lockspire&tab=logs'">📋 Logs</button>
-        </div>
-        
-        <div class="lal-tab-content <?php echo $active_tab === 'general' ? 'active' : ''; ?>">
-            <?php lockspire_render_general_settings(); ?>
-        </div>
-        
-        <div class="lal-tab-content <?php echo $active_tab === 'security' ? 'active' : ''; ?>">
-            <?php lockspire_render_security_settings(); ?>
-        </div>
-        
-        <div class="lal-tab-content <?php echo $active_tab === 'notifications' ? 'active' : ''; ?>">
-            <?php lockspire_render_notification_settings(); ?>
-        </div>
-        
-        <div class="lal-tab-content <?php echo $active_tab === 'dashboard' ? 'active' : ''; ?>">
-            <?php lockspire_render_dashboard(); ?>
-        </div>
-        
-        <div class="lal-tab-content <?php echo $active_tab === 'logs' ? 'active' : ''; ?>">
-            <?php lockspire_render_logs(); ?>
-        </div>
-    </div>
-    <?php
+// Prevent direct access
+if (!defined('ABSPATH')) {
+    exit;
 }
 
-function lockspire_save_all_settings() {
-    // Verify nonce
-    if (!isset($_POST['_wpnonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['_wpnonce'])), 'lockspire_save_settings_nonce')) {
-        wp_die('Security check failed!');
-    }
-    
-    // General settings
-    if (isset($_POST['lockspire_max_attempts'])) {
-        update_option('lockspire_max_attempts', intval($_POST['lockspire_max_attempts']));
-    }
-    if (isset($_POST['lockspire_lockout_time'])) {
-        update_option('lockspire_lockout_time', intval($_POST['lockspire_lockout_time']));
-    }
-    if (isset($_POST['lockspire_reset_time'])) {
-        update_option('lockspire_reset_time', intval($_POST['lockspire_reset_time']));
-    }
-    if (isset($_POST['lockspire_lockout_message'])) {
-        update_option('lockspire_lockout_message', sanitize_text_field(wp_unslash($_POST['lockspire_lockout_message'])));
-    }
-    
-    // Security settings
-    if (isset($_POST['lockspire_whitelist_ips'])) {
-        update_option('lockspire_whitelist_ips', sanitize_text_field(wp_unslash($_POST['lockspire_whitelist_ips'])));
-    }
-    if (isset($_POST['lockspire_blacklist_ips'])) {
-        update_option('lockspire_blacklist_ips', sanitize_text_field(wp_unslash($_POST['lockspire_blacklist_ips'])));
-    }
-    if (isset($_POST['lockspire_enable_country_blocking'])) {
-        update_option('lockspire_enable_country_blocking', intval($_POST['lockspire_enable_country_blocking']));
-    } else {
-        update_option('lockspire_enable_country_blocking', 0);
-    }
-    if (isset($_POST['lockspire_blocked_countries'])) {
-        update_option('lockspire_blocked_countries', sanitize_text_field(wp_unslash($_POST['lockspire_blocked_countries'])));
-    }
-    
-    // Notification settings
-    if (isset($_POST['lockspire_notify_admin'])) {
-        update_option('lockspire_notify_admin', intval($_POST['lockspire_notify_admin']));
-    } else {
-        update_option('lockspire_notify_admin', 0);
-    }
-    if (isset($_POST['lockspire_admin_email'])) {
-        update_option('lockspire_admin_email', sanitize_email(wp_unslash($_POST['lockspire_admin_email'])));
-    }
-    if (isset($_POST['lockspire_notify_threshold'])) {
-        update_option('lockspire_notify_threshold', intval($_POST['lockspire_notify_threshold']));
-    }
-}
-
-function lockspire_render_general_settings() {
     ?>
-    <form method="POST">
-        <?php wp_nonce_field('lockspire_save_settings_nonce'); ?>
-        
-        <div class="lal-form-section">
-            <h3>🎯 Basic Settings</h3>
+    <div class="lockspire-settings">
+        <form method="post" action="options.php">
+            <?php
+            settings_fields('lockspire_options');
+            do_settings_sections('lockspire-settings');
+            ?>
             
-            <div class="lal-form-row">
-                <label for="lal_max_attempts">Maximum Login Attempts</label>
-                <div>
-                    <input type="number" name="lockspire_max_attempts" 
-                           value="<?php echo esc_attr(get_option('lockspire_max_attempts', 5)); ?>" 
-                           min="1" max="20">
-                    <div class="description">Number of failed attempts before lockout (1-20)</div>
+            <div class="lockspire-grid">
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>🔒 Core Security Settings</h3>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <table class="form-table">
+                            <tr>
+                                <th scope="row">Login Protection</th>
+                                <td>
+                                    <label class="switch">
+                                        <input type="checkbox" name="lockspire_options[login_limit_enabled]" value="1" <?php checked($this->options['login_limit_enabled'], '1'); ?>>
+                                        <span class="slider"></span>
+                                    </label>
+                                    <span class="setting-description">Limit login attempts to prevent brute force attacks</span>
+                                </td>
+                            </tr>
+                            <tr>
+                                <th scope="row">Max Login Attempts</th>
+                                <td>
+                                    <input type="number" name="lockspire_options[max_login_attempts]" value="<?php echo esc_attr($this->options['max_login_attempts']); ?>" min="1" max="20">
+                                    <p class="description">Maximum failed login attempts before lockout</p>
+                                </td>
+                            </tr>
+                            <tr>
+                                <th scope="row">Lockout Time</th>
+                                <td>
+                                    <input type="number" name="lockspire_options[lockout_time]" value="<?php echo esc_attr($this->options['lockout_time']); ?>" min="1" max="1440">
+                                    <p class="description">Lockout duration in minutes</p>
+                                </td>
+                            </tr>
+                        </table>
+                    </div>
+                </div>
+                
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>🔥 Firewall Settings</h3>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <table class="form-table">
+                            <tr>
+                                <th scope="row">Enable Firewall</th>
+                                <td>
+                                    <label class="switch">
+                                        <input type="checkbox" name="lockspire_options[firewall_enabled]" value="1" <?php checked($this->options['firewall_enabled'], '1'); ?>>
+                                        <span class="slider"></span>
+                                    </label>
+                                    <span class="setting-description">Block malicious requests and bad bots</span>
+                                </td>
+                            </tr>
+                            <tr>
+                                <th scope="row">Disable XML-RPC</th>
+                                <td>
+                                    <label class="switch">
+                                        <input type="checkbox" name="lockspire_options[disable_xmlrpc]" value="1" <?php checked($this->options['disable_xmlrpc'], '1'); ?>>
+                                        <span class="slider"></span>
+                                    </label>
+                                    <span class="setting-description">Disable XML-RPC to prevent attacks</span>
+                                </td>
+                            </tr>
+                        </table>
+                    </div>
                 </div>
             </div>
             
-            <div class="lal-form-row">
-                <label for="lal_lockout_time">Lockout Duration</label>
-                <div>
-                    <input type="number" name="lockspire_lockout_time" 
-                           value="<?php echo esc_attr(get_option('lockspire_lockout_time', 15)); ?>" 
-                           min="1" max="1440">
-                    <div class="description">Time in minutes to lock out user (1-1440 minutes)</div>
+            <div class="lockspire-grid">
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>👻 Admin Protection</h3>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <table class="form-table">
+                            <tr>
+                                <th scope="row">Hide Admin URL</th>
+                                <td>
+                                    <label class="switch">
+                                        <input type="checkbox" name="lockspire_options[hide_admin_enabled]" value="1" <?php checked($this->options['hide_admin_enabled'], '1'); ?>>
+                                        <span class="slider"></span>
+                                    </label>
+                                    <span class="setting-description">Hide wp-admin with secret key</span>
+                                </td>
+                            </tr>
+                            <tr>
+                                <th scope="row">Admin Secret Key</th>
+                                <td>
+                                    <input type="text" name="lockspire_options[admin_secret_key]" value="<?php echo esc_attr($this->options['admin_secret_key']); ?>" class="regular-text">
+                                    <p class="description">Access wp-admin at: /wp-admin/?<?php echo esc_html($this->options['admin_secret_key']); ?>=1</p>
+                                </td>
+                            </tr>
+                        </table>
+                    </div>
+                </div>
+                
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>📧 Notifications & Logging</h3>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <table class="form-table">
+                            <tr>
+                                <th scope="row">Email Notifications</th>
+                                <td>
+                                    <label class="switch">
+                                        <input type="checkbox" name="lockspire_options[email_notifications]" value="1" <?php checked($this->options['email_notifications'], '1'); ?>>
+                                        <span class="slider"></span>
+                                    </label>
+                                    <span class="setting-description">Send email alerts for admin logins</span>
+                                </td>
+                            </tr>
+                            <tr>
+                                <th scope="row">Activity Logging</th>
+                                <td>
+                                    <label class="switch">
+                                        <input type="checkbox" name="lockspire_options[activity_log_enabled]" value="1" <?php checked($this->options['activity_log_enabled'], '1'); ?>>
+                                        <span class="slider"></span>
+                                    </label>
+                                    <span class="setting-description">Log user login activity</span>
+                                </td>
+                            </tr>
+                        </table>
+                    </div>
                 </div>
             </div>
             
-            <div class="lal-form-row">
-                <label for="lal_reset_time">Reset Attempts After</label>
-                <div>
-                    <input type="number" name="lockspire_reset_time" 
-                           value="<?php echo esc_attr(get_option('lockspire_reset_time', 60)); ?>" 
-                           min="1" max="1440">
-                    <div class="description">Clear failed attempts after this many minutes</div>
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>💎 Pro Features (Coming Soon)</h3>
                 </div>
-            </div>
-        </div>
-        
-        <div class="lal-form-section">
-            <h3>💬 User Messages</h3>
-            
-            <div class="lal-form-row">
-                <label for="lal_lockout_message">Custom Lockout Message</label>
-                <div>
-                    <input type="text" name="lockspire_lockout_message"
-                           value="<?php echo esc_attr(get_option('lockspire_lockout_message', 'Too many login attempts. Please try again later.'));?>"
-                           class="regular-text">
-                    <div class="description">Use [timer] as placeholder for countdown timer</div>
-                </div>
-            </div>
-        </div>
-        
-        <?php submit_button('Save General Settings', 'primary', 'submit'); ?>
-    </form>
-    <?php
-}
-
-function lockspire_render_security_settings() {
-    ?>
-    <form method="POST">
-        <?php wp_nonce_field('lockspire_save_settings_nonce'); ?>
-        
-        <div class="lal-form-section">
-            <h3>🌐 IP Management</h3>
-            
-            <div class="lal-form-row">
-                <label for="lal_whitelist_ips">Whitelist IPs</label>
-                <div>
-                    <textarea name="lockspire_whitelist_ips" rows="4" cols="50" placeholder="192.168.1.1, 10.0.0.1"><?php echo esc_textarea(get_option('lockspire_whitelist_ips', '')); ?></textarea>
-                    <div class="description">Comma-separated IPs that will never be locked out</div>
+                <div class="lockspire-card-body">
+                    <div class="pro-features">
+                        <div class="pro-feature">
+                            <div class="pro-icon">🔍</div>
+                            <div class="pro-info">
+                                <h4>Malware Scanner</h4>
+                                <p>Advanced malware detection and removal</p>
+                                <span class="pro-badge">PRO</span>
+                            </div>
+                        </div>
+                        <div class="pro-feature">
+                            <div class="pro-icon">🚫</div>
+                            <div class="pro-info">
+                                <h4>IP Address Blocking</h4>
+                                <p>Advanced IP blocking and geolocation</p>
+                                <span class="pro-badge">PRO</span>
+                            </div>
+                        </div>
+                        <div class="pro-feature">
+                            <div class="pro-icon">🌍</div>
+                            <div class="pro-info">
+                                <h4>Country Blocking</h4>
+                                <p>Block access from specific countries</p>
+                                <span class="pro-badge">PRO</span>
+                            </div>
+                        </div>
+                    </div>
                 </div>
             </div>
             
-            <div class="lal-form-row">
-                <label for="lal_blacklist_ips">Blacklist IPs</label>
-                <div>
-                    <textarea name="lockspire_blacklist_ips" rows="4" cols="50" placeholder="192.168.1.100, 10.0.0.100"><?php echo esc_textarea(get_option('lockspire_blacklist_ips', '')); ?></textarea>
-                    <div class="description">Comma-separated IPs that will always be blocked</div>
-                </div>
-            </div>
-        </div>
-        
-        <div class="lal-form-section">
-            <h3>🌍 Country Blocking</h3>
-            
-            <div class="lal-form-row">
-                <label for="lal_enable_country_blocking">Enable Country Blocking</label>
-                <div>
-                    <input type="checkbox" name="lockspire_enable_country_blocking" value="1" 
-                        <?php checked(1, get_option('lockspire_enable_country_blocking', 0)); ?> >
-                    <div class="description">Block login attempts from specific countries</div>
-                </div>
-            </div>
-            
-            <div class="lal-form-row">
-                <label for="lal_blocked_countries">Blocked Countries</label>
-                <div>
-                    <input type="text" name="lockspire_blocked_countries"
-                           value="<?php echo esc_attr(get_option('lockspire_blocked_countries', '')); ?>"
-                           placeholder="CN, RU, KP"
-                           class="regular-text">
-                    <div class="description">Comma-separated 2-letter country codes (e.g., CN, RU, KP)</div>
-                </div>
-            </div>
-        </div>
-        
-        <?php submit_button('Save Security Settings', 'primary', 'submit'); ?>
-    </form>
-    <?php
-}
-
-function lockspire_render_notification_settings() {
-    ?>
-    <form method="POST">
-        <?php wp_nonce_field('lockspire_save_settings_nonce'); ?>
-        
-        <div class="lal-form-section">
-            <h3>📧 Email Notifications</h3>
-            
-            <div class="lal-form-row">
-                <label for="lal_notify_admin">Notify Admin on Lockout</label>
-                <div>
-                    <input type="checkbox" name="lockspire_notify_admin" value="1" 
-                        <?php checked(1, get_option('lockspire_notify_admin', 0)); ?> >
-                    <div class="description">Send email when a user gets locked out</div>
-                </div>
-            </div>
-            
-            <div class="lal-form-row">
-                <label for="lal_admin_email">Admin Email</label>
-                <div>
-                    <input type="email" name="lockspire_admin_email"
-                           value="<?php echo esc_attr(get_option('lockspire_admin_email', get_option('admin_email'))); ?>"
-                           class="regular-text">
-                    <div class="description">Email address to receive notifications (leave blank for site admin)</div>
-                </div>
-            </div>
-            
-            <div class="lal-form-row">
-                <label for="lal_notify_threshold">Notification Threshold</label>
-                <div>
-                    <input type="number" name="lockspire_notify_threshold" 
-                           value="<?php echo esc_attr(get_option('lockspire_notify_threshold', 3)); ?>" 
-                           min="1" max="50">
-                    <div class="description">Only notify after this many lockouts per day</div>
-                </div>
-            </div>
-        </div>
-        
-        <?php submit_button('Save Notification Settings', 'primary', 'submit'); ?>
-    </form>
-    <?php
-}
-
-function lockspire_render_dashboard() {
-    $stats = lockspire_get_security_stats();
-    ?>
-    <div class="lal-stats-grid">
-        <div class="lal-stat-card">
-            <div class="lal-stat-number"><?php echo number_format($stats['total_attempts']); ?></div>
-            <div class="lal-stat-label">Total Attempts Today</div>
-        </div>
-        <div class="lal-stat-card">
-            <div class="lal-stat-number"><?php echo number_format($stats['failed_attempts']); ?></div>
-            <div class="lal-stat-label">Failed Attempts</div>
-        </div>
-        <div class="lal-stat-card">
-            <div class="lal-stat-number"><?php echo number_format($stats['locked_ips']); ?></div>
-            <div class="lal-stat-label">Currently Locked IPs</div>
-        </div>
-        <div class="lal-stat-card">
-            <div class="lal-stat-number"><?php echo number_format($stats['blocked_ips']); ?></div>
-            <div class="lal-stat-label">Permanently Blocked</div>
-        </div>
-    </div>
-    
-    <div class="lal-form-section">
-        <h3>📈 Security Overview</h3>
-        <p><strong>Protection Status:</strong> <span style="color: #28a745;">✅ Active</span></p>
-        <p><strong>Last Attack:</strong> <?php echo $stats['last_attack'] ? esc_html($stats['last_attack']) : 'No attacks detected'; ?></p>
-        <p><strong>Most Active IP:</strong> <?php echo $stats['most_active_ip'] ? esc_html($stats['most_active_ip']) : 'N/A'; ?></p>
-    </div>
-    
-    <div class="lal-form-section">
-        <h3>🔧 Quick Actions</h3>
-        <button type="button" class="lal-button" onclick="lockspireClearAllLockouts()">Clear All Lockouts</button>
-        <button type="button" class="lal-button lal-button-secondary" onclick="lockspireExportLogs()">Export Logs</button>
-        <button type="button" class="lal-button lal-button-danger" onclick="lockspireResetStats()">Reset Statistics</button>
+            <?php submit_button('Save Settings', 'primary', 'submit', true, array('class' => 'button-large')); ?>
+        </form>
     </div>
     <?php
-}
-
-function lockspire_render_logs() {
-    $logs = lockspire_get_recent_logs();
-    ?>
-    <div class="lal-form-section">
-        <h3>📋 Recent Login Activity</h3>
-        
-        <?php if (!empty($logs)): ?>
-            <table class="lal-log-table">
-                <thead>
-                    <tr>
-                        <th>Time</th>
-                        <th>IP Address</th>
-                        <th>Username</th>
-                        <th>Status</th>
-                        <th>Attempts</th>
-                    </tr>
-                </thead>
-                <tbody>
-                    <?php foreach ($logs as $log): ?>
-                        <tr>
-                            <td><?php echo esc_html(date_i18n(get_option('date_format') . ' ' . get_option('time_format'), strtotime(isset($log['created_at']) ? $log['created_at'] : ''))); ?></td>
-                            <td><?php echo esc_html(isset($log['ip_address']) ? $log['ip_address'] : ''); ?></td>
-                            <td><?php echo esc_html(isset($log['username']) ? $log['username'] : ''); ?></td>
-                            <td>
-                                <span class="lal-status-badge lal-status-<?php echo esc_attr(isset($log['status']) ? $log['status'] : ''); ?>">
-                                    <?php echo esc_html(ucfirst(isset($log['status']) ? $log['status'] : '')); ?>
-                                </span>
-                            </td>
-                            <td><?php echo esc_html(isset($log['attempts']) ? $log['attempts'] : ''); ?></td>
-                        </tr>
-                    <?php endforeach; ?>
-                </tbody>
-            </table>
-        <?php else: ?>
-            <p>No login activity logged yet.</p>
-        <?php endif; ?>
-    </div>
-    
-    <div class="lal-form-section">
-        <h3>🔧 Log Management</h3>
-        <button type="button" class="lal-button lal-button-secondary" onclick="lockspireTestLogWorking()">🧪 Create Test Log Entry</button>
-        <button type="button" class="lal-button lal-button-danger" onclick="lockspireClearLogs()">Clear All Logs</button>
-        <button type="button" class="lal-button lal-button-secondary" onclick="lockspireDownloadLogs()">Download Logs</button>
-    </div>
-    <?php
-}
-
-
+    // $this->render_admin_footer(); // This would be called in the main class
+?>

lockspire-smart-access-protection/trunk/lockspire-smart-access-protection.php

@@ -1 +1 @@
 <?php
-/*
-Plugin Name: Lockspire – Smart Access Protection
-Description: Advanced security plugin to protect your site from brute-force attacks with real-time monitoring.
-Version: 1.0
-Author: Anil Ghimire
-Author URI: https://github.com/anilatgithub
-Text Domain: lockspire-smart-access-protection
-License: GPL v2 or later
-License URI: https://www.gnu.org/licenses/gpl-2.0.html
-*/
+/**
+ * Plugin Name:       Lockspire - Smart Access Protection
+ * Plugin URI:        https://lockspire.com
+ * Description:       Lightweight WordPress security plugin with login protection, admin URL hiding, firewall, and more.
+ * Version:           1.0.0
+ * Author:            Anil Ghimire
+ * Author URI:        https://github.com/anilatgithub
+ * License:           GPL v2 or later
+ * License URI:       https://www.gnu.org/licenses/gpl-2.0.html
+ */
 
-if ( ! defined( 'ABSPATH' ) ) exit;
+// Prevent direct access
+if (!defined('ABSPATH')) {
+    exit;
+}
 
 // Define plugin constants
-define( 'LOCKSPIRE_PLUGIN_PATH', plugin_dir_path( __FILE__ ) );
-define( 'LOCKSPIRE_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
+define('LOCKSPIRE_VERSION', '1.0.0');
+define('LOCKSPIRE_PLUGIN_DIR', plugin_dir_path(__FILE__));
+define('LOCKSPIRE_PLUGIN_URL', plugin_dir_url(__FILE__));
 
-// Include files (each file only once)
-require_once LOCKSPIRE_PLUGIN_PATH . 'includes/attempt-handler.php';
-require_once LOCKSPIRE_PLUGIN_PATH . 'includes/settings-page.php';
-require_once LOCKSPIRE_PLUGIN_PATH . 'includes/ajax-handlers.php';
-require_once LOCKSPIRE_PLUGIN_PATH . 'includes/database.php';
-require_once LOCKSPIRE_PLUGIN_PATH . 'includes/notifications.php';
-
-// Add working test log handler
-add_action('wp_ajax_lockspire_test_log_working', 'lockspire_test_log_working_handler');
-function lockspire_test_log_working_handler() {
-    check_ajax_referer('lockspire_admin_actions', 'nonce');
-    
-    if (!current_user_can('manage_options')) {
-        wp_send_json_error('Unauthorized');
-        return;
-    }
-    
-    global $wpdb;
-    $table_name = $wpdb->prefix . 'lockspire_login_logs';
-    
-    // Create table if needed
-    require_once(ABSPATH . 'wp-admin/includes/upgrade.php');
-    $charset_collate = $wpdb->get_charset_collate();
-    $sql = "CREATE TABLE $table_name (
-        id mediumint(9) NOT NULL AUTO_INCREMENT,
-        ip_address varchar(45) NOT NULL,
-        username varchar(60) NOT NULL,
-        status varchar(20) NOT NULL,
-        attempts int(3) NOT NULL DEFAULT 1,
-        user_agent text,
-        created_at datetime DEFAULT CURRENT_TIMESTAMP,
-        PRIMARY KEY  (id)
-    ) $charset_collate;";
-    dbDelta($sql);
-    
-    // Insert test entries
-    $test_entries = [
-        ['username' => 'test_user_1', 'status' => 'failed', 'attempts' => 1],
-        ['username' => 'test_user_2', 'status' => 'failed', 'attempts' => 2],
-        ['username' => 'test_user_3', 'status' => 'failed', 'attempts' => 3],
-        ['username' => 'test_user_4', 'status' => 'locked', 'attempts' => 5],
-        ['username' => 'admin_user', 'status' => 'success', 'attempts' => 1]
-    ];
-    
-    $created_count = 0;
-    foreach ($test_entries as $entry) {
-        $data = [
-            'ip_address' => '127.0.0.1',
-            'username' => sanitize_text_field($entry['username']),
-            'status' => sanitize_text_field($entry['status']),
-            'attempts' => intval($entry['attempts']),
-            'user_agent' => 'Test Entry',
-            'created_at' => current_time('mysql')
-        ];
-        
-        // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery
-        $result = $wpdb->insert($table_name, $data);
-        if ($result !== false) {
-            $created_count++;
-        }
-    }
-    
-    if ($created_count > 0) {
-        wp_send_json_success("Created {$created_count} test log entries successfully");
-    } else {
-        wp_send_json_error('Failed to create test log entries');
+class Lockspire_Security {
+    
+    private $options;
+    private $login_attempts_key = 'lockspire_login_attempts';
+    private $activity_log_key = 'lockspire_activity_log';
+    
+    public function __construct() {
+        add_action('init', array($this, 'init'));
+        add_action('admin_menu', array($this, 'add_admin_menu'));
+        add_action('admin_init', array($this, 'admin_init'));
+        add_action('admin_enqueue_scripts', array($this, 'enqueue_admin_scripts'));
+        
+        // Register AJAX handlers
+        add_action('wp_ajax_lockspire_toggle_email_notifications', array($this, 'ajax_toggle_email_notifications'));
+        add_action('wp_ajax_lockspire_save_email_settings', array($this, 'ajax_save_email_settings'));
+        add_action('wp_ajax_lockspire_test_email', array($this, 'ajax_test_email'));
+        add_action('wp_ajax_lockspire_clear_email_logs', array($this, 'ajax_clear_email_logs'));
+        add_action('wp_ajax_lockspire_toggle_login_protection', array($this, 'ajax_toggle_login_protection'));
+        add_action('wp_ajax_lockspire_save_login_settings', array($this, 'ajax_save_login_settings'));
+        add_action('wp_ajax_lockspire_unlock_ip', array($this, 'ajax_unlock_ip'));
+        add_action('wp_ajax_lockspire_unlock_all_ips', array($this, 'ajax_unlock_all_ips'));
+        
+        register_activation_hook(__FILE__, array($this, 'activate'));
+        register_deactivation_hook(__FILE__, array($this, 'deactivate'));
+    }
+    
+    public function init() {
+        $this->options = get_option('lockspire_options', array());
+        
+        // Initialize default settings
+        $this->set_default_options();
+        
+        // Load security features
+        $this->load_security_features();
+        
+        // Add custom login error message filter
+        add_filter('login_errors', array($this, 'custom_login_error_message'));
+    }
+    
+    private function set_default_options() {
+        $defaults = array(
+            'login_limit_enabled' => '1',
+            'max_login_attempts' => '5',
+            'lockout_time' => '15',
+            'hide_admin_enabled' => '0',
+            'admin_secret_key' => 'myadmin',
+            'disable_xmlrpc' => '1',
+            'firewall_enabled' => '1',
+            'email_notifications' => '1',
+            'activity_log_enabled' => '1'
+        );
+        
+        $this->options = wp_parse_args($this->options, $defaults);
+        update_option('lockspire_options', $this->options);
+    }
+    
+    private function load_security_features() {
+        // Login attempt limiting
+        if ($this->options['login_limit_enabled']) {
+            add_action('wp_login_failed', array($this, 'handle_login_failed'));
+            add_action('wp_authenticate', array($this, 'check_login_attempts'), 1);
+        }
+        
+        // Hide wp-admin URL
+        if ($this->options['hide_admin_enabled']) {
+            add_action('init', array($this, 'handle_admin_url_hiding'));
+        }
+        
+        // Disable XML-RPC
+        if ($this->options['disable_xmlrpc']) {
+            add_filter('xmlrpc_enabled', '__return_false');
+            add_filter('xmlrpc_methods', array($this, 'disable_xmlrpc_methods'));
+        }
+        
+        // Basic firewall
+        if ($this->options['firewall_enabled']) {
+            add_action('init', array($this, 'init_firewall'));
+        }
+        
+        // Admin login notifications
+        if ($this->options['email_notifications']) {
+            add_action('wp_login', array($this, 'send_admin_login_notification'), 10, 2);
+        }
+        
+        // Activity logging
+        if ($this->options['activity_log_enabled']) {
+            add_action('wp_login', array($this, 'log_login_activity'), 10, 2);
+        }
+    }
+    
+    // Login attempt limiting
+    public function handle_login_failed($username) {
+        $ip = $this->get_user_ip();
+        $attempts = get_transient($this->login_attempts_key . '_' . $ip);
+        
+        if (!$attempts) {
+            $attempts = array();
+        }
+        
+        $attempts[] = array(
+            'username' => $username,
+            'time' => current_time('timestamp')
+        );
+        
+        set_transient(
+            $this->login_attempts_key . '_' . $ip,
+            $attempts,
+            intval($this->options['lockout_time']) * 60
+        );
+        
+        // Send failed login notification
+        $this->send_failed_login_notification($username, $ip);
+    }
+    
+    // Custom login error messages
+    public function custom_login_error_message($error) {
+        global $errors;
+        
+        // Check if this is a login attempt error
+        if ($errors && isset($errors->errors['incorrect_password'])) {
+            $ip = $this->get_user_ip();
+            $attempts = get_transient($this->login_attempts_key . '_' . $ip);
+            
+            if ($attempts) {
+                $max_attempts = intval($this->options['max_login_attempts']);
+                $current_attempt = count($attempts);
+                $remaining_attempts = $max_attempts - $current_attempt;
+                
+                if ($remaining_attempts > 0) {
+                    $lockout_time = intval($this->options['lockout_time']) * 60;
+                    $first_attempt_time = $attempts[0]['time'];
+                    $time_until_reset = ($first_attempt_time + $lockout_time) - current_time('timestamp');
+                    
+                    if ($time_until_reset > 0) {
+                        $minutes = floor($time_until_reset / 60);
+                        $seconds = $time_until_reset % 60;
+                        
+                        /* translators: %1$d: current attempt number, %2$d: max attempts, %3$d: remaining attempts, %4$d: minutes, %5$d: seconds, %6$d: max attempts, %7$d: lockout time in minutes */
+                        $custom_error = sprintf(
+                            __('❌ <strong>Invalid password!</strong><br>This is attempt <strong>%1$d</strong> of <strong>%2$d</strong>.<br>You have <strong>%3$d</strong> login attempts left.<br>Attempts reset in <strong>%4$d minutes %5$d seconds</strong>.<br><small>Maximum allowed: %6$d attempts every %7$d minutes</small>', 'lockspire-security'),
+                            $current_attempt,
+                            $max_attempts,
+                            $remaining_attempts,
+                            $minutes,
+                            $seconds,
+                            $max_attempts,
+                            intval($this->options['lockout_time'])
+                        );
+                        
+                        return '<div class="login-error" style="background: #ffebee; color: #c62828; padding: 15px; border-radius: 8px; margin: 10px 0; border-left: 4px solid #f44336;">' . $custom_error . '</div>';
+                    } else {
+                        /* translators: %1$d: current attempt number, %2$d: max attempts, %3$d: remaining attempts, %4$d: max attempts, %5$d: lockout time in minutes */
+                        $custom_error = sprintf(
+                            __('❌ <strong>Invalid password!</strong><br>This is attempt <strong>%1$d</strong> of <strong>%2$d</strong>.<br>You have <strong>%3$d</strong> login attempts left.<br><small>Maximum allowed: %4$d attempts every %5$d minutes</small>', 'lockspire-security'),
+                            $current_attempt,
+                            $max_attempts,
+                            $remaining_attempts,
+                            $max_attempts,
+                            intval($this->options['lockout_time'])
+                        );
+                        
+                        return '<div class="login-error" style="background: #ffebee; color: #c62828; padding: 15px; border-radius: 8px; margin: 10px 0; border-left: 4px solid #f44336;">' . $custom_error . '</div>';
+                    }
+                }
+            }
+        }
+        
+        // Return styled default error for other cases
+        return '<div class="login-error" style="background: #ffebee; color: #c62828; padding: 15px; border-radius: 8px; margin: 10px 0; border-left: 4px solid #f44336;">' . $error . '</div>';
+    }
+    
+    public function check_login_attempts($username) {
+        $ip = $this->get_user_ip();
+        $attempts = get_transient($this->login_attempts_key . '_' . $ip);
+        
+        if ($attempts && count($attempts) >= intval($this->options['max_login_attempts'])) {
+            // Calculate remaining lockout time
+            $lockout_time = intval($this->options['lockout_time']) * 60;
+            $first_attempt_time = $attempts[0]['time'];
+            $remaining_time = ($first_attempt_time + $lockout_time) - current_time('timestamp');
+            
+            if ($remaining_time > 0) {
+                $minutes = floor($remaining_time / 60);
+                $seconds = $remaining_time % 60;
+                $max_attempts = intval($this->options['max_login_attempts']);
+                
+                /* translators: %1$d: current attempts, %2$d: max attempts, %3$d: minutes, %4$d: seconds, %5$d: max attempts, %6$d: lockout time in minutes */
+                $error_message = sprintf(
+                    __('🚫 <strong>Too many login attempts!</strong><br>You have reached <strong>%1$d</strong> of <strong>%2$d</strong> allowed attempts.<br>You have <strong>0</strong> login attempts left.<br>Please try again after <strong>%3$d minutes %4$d seconds</strong>.<br><small>Maximum allowed: %5$d attempts every %6$d minutes</small>', 'lockspire-security'),
+                    $max_attempts,
+                    $max_attempts,
+                    $minutes,
+                    $seconds,
+                    $max_attempts,
+                    intval($this->options['lockout_time'])
+                );
+                
+                wp_die(wp_kses_post($error_message), 'Login Blocked', array('response' => 429));
+            } else {
+                // Lockout expired, clear attempts
+                delete_transient($this->login_attempts_key . '_' . $ip);
+            }
+        }
+        
+        return $username;
+    }
+    
+    // Hide wp-admin URL
+    public function handle_admin_url_hiding() {
+        if (is_admin() && !defined('DOING_AJAX')) {
+            $secret_key = $this->options['admin_secret_key'];
+            $request_uri = sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'] ?? ''));
+            
+            // Check if accessing wp-admin without secret key
+            if (strpos($request_uri, '/wp-admin/') !== false && 
+                strpos($request_uri, $secret_key) === false) {
+                wp_safe_redirect(home_url());
+                exit;
+            }
+        }
+    }
+    
+    // Disable XML-RPC methods
+    public function disable_xmlrpc_methods($methods) {
+        return array();
+    }
+    
+    // Basic firewall
+    public function init_firewall() {
+        $this->block_bad_bots();
+        $this->prevent_common_exploits();
+    }
+    
+    private function block_bad_bots() {
+        $bad_bots = array(
+            'bot',
+            'crawler',
+            'spider',
+            'scraper'
+        );
+        
+        $user_agent = sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT'] ?? ''));
+        
+        foreach ($bad_bots as $bot) {
+            if (stripos($user_agent, $bot) !== false) {
+                $this->block_ip();
+                break;
+            }
+        }
+    }
+    
+    private function prevent_common_exploits() {
+        $request_uri = sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'] ?? ''));
+        $query_string = sanitize_text_field(wp_unslash($_SERVER['QUERY_STRING'] ?? ''));
+        
+        // Block common exploit patterns
+        $exploit_patterns = array(
+            'eval(',
+            'base64_',
+            'javascript:',
+            'vbscript:',
+            'onload=',
+            'onerror=',
+            'alert(',
+            'document.cookie',
+            '../',
+            '..\\',
+            'union select',
+            'drop table',
+            'insert into',
+            'delete from'
+        );
+        
+        foreach ($exploit_patterns as $pattern) {
+            if (stripos($request_uri, $pattern) !== false || 
+                stripos($query_string, $pattern) !== false) {
+                $this->block_ip();
+                break;
+            }
+        }
+    }
+    
+    private function block_ip() {
+        wp_die(wp_kses_post(__('Access denied. Your IP has been blocked.', 'lockspire-security')));
+    }
+    
+    // Admin login notifications
+    public function send_admin_login_notification($user_login, $user) {
+        if ($this->options['email_notifications']) {
+            // Send for all logins, not just admin
+            $subject = sprintf('[%s] Security Alert: New Login Detected', get_bloginfo('name'));
+            
+            $message = $this->get_email_template($user_login, $user, 'login');
+            
+            // Send to admin email
+            $admin_email = get_option('admin_email');
+            $headers = array('Content-Type: text/html; charset=UTF-8');
+            
+            $result = wp_mail($admin_email, $subject, $message, $headers);
+            $this->log_email_sent('login', $admin_email, $subject, $result ? 'sent' : 'failed');
+            
+            // Also send to custom notification emails if set
+            $notification_emails = get_option('lockspire_notification_emails', '');
+            if (!empty($notification_emails)) {
+                $emails = array_map('trim', explode(',', $notification_emails));
+                foreach ($emails as $email) {
+                    if (is_email($email)) {
+                        $result = wp_mail($email, $subject, $message, $headers);
+                        $this->log_email_sent('login', $email, $subject, $result ? 'sent' : 'failed');
+                    }
+                }
+            }
+        }
+    }
+    
+    // Failed login notification
+    public function send_failed_login_notification($username, $ip) {
+        if ($this->options['email_notifications']) {
+            $subject = sprintf('[%s] 🚨 Security Alert: Failed Login Attempt', get_bloginfo('name'));
+            
+            $message = $this->get_email_template($username, null, 'failed_login', $ip);
+            
+            $admin_email = get_option('admin_email');
+            $headers = array('Content-Type: text/html; charset=UTF-8');
+            
+            $result = wp_mail($admin_email, $subject, $message, $headers);
+            $this->log_email_sent('failed_login', $admin_email, $subject, $result ? 'sent' : 'failed');
+            
+            // Also send to custom notification emails
+            $notification_emails = get_option('lockspire_notification_emails', '');
+            if (!empty($notification_emails)) {
+                $emails = array_map('trim', explode(',', $notification_emails));
+                foreach ($emails as $email) {
+                    if (is_email($email)) {
+                        $result = wp_mail($email, $subject, $message, $headers);
+                        $this->log_email_sent('failed_login', $email, $subject, $result ? 'sent' : 'failed');
+                    }
+                }
+            }
+        }
+    }
+    
+    // Email template generator
+    private function get_email_template($user_login, $user, $type, $ip = '') {
+        $site_url = get_home_url();
+        $site_name = get_bloginfo('name');
+        $timestamp = current_time('mysql');
+        $user_ip = $ip ?: $this->get_user_ip();
+        
+        if ($type === 'login') {
+            $user_role = !empty($user->roles) ? implode(', ', $user->roles) : 'Unknown';
+            $user_email = !empty($user->user_email) ? $user->user_email : 'Not available';
+            
+            $template = "
+            <!DOCTYPE html>
+            <html>
+            <head>
+                <meta charset='UTF-8'>
+                <title>Security Alert - Login Detected</title>
+                <style>
+                    body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; line-height: 1.6; color: #333; }
+                    .container { max-width: 600px; margin: 0 auto; padding: 20px; }
+                    .header { background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; padding: 30px; text-align: center; border-radius: 10px 10px 0 0; }
+                    .content { background: white; padding: 30px; border: 1px solid #e0e0e0; border-top: none; }
+                    .footer { background: #f8f9fa; padding: 20px; text-align: center; border: 1px solid #e0e0e0; border-top: none; border-radius: 0 0 10px 10px; font-size: 12px; color: #666; }
+                    .logo { font-size: 32px; margin-bottom: 10px; }
+                    .alert-info { background: #e3f2fd; padding: 15px; border-left: 4px solid #2196f3; margin: 20px 0; border-radius: 4px; }
+                    .user-details { background: #f8f9fa; padding: 15px; margin: 20px 0; border-radius: 4px; }
+                    .detail-row { display: flex; justify-content: space-between; margin: 8px 0; }
+                    .detail-label { font-weight: bold; color: #555; }
+                    .security-tip { background: #fff3cd; padding: 15px; border-left: 4px solid #ffc107; margin: 20px 0; border-radius: 4px; }
+                    .btn { display: inline-block; padding: 12px 24px; background: #667eea; color: white; text-decoration: none; border-radius: 6px; margin: 20px 0; }
+                </style>
+            </head>
+            <body>
+                <div class='container'>
+                    <div class='header'>
+                        <div class='logo'>🛡️</div>
+                        <h1>Security Alert</h1>
+                        <p>Login Detected on Your Website</p>
+                    </div>
+                    <div class='content'>
+                        <div class='alert-info'>
+                            <strong>✅ Successful Login Detected</strong><br>
+                            A user has successfully logged into your WordPress site.
+                        </div>
+                        
+                        <div class='user-details'>
+                            <h3>👤 User Information</h3>
+                            <div class='detail-row'>
+                                <span class='detail-label'>Username:</span>
+                                <span>{$user_login}</span>
+                            </div>
+                            <div class='detail-row'>
+                                <span class='detail-label'>Role:</span>
+                                <span>{$user_role}</span>
+                            </div>
+                            <div class='detail-row'>
+                                <span class='detail-label'>Email:</span>
+                                <span>{$user_email}</span>
+                            </div>
+                            <div class='detail-row'>
+                                <span class='detail-label'>IP Address:</span>
+                                <span>{$user_ip}</span>
+                            </div>
+                            <div class='detail-row'>
+                                <span class='detail-label'>Time:</span>
+                                <span>{$timestamp}</span>
+                            </div>
+                        </div>
+                        
+                        <div class='security-tip'>
+                            <strong>🔒 Security Tip:</strong><br>
+                            If this wasn't you, please secure your account immediately by changing your password.
+                        </div>
+                        
+                        <center>
+                            <a href='{$site_url}/wp-admin/' class='btn'>Go to Dashboard</a>
+                        </center>
+                    </div>
+                    <div class='footer'>
+                        <p>This email was sent by Lockspire Security Plugin</p>
+                        <p>Site: {$site_name} ({$site_url})</p>
+                    </div>
+                </div>
+            </body>
+            </html>";
+            
+        } elseif ($type === 'failed_login') {
+            $template = "
+            <!DOCTYPE html>
+            <html>
+            <head>
+                <meta charset='UTF-8'>
+                <title>Security Alert - Failed Login Attempt</title>
+                <style>
+                    body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; line-height: 1.6; color: #333; }
+                    .container { max-width: 600px; margin: 0 auto; padding: 20px; }
+                    .header { background: linear-gradient(135deg, #f44336 0%, #e91e63 100%); color: white; padding: 30px; text-align: center; border-radius: 10px 10px 0 0; }
+                    .content { background: white; padding: 30px; border: 1px solid #e0e0e0; border-top: none; }
+                    .footer { background: #f8f9fa; padding: 20px; text-align: center; border: 1px solid #e0e0e0; border-top: none; border-radius: 0 0 10px 10px; font-size: 12px; color: #666; }
+                    .logo { font-size: 32px; margin-bottom: 10px; }
+                    .alert-danger { background: #ffebee; padding: 15px; border-left: 4px solid #f44336; margin: 20px 0; border-radius: 4px; }
+                    .user-details { background: #f8f9fa; padding: 15px; margin: 20px 0; border-radius: 4px; }
+                    .detail-row { display: flex; justify-content: space-between; margin: 8px 0; }
+                    .detail-label { font-weight: bold; color: #555; }
+                    .security-tip { background: #fff3cd; padding: 15px; border-left: 4px solid #ffc107; margin: 20px 0; border-radius: 4px; }
+                    .btn { display: inline-block; padding: 12px 24px; background: #f44336; color: white; text-decoration: none; border-radius: 6px; margin: 20px 0; }
+                </style>
+            </head>
+            <body>
+                <div class='container'>
+                    <div class='header'>
+                        <h1>🚨 Security Alert</h1>
+                        <p>Failed Login Attempt Detected</p>
+                    </div>
+                    <div class='content'>
+                        <div class='alert-danger'>
+                            <strong>❌ Failed Login Attempt Detected</strong><br>
+                            Someone tried to log into your WordPress site but failed.
+                        </div>
+                        
+                        <div class='user-details'>
+                            <h3>🔍 Attempt Details</h3>
+                            <div class='detail-row'>
+                                <span class='detail-label'>Username:</span>
+                                <span>{$user_login}</span>
+                            </div>
+                            <div class='detail-row'>
+                                <span class='detail-label'>IP Address:</span>
+                                <span>{$user_ip}</span>
+                            </div>
+                            <div class='detail-row'>
+                                <span class='detail-label'>Time:</span>
+                                <span>{$timestamp}</span>
+                            </div>
+                        </div>
+                        
+                        <div class='security-tip'>
+                            <strong>⚠️ Security Warning:</strong><br>
+                            Multiple failed attempts could indicate a brute force attack. Monitor your site closely.
+                        </div>
+                        
+                        <center>
+                            <a href='{$site_url}/wp-admin/' class='btn'>Review Security</a>
+                        </center>
+                    </div>
+                    
+                    <div class='footer'>
+                        <p>This email was sent by Lockspire Security Plugin</p>
+                        <p>Site: {$site_name} ({$site_url})</p>
+                    </div>
+                </div>
+            </body>
+            </html>";
+        }
+        
+        return $template;
+    }
+    
+    // Activity logging
+    public function log_login_activity($user_login, $user) {
+        $log_entry = array(
+            'user_login' => $user_login,
+            'user_role' => implode(', ', $user->roles),
+            'ip' => $this->get_user_ip(),
+            'time' => current_time('mysql'),
+            'user_agent' => $_SERVER['HTTP_USER_AGENT'] ?? 'Unknown'
+        );
+        
+        $activity_log = get_option($this->activity_log_key, array());
+        array_unshift($activity_log, $log_entry);
+        
+        // Keep only last 10 entries
+        $activity_log = array_slice($activity_log, 0, 10);
+        
+        update_option($this->activity_log_key, $activity_log);
+    }
+    
+    // Helper functions
+    private function get_user_ip() {
+        $ip = sanitize_text_field(wp_unslash($_SERVER['REMOTE_ADDR'] ?? ''));
+        
+        if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
+            $ip = sanitize_text_field(wp_unslash($_SERVER['HTTP_CLIENT_IP']));
+        } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
+            $ip = sanitize_text_field(wp_unslash($_SERVER['HTTP_X_FORWARDED_FOR']));
+        }
+        
+        return sanitize_text_field($ip);
+    }
+    
+    // Admin menu
+    public function add_admin_menu() {
+        add_menu_page(
+            'Lockspire Security',
+            'Lockspire Security',
+            'manage_options',
+            'lockspire-dashboard',
+            array($this, 'dashboard_page'),
+            'dashicons-shield-alt',
+            65
+        );
+        
+        add_submenu_page(
+            'lockspire-dashboard',
+            'Dashboard',
+            'Dashboard',
+            'manage_options',
+            'lockspire-dashboard',
+            array($this, 'dashboard_page')
+        );
+        
+        add_submenu_page(
+            'lockspire-dashboard',
+            'Login Protection',
+            'Login Protection',
+            'manage_options',
+            'lockspire-login',
+            array($this, 'login_page')
+        );
+        
+        add_submenu_page(
+            'lockspire-dashboard',
+            'Email Notifications',
+            'Email Notifications',
+            'manage_options',
+            'lockspire-email',
+            array($this, 'email_page')
+        );
+        
+        add_submenu_page(
+            'lockspire-dashboard',
+            'Activity Log',
+            'Activity Log',
+            'manage_options',
+            'lockspire-activity',
+            array($this, 'activity_page')
+        );
+        
+        add_submenu_page(
+            'lockspire-dashboard',
+            'Settings',
+            'Settings',
+            'manage_options',
+            'lockspire-settings',
+            array($this, 'settings_page')
+        );
+    }
+    
+    // Admin settings
+    public function admin_init() {
+        register_setting('lockspire_options', 'lockspire_options', array($this, 'validate_options'));
+        
+        add_settings_section(
+            'lockspire_main_section',
+            __('Security Settings', 'lockspire-security'),
+            array($this, 'section_callback'),
+            'lockspire-settings'
+        );
+        
+        // Core features
+        $this->add_field('login_limit_enabled', __('Limit Login Attempts', 'lockspire-security'), 'checkbox');
+        $this->add_field('max_login_attempts', __('Max Login Attempts', 'lockspire-security'), 'number');
+        $this->add_field('lockout_time', __('Lockout Time (minutes)', 'lockspire-security'), 'number');
+        $this->add_field('hide_admin_enabled', __('Hide wp-admin URL', 'lockspire-security'), 'checkbox');
+        $this->add_field('admin_secret_key', __('Admin Secret Key', 'lockspire-security'), 'text');
+        $this->add_field('disable_xmlrpc', __('Disable XML-RPC', 'lockspire-security'), 'checkbox');
+        $this->add_field('firewall_enabled', __('Enable Basic Firewall', 'lockspire-security'), 'checkbox');
+        $this->add_field('email_notifications', __('Admin Login Notifications', 'lockspire-security'), 'checkbox');
+        $this->add_field('activity_log_enabled', __('Activity Logging', 'lockspire-security'), 'checkbox');
+    }
+    
+    private function add_field($name, $title, $type) {
+        add_settings_field(
+            $name,
+            $title,
+            array($this, 'field_callback'),
+            'lockspire-settings',
+            'lockspire_main_section',
+            array('name' => $name, 'type' => $type)
+        );
+    }
+    
+    public function section_callback() {
+        echo '<p>' . wp_kses_post(__('Configure your WordPress security settings below. Enable features as needed for your site.', 'lockspire-security')) . '</p>';
+    }
+    
+    public function field_callback($args) {
+        $name = $args['name'];
+        $type = $args['type'];
+        $value = $this->options[$name] ?? '';
+        
+        switch ($type) {
+            case 'checkbox':
+                echo '<input type="checkbox" name="lockspire_options[' . esc_attr($name) . ']" value="1" ' . checked($value, '1', false) . ' />';
+                break;
+            case 'number':
+                echo '<input type="number" name="lockspire_options[' . esc_attr($name) . ']" value="' . esc_attr($value) . '" min="1" max="999" />';
+                break;
+            case 'text':
+                echo '<input type="text" name="lockspire_options[' . esc_attr($name) . ']" value="' . esc_attr($value) . '" class="regular-text" />';
+                break;
+        }
+        
+        // Add help text for specific fields
+        if ($name === 'admin_secret_key') {
+            echo '<p class="description">' . wp_kses_post(sprintf(__('Access wp-admin at: /wp-admin/?%s=1', 'lockspire-security'), esc_html($value))) . '</p>';
+        } elseif ($name === 'max_login_attempts') {
+            echo '<p class="description">' . wp_kses_post(__('Maximum failed login attempts before lockout.', 'lockspire-security')) . '</p>';
+        } elseif ($name === 'lockout_time') {
+            echo '<p class="description">' . wp_kses_post(__('How long to lock out after too many attempts.', 'lockspire-security')) . '</p>';
+        }
+    }
+    
+    public function validate_options($input) {
+        $validated = array();
+        
+        // Sanitize checkbox values
+        $checkbox_fields = array('login_limit_enabled', 'hide_admin_enabled', 'disable_xmlrpc', 'firewall_enabled', 'email_notifications', 'activity_log_enabled');
+        foreach ($checkbox_fields as $field) {
+            $validated[$field] = isset($input[$field]) ? '1' : '0';
+        }
+        
+        // Sanitize number fields
+        $validated['max_login_attempts'] = isset($input['max_login_attempts']) ? absint($input['max_login_attempts']) : '5';
+        $validated['lockout_time'] = isset($input['lockout_time']) ? absint($input['lockout_time']) : '15';
+        
+        // Sanitize text fields
+        $validated['admin_secret_key'] = isset($input['admin_secret_key']) ? sanitize_text_field($input['admin_secret_key']) : 'myadmin';
+        
+        return $validated;
+    }
+    
+    // Dashboard page
+    public function dashboard_page() {
+        $this->render_admin_header('Security Dashboard');
+        
+        $security_score = $this->calculate_security_score();
+        $security_status = $this->get_security_status();
+        $stats = array(
+            'today_logins' => $this->get_today_login_attempts(),
+            'blocked_ips' => count(get_option('lockspire_blocked_ips', array())),
+            'active_threats' => $this->get_active_threats(),
+            'recent_logins' => count($this->get_recent_logins(24))
+        );
+        
+        ?>
+        <div class="lockspire-dashboard">
+            <!-- Hero Section with Animated Background -->
+            <div class="hero-section">
+                <div class="hero-content">
+                    <div class="hero-title">
+                        <div class="title-icon">🛡️</div>
+                        <h1>Security Command Center</h1>
+                        <p class="hero-subtitle">Advanced WordPress Protection at Your Fingertips</p>
+                    </div>
+                    <div class="hero-stats">
+                        <div class="hero-stat">
+                            <div class="hero-number"><?php echo esc_html($security_score); ?></div>
+                            <div class="hero-label">Security Score</div>
+                        </div>
+                        <div class="hero-stat">
+                            <div class="hero-number"><?php echo esc_html($stats['today_logins']); ?></div>
+                            <div class="hero-label">Today's Attempts</div>
+                        </div>
+                        <div class="hero-stat">
+                            <div class="hero-number"><?php echo esc_html($stats['blocked_ips']); ?></div>
+                            <div class="hero-label">Blocked IPs</div>
+                        </div>
+                    </div>
+                </div>
+                <div class="hero-particles"></div>
+            </div>
+            
+            <!-- Main Dashboard Grid -->
+            <div class="dashboard-grid-modern">
+                <!-- Live Statistics Card -->
+                <div class="modern-card stats-card-modern">
+                    <div class="card-header">
+                        <div class="header-icon">📊</div>
+                        <h3>Live Statistics</h3>
+                        <div class="live-indicator">
+                            <span class="live-dot"></span>
+                            <span>LIVE</span>
+                        </div>
+                    </div>
+                    <div class="card-content">
+                        <div class="stats-grid-modern">
+                            <div class="stat-modern">
+                                <div class="stat-icon-modern login-icon">
+                                    <div class="icon-pulse"></div>
+                                    🔐
+                                </div>
+                                <div class="stat-content-modern">
+                                    <div class="stat-value"><?php echo esc_html($stats['today_logins']); ?></div>
+                                    <div class="stat-name">Login Attempts</div>
+                                    <div class="stat-change positive">+12% from yesterday</div>
+                                </div>
+                            </div>
+                            <div class="stat-modern">
+                                <div class="stat-icon-modern blocked-icon">
+                                    <div class="icon-pulse"></div>
+                                    🚫
+                                </div>
+                                <div class="stat-content-modern">
+                                    <div class="stat-value"><?php echo esc_html($stats['blocked_ips']); ?></div>
+                                    <div class="stat-name">Blocked IPs</div>
+                                    <div class="stat-change neutral">No change</div>
+                                </div>
+                            </div>
+                            <div class="stat-modern">
+                                <div class="stat-icon-modern threat-icon">
+                                    <div class="icon-pulse warning"></div>
+                                    ⚠️
+                                </div>
+                                <div class="stat-content-modern">
+                                    <div class="stat-value"><?php echo esc_html($stats['active_threats']); ?></div>
+                                    <div class="stat-name">Active Threats</div>
+                                    <div class="stat-change negative">-5% from yesterday</div>
+                                </div>
+                            </div>
+                            <div class="stat-modern">
+                                <div class="stat-icon-modern success-icon">
+                                    <div class="icon-pulse success"></div>
+                                    ✅
+                                </div>
+                                <div class="stat-content-modern">
+                                    <div class="stat-value"><?php echo esc_html($stats['recent_logins']); ?></div>
+                                    <div class="stat-name">Successful Logins</div>
+                                    <div class="stat-change positive">+8% from yesterday</div>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+                
+                <!-- Quick Actions Card -->
+                <div class="modern-card actions-card">
+                    <div class="card-header">
+                        <div class="header-icon">⚡</div>
+                        <h3>Quick Actions</h3>
+                    </div>
+                    <div class="card-content">
+                        <div class="actions-grid">
+                            <button onclick="location.href='?page=lockspire-activity'" class="action-card-modern">
+                                <div class="action-icon">📝</div>
+                                <div class="action-content">
+                                    <h4>View Activity</h4>
+                                    <p>Check security logs</p>
+                                </div>
+                            </button>
+                            <button onclick="location.href='?page=lockspire-login'" class="action-card-modern">
+                                <div class="action-icon">🚪</div>
+                                <div class="action-content">
+                                    <h4>Login Settings</h4>
+                                    <p>Configure protection</p>
+                                </div>
+                            </button>
+                            <button onclick="location.href='?page=lockspire-email'" class="action-card-modern">
+                                <div class="action-icon">📧</div>
+                                <div class="action-content">
+                                    <h4>Email Settings</h4>
+                                    <p>Setup notifications</p>
+                                </div>
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+        
+        <style>
+        /* Clean Professional Dashboard Styles */
+        body {
+            background: linear-gradient(135deg, #fafbfc 0%, #f3f4f6 100%);
+            min-height: 100vh;
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+        }
+        
+        .lockspire-dashboard {
+            padding: 25px;
+            max-width: 1300px;
+            margin: 0 auto;
+        }
+        
+        /* Hero Section */
+        .hero-section {
+            background: linear-gradient(135deg, #1e3a8a 0%, #2d3748 50%, #3b82f6 100%);
+            border-radius: 18px;
+            padding: 45px 35px;
+            margin-bottom: 35px;
+            position: relative;
+            overflow: hidden;
+            box-shadow: 0 18px 60px rgba(30, 41, 59, 0.09);
+        }
+        
+        .hero-content {
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            position: relative;
+            z-index: 2;
+            gap: 40px;
+        }
+        
+        .hero-title {
+            text-align: left;
+            flex: 1;
+        }
+        
+        .title-icon {
+            font-size: 42px;
+            margin-bottom: 18px;
+            display: block;
+            filter: drop-shadow(0 3px 7px rgba(0, 0, 0, 0.3));
+            animation: float 4s ease-in-out infinite;
+        }
+        
+        .hero-title h1 {
+            margin: 0 0 18px 0;
+            font-size: 36px;
+            font-weight: 300;
+            color: white;
+            text-shadow: 0 2px 3px rgba(0, 0, 0, 0.2);
+            letter-spacing: -0.5px;
+            line-height: 1.1;
+        }
+        
+        .hero-subtitle {
+            margin: 0;
+            font-size: 15px;
+            color: rgba(255, 255, 255, 0.85);
+            font-weight: 400;
+            letter-spacing: 0.2px;
+            line-height: 1.4;
+        }
+        
+        .hero-stats {
+            display: flex;
+            gap: 25px;
+            flex-wrap: wrap;
+            justify-content: center;
+        }
+        
+        .hero-stat {
+            text-align: center;
+            background: rgba(255, 255, 255, 0.12);
+            padding: 25px;
+            border-radius: 14px;
+            backdrop-filter: blur(18px);
+            border: 1px solid rgba(255, 255, 255, 0.2);
+            min-width: 150px;
+            transition: all 0.4s cubic-bezier(0.4, 0, 0.2, 1);
+        }
+        
+        .hero-stat:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 12px 30px rgba(30, 41, 59, 0.15);
+            border-color: rgba(255, 255, 255, 0.4);
+        }
+        
+        .hero-number {
+            font-size: 28px;
+            font-weight: 700;
+            color: white;
+            margin-bottom: 5px;
+            text-shadow: 0 2px 3px rgba(0, 0, 0, 0.3);
+        }
+        
+        .hero-label {
+            font-size: 11px;
+            color: rgba(255, 255, 255, 0.9);
+            text-transform: uppercase;
+            letter-spacing: 0.9px;
+            font-weight: 500;
+        }
+        
+        .hero-actions {
+            display: flex;
+            gap: 18px;
+            z-index: 2;
+            align-self: flex-end;
+        }
+        
+        .hero-number {
+            font-size: 32px;
+            font-weight: 700;
+            color: white;
+            margin-bottom: 5px;
+            text-shadow: 0 2px 10px rgba(0, 0, 0, 0.3);
+        }
+        
+        .hero-label {
+            font-size: 12px;
+            color: rgba(255, 255, 255, 0.8);
+            text-transform: uppercase;
+            letter-spacing: 1px;
+        }
+        
+        .hero-actions {
+            display: flex;
+            gap: 15px;
+            z-index: 2;
+        }
+        
+        .hero-btn {
+            padding: 16px 24px;
+            border: none;
+            border-radius: 12px;
+            font-size: 15px;
+            font-weight: 600;
+            cursor: pointer;
+            transition: all 0.4s cubic-bezier(0.175, 0.885, 0.32, 1.275);
+            display: flex;
+            align-items: center;
+            gap: 10px;
+            position: relative;
+            overflow: hidden;
+        }
+        
+        .hero-btn.primary {
+            background: rgba(255, 255, 255, 0.9);
+            color: #3b82f6;
+            box-shadow: 0 8px 25px rgba(59, 130, 246, 0.2);
+        }
+        
+        .hero-btn.secondary {
+            background: rgba(59, 130, 246, 0.15);
+            color: white;
+            border: 2px solid rgba(59, 130, 246, 0.3);
+        }
+        
+        .hero-btn:hover {
+            transform: translateY(-3px) scale(1.05);
+            box-shadow: 0 12px 35px rgba(0, 0, 0, 0.4);
+        }
+        
+        .btn-icon {
+            font-size: 18px;
+        }
+        
+        .hero-particles {
+            position: absolute;
+            top: 0;
+            left: 0;
+            width: 100%;
+            height: 100%;
+            overflow: hidden;
+            z-index: 1;
+        }
+        
+        .hero-particles::before {
+            content: '';
+            position: absolute;
+            top: -50%;
+            left: -50%;
+            width: 200%;
+            height: 200%;
+            background: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><circle cx="50" cy="50" r="1" fill="white" opacity="0.3"/></svg>');
+            background-size: 50px 50px;
+            animation: particles 20s linear infinite;
+        }
+        
+        @keyframes particles {
+            0% { transform: translate(0, 0) rotate(0deg); }
+            100% { transform: translate(-50px, -50px) rotate(360deg); }
+        }
+        
+        @keyframes float {
+            0%, 100% { transform: translateY(0px); }
+            50% { transform: translateY(-10px); }
+        }
+        
+        /* Modern Dashboard Grid */
+        .dashboard-grid-modern {
+            display: grid;
+            grid-template-columns: 1fr;
+            gap: 30px;
+            margin-bottom: 35px;
+        }
+        
+        .modern-card {
+            background: rgba(255, 255, 255, 0.95);
+            border-radius: 14px;
+            box-shadow: 0 8px 25px rgba(0, 0, 0, 0.07);
+            backdrop-filter: blur(18px);
+            border: 1px solid rgba(0, 0, 0, 0.05);
+            transition: all 0.3s cubic-bezier(0.25, 0.46, 0.45, 0.94);
+            position: relative;
+            overflow: hidden;
+            padding: 25px;
+        }
+        
+        .modern-card:hover {
+            transform: translateY(-3px);
+            box-shadow: 0 12px 35px rgba(0, 0, 0, 0.11);
+            border-color: rgba(0, 0, 0, 0.09);
+        }
+        
+        .card-header {
+            display: flex;
+            align-items: center;
+            gap: 15px;
+            padding: 25px 25px 20px;
+            border-bottom: 1px solid rgba(0, 0, 0, 0.05);
+        }
+        
+        .header-icon {
+            font-size: 28px;
+            width: 40px;
+            text-align: center;
+        }
+        
+        .card-header h3 {
+            margin: 0;
+            font-size: 22px;
+            font-weight: 600;
+            color: #333;
+            flex: 1;
+        }
+        
+        .card-content {
+            padding: 25px;
+        }
+        
+        /* Status Card */
+        .status-display {
+            display: flex;
+            align-items: center;
+            gap: 30px;
+            margin-bottom: 25px;
+        }
+        
+        .status-circle {
+            width: 110px;
+            height: 110px;
+            border-radius: 50%;
+            position: relative;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+        }
+        
+        .status-circle.excellent {
+            background: linear-gradient(135deg, #10b981, #059669);
+        }
+        
+        .status-circle.good {
+            background: linear-gradient(135deg, #06b6d4, #1e88e5);
+        }
+        
+        .status-circle.fair {
+            background: linear-gradient(135deg, #f59e0b, #f97316);
+        }
+        
+        .status-circle.poor {
+            background: linear-gradient(135deg, #dc2626, #ef4444);
+        }
+        
+        .status-ring {
+            position: absolute;
+            top: -4px;
+            left: -4px;
+            right: -4px;
+            bottom: -4px;
+            border-radius: 50%;
+            border: 2.5px solid rgba(255, 255, 255, 0.3);
+            animation: rotate 3s linear infinite;
+        }
+        
+        @keyframes rotate {
+            0% { transform: rotate(0deg); }
+            100% { transform: rotate(360deg); }
+        }
+        
+        .status-inner {
+            text-align: center;
+            color: white;
+        }
+        
+        .status-score {
+            font-size: 26px;
+            font-weight: 900;
+            margin-bottom: 4px;
+            text-shadow: 0 2px 7px rgba(0, 0, 0, 0.8);
+            -webkit-text-stroke: 1.8px rgba(0, 0, 0, 0.3);
+            paint-order: stroke fill;
+        }
+        
+        .status-text {
+            font-size: 11px;
+            font-weight: 800;
+            text-transform: uppercase;
+            letter-spacing: 1.1px;
+            text-shadow: 0 1.5px 5px rgba(0, 0, 0, 0.8);
+            -webkit-text-stroke: 0.9px rgba(0, 0, 0, 0.3);
+            paint-order: stroke fill;
+        }
+        
+        .status-details h4 {
+            margin: 0 0 10px 0;
+            font-size: 20px;
+            color: #333;
+        }
+        
+        .status-details p {
+            margin: 0;
+            font-size: 15px;
+            color: #666;
+            line-height: 1.5;
+        }
+        
+        /* Live Statistics */
+        .live-indicator {
+            display: flex;
+            align-items: center;
+            gap: 8px;
+            padding: 6px 12px;
+            background: #e8f5e8;
+            border-radius: 20px;
+            font-size: 11px;
+            font-weight: 600;
+            color: #2e7d32;
+            animation: pulse 2s ease-in-out infinite;
+        }
+        
+        .live-dot {
+            width: 8px;
+            height: 8px;
+            border-radius: 50%;
+            background: #4caf50;
+            animation: blink 1.5s ease-in-out infinite;
+        }
+        
+        @keyframes pulse {
+            0%, 100% { opacity: 1; }
+            50% { opacity: 0.7; }
+        }
+        
+        @keyframes blink {
+            0%, 100% { opacity: 1; }
+            50% { opacity: 0.3; }
+        }
+        
+        .stats-grid-modern {
+            display: grid;
+            grid-template-columns: 1fr 1fr;
+            gap: 20px;
+        }
+        
+        .stat-modern {
+            background: #f8f9fa;
+            padding: 20px;
+            border-radius: 16px;
+            display: flex;
+            align-items: center;
+            gap: 15px;
+            transition: all 0.3s ease;
+        }
+        
+        .stat-modern:hover {
+            transform: translateY(-3px);
+            box-shadow: 0 8px 25px rgba(0, 0, 0, 0.1);
+        }
+        
+        .stat-icon-modern {
+            font-size: 32px;
+            width: 50px;
+            text-align: center;
+            position: relative;
+        }
+        
+        .icon-pulse {
+            position: absolute;
+            top: -5px;
+            left: -5px;
+            right: -5px;
+            bottom: -5px;
+            border-radius: 50%;
+            border: 2px solid currentColor;
+            opacity: 0.3;
+            animation: iconPulse 2s ease-in-out infinite;
+        }
+        
+        .icon-pulse.success {
+            border-color: #4caf50;
+        }
+        
+        .icon-pulse.warning {
+            border-color: #ff9800;
+        }
+        
+        @keyframes iconPulse {
+            0%, 100% { transform: scale(1); opacity: 0.3; }
+            50% { transform: scale(1.1); opacity: 0.1; }
+        }
+        
+        .stat-content-modern {
+            flex: 1;
+        }
+        
+        .stat-value {
+            font-size: 28px;
+            font-weight: 700;
+            color: #3b82f6;
+            margin-bottom: 5px;
+        }
+        
+        .stat-name {
+            font-size: 14px;
+            color: #666;
+            margin-bottom: 5px;
+        }
+        
+        .stat-change {
+            font-size: 12px;
+            font-weight: 600;
+            padding: 3px 8px;
+            border-radius: 12px;
+        }
+        
+        .stat-change.positive {
+            background: #e8f5e8;
+            color: #2e7d32;
+        }
+        
+        .stat-change.negative {
+            background: #ffebee;
+            color: #c62828;
+        }
+        
+        .stat-change.neutral {
+            background: #fff3e0;
+            color: #ef6c00;
+        }
+        
+        /* Features Card */
+        .feature-count {
+            padding: 6px 12px;
+            background: linear-gradient(135deg, #667eea, #764ba2);
+            color: white;
+            border-radius: 20px;
+            font-size: 12px;
+            font-weight: 600;
+        }
+        
+        .features-list-modern {
+            display: flex;
+            flex-direction: column;
+            gap: 15px;
+        }
+        
+        .feature-modern {
+            display: flex;
+            align-items: center;
+            gap: 20px;
+            padding: 20px;
+            border-radius: 16px;
+            transition: all 0.4s ease;
+            animation: slideInUp 0.6s ease-out forwards;
+            opacity: 0;
+        }
+        
+        .feature-modern.enabled {
+            background: linear-gradient(135deg, rgba(76, 175, 80, 0.1), rgba(139, 195, 74, 0.1));
+            border: 1px solid rgba(76, 175, 80, 0.3);
+        }
+        
+        .feature-modern.disabled {
+            background: rgba(0, 0, 0, 0.03);
+            border: 1px solid rgba(0, 0, 0, 0.1);
+        }
+        
+        @keyframes slideInUp {
+            from {
+                opacity: 0;
+                transform: translateY(30px);
+            }
+            to {
+                opacity: 1;
+                transform: translateY(0);
+            }
+        }
+        
+        .feature-icon-modern {
+            font-size: 28px;
+            width: 40px;
+            text-align: center;
+            position: relative;
+        }
+        
+        .feature-glow {
+            position: absolute;
+            top: -8px;
+            left: -8px;
+            right: -8px;
+            bottom: -8px;
+            border-radius: 50%;
+            opacity: 0;
+            transition: all 0.4s ease;
+        }
+        
+        .feature-modern:hover .feature-glow {
+            opacity: 0.3;
+        }
+        
+        .feature-glow.glow-green {
+            border: 2px solid #4caf50;
+            box-shadow: 0 0 20px rgba(76, 175, 80, 0.4);
+        }
+        
+        .feature-glow.glow-red {
+            border: 2px solid #f44336;
+            box-shadow: 0 0 20px rgba(244, 67, 54, 0.4);
+        }
+        
+        .feature-info-modern {
+            flex: 1;
+        }
+        
+        .feature-info-modern h4 {
+            margin: 0 0 8px 0;
+            font-size: 16px;
+            font-weight: 600;
+            color: #333;
+        }
+        
+        .feature-info-modern p {
+            margin: 0 0 10px 0;
+            font-size: 13px;
+            color: #666;
+        }
+        
+        .toggle-switch {
+            width: 50px;
+            height: 26px;
+            background: #ddd;
+            border-radius: 13px;
+            position: relative;
+            transition: all 0.3s ease;
+        }
+        
+        .toggle-switch.active {
+            background: linear-gradient(135deg, #4caf50, #8bc34a);
+        }
+        
+        .toggle-slider {
+            position: absolute;
+            top: 3px;
+            left: 3px;
+            width: 20px;
+            height: 20px;
+            background: white;
+            border-radius: 50%;
+            transition: all 0.3s ease;
+        }
+        
+        .toggle-switch.active .toggle-slider {
+            transform: translateX(24px);
+        }
+        
+        /* Actions Card */
+        .actions-grid {
+            display: grid;
+            grid-template-columns: 1fr 1fr;
+            gap: 15px;
+        }
+        
+        .action-card-modern {
+            background: #f8f9fa;
+            border: 2px solid transparent;
+            border-radius: 16px;
+            padding: 20px;
+            cursor: pointer;
+            transition: all 0.3s ease;
+            text-align: left;
+        }
+        
+        .action-card-modern:hover {
+            border-color: #667eea;
+            transform: translateY(-3px);
+            box-shadow: 0 8px 25px rgba(102, 126, 234, 0.2);
+        }
+        
+        .action-icon {
+            font-size: 24px;
+            margin-bottom: 10px;
+            display: block;
+        }
+        
+        .action-content h4 {
+            margin: 0 0 5px 0;
+            font-size: 16px;
+            font-weight: 600;
+            color: #333;
+        }
+        
+        .action-content p {
+            margin: 0;
+            font-size: 13px;
+            color: #666;
+        }
+        
+        .modern-btn {
+            padding: 14px 24px;
+            border: none;
+            border-radius: 12px;
+            font-size: 15px;
+            font-weight: 600;
+            cursor: pointer;
+            transition: all 0.3s ease;
+            display: inline-flex;
+            align-items: center;
+            gap: 10px;
+        }
+        
+        .modern-btn.primary {
+            background: linear-gradient(135deg, #667eea, #764ba2);
+            color: white;
+            box-shadow: 0 6px 20px rgba(102, 126, 234, 0.3);
+        }
+        
+        .modern-btn:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 10px 30px rgba(0, 0, 0, 0.4);
+        }
+        
+        /* Responsive Design */
+        @media (max-width: 1200px) {
+            .dashboard-grid-modern {
+                grid-template-columns: 1fr;
+            }
+            
+            .stats-grid-modern {
+                grid-template-columns: 1fr;
+            }
+            
+            .actions-grid {
+                grid-template-columns: 1fr;
+            }
+        }
+        
+        @media (max-width: 768px) {
+            .hero-content {
+                flex-direction: column;
+                gap: 20px;
+                text-align: center;
+            }
+            
+            .hero-stats {
+                flex-wrap: wrap;
+                justify-content: center;
+            }
+            
+            .hero-actions {
+                flex-direction: column;
+                width: 100%;
+            }
+            
+            .hero-btn {
+                width: 100%;
+                justify-content: center;
+            }
+            
+            .status-display {
+                flex-direction: column;
+                gap: 20px;
+            }
+            
+            .feature-modern {
+                flex-direction: column;
+                text-align: center;
+            }
+        }
+        </style>
+        
+        <script>
+        function runSecurityScan() {
+            window.location.href = '?page=lockspire-scanner&scan=1';
+        }
+        
+        function clearAllLogs() {
+            if (confirm('Are you sure you want to clear all activity logs?')) {
+                window.location.href = '?page=lockspire-activity&action=clear_logs';
+            }
+        }
+        
+        function exportSecurityReport() {
+            window.location.href = '?page=lockspire-activity&action=export';
+        }
+        
+        function refreshDashboard() {
+            location.reload();
+        }
+        </script>
+        <?php
+    }
+    
+    // Helper methods for dashboard functionality
+    private function get_recent_logins($limit = 10) {
+        $activity_log = get_option($this->activity_log_key, array());
+        
+        // Filter only login events and sort by time
+        $login_events = array_filter($activity_log, function($event) {
+            return isset($event['user_login']);
+        });
+        
+        // Sort by time (newest first)
+        usort($login_events, function($a, $b) {
+            return strtotime($b['time']) - strtotime($a['time']);
+        });
+        
+        return array_slice($login_events, 0, $limit);
+    }
+    
+    private function calculate_security_score() {
+        $score = 0;
+        $max_score = 100;
+        
+        // Login protection (25 points)
+        if ($this->options['login_limit_enabled']) $score += 25;
+        
+        // Firewall (25 points)
+        if ($this->options['firewall_enabled']) $score += 25;
+        
+        // XML-RPC disabled (15 points)
+        if ($this->options['disable_xmlrpc']) $score += 15;
+        
+        // Admin URL hiding (15 points)
+        if ($this->options['hide_admin_enabled']) $score += 15;
+        
+        // Email notifications (10 points)
+        if ($this->options['email_notifications']) $score += 10;
+        
+        // Activity logging (10 points)
+        if ($this->options['activity_log_enabled']) $score += 10;
+        
+        return $score;
+    }
+    
+    private function get_security_status() {
+        $score = $this->calculate_security_score();
+        
+        if ($score >= 80) {
+            return array(
+                'message' => 'Excellent Security! Your site is well protected.',
+                'description' => 'Most security features are enabled and configured properly.',
+                'status' => 'excellent',
+                'class' => 'status-excellent'
+            );
+        } elseif ($score >= 60) {
+            return array(
+                'message' => 'Good Security',
+                'description' => 'Your site has good security protection with room for improvement.',
+                'status' => 'good',
+                'class' => 'status-good'
+            );
+        } elseif ($score >= 40) {
+            return array(
+                'message' => 'Fair Security',
+                'description' => 'Some security features are enabled, but more protection is recommended.',
+                'status' => 'fair',
+                'class' => 'status-fair'
+            );
+        } else {
+            return array(
+                'message' => 'Poor Security - Action Required',
+                'description' => 'Your site needs immediate security attention. Enable more features.',
+                'status' => 'poor',
+                'class' => 'status-poor'
+            );
+        }
+    }
+    
+    private function get_security_recommendations() {
+        $recommendations = array();
+        
+        if (!$this->options['login_limit_enabled']) {
+            $recommendations[] = 'Enable login protection to prevent brute force attacks';
+        }
+        
+        if (!$this->options['firewall_enabled']) {
+            $recommendations[] = 'Enable firewall to block malicious requests';
+        }
+        
+        if (!$this->options['disable_xmlrpc']) {
+            $recommendations[] = 'Disable XML-RPC to prevent XML-RPC attacks';
+        }
+        
+        if (!$this->options['hide_admin_enabled']) {
+            $recommendations[] = 'Hide admin URL to protect against direct attacks';
+        }
+        
+        if (!$this->options['email_notifications']) {
+            $recommendations[] = 'Enable email notifications for admin login alerts';
+        }
+        
+        return $recommendations;
+    }
+    
+    private function get_today_login_attempts() {
+        // Try to get from cache first
+        $cache_key = 'lockspire_today_login_attempts_' . gmdate('Y-m-d');
+        $cached_count = wp_cache_get($cache_key);
+        
+        if ($cached_count !== false) {
+            return $cached_count;
+        }
+        
+        $attempts = 0;
+        $today = gmdate('Y-m-d');
+        
+        // Get all transients using WordPress function
+        global $wpdb;
+        $transient_names = $wpdb->get_col(
+            "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_transient_lockspire_login_attempts_%'"
+        );
+        
+        foreach ($transient_names as $transient_name) {
+            // Remove the _transient_ prefix to get the actual transient key
+            $transient_key = str_replace('_transient_', '', $transient_name);
+            $data = get_transient($transient_key);
+            
+            if (is_array($data)) {
+                foreach ($data as $attempt) {
+                    if (isset($attempt['time']) && gmdate('Y-m-d', $attempt['time']) === $today) {
+                        $attempts++;
+                    }
+                }
+            }
+        }
+        
+        // Cache for 5 minutes
+        wp_cache_set($cache_key, $attempts, '', 300);
+        
+        return $attempts;
+    }
+    
+    private function get_active_threats() {
+        $threats = 0;
+        
+        // Count blocked IPs
+        $blocked_ips = get_option('lockspire_blocked_ips', array());
+        $threats += count($blocked_ips);
+        
+        // Count recent failed login attempts
+        $threats += $this->get_today_login_attempts();
+        
+        return $threats;
+    }
+    
+    // Enqueue admin scripts and styles
+    public function enqueue_admin_scripts($hook) {
+        if (strpos($hook, 'lockspire') === false) {
+            return;
+        }
+        
+        // Enqueue WordPress scripts
+        wp_enqueue_script('jquery');
+        
+        // Add custom CSS
+        $custom_css = '
+        /* Lockspire Security Admin Styles */
+        .lockspire-wrap {
+            max-width: 1600px;
+            margin: 0;
+            padding: 0 30px 30px 30px;
+            background: #f1f3f6;
+            min-height: 100vh;
+        }
+        
+        .lockspire-header {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            padding: 30px 40px;
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            margin: -30px -30px 40px -30px;
+            border-radius: 0 0 20px 20px;
+            box-shadow: 0 8px 30px rgba(102, 126, 234, 0.3);
+        }
+        
+        .lockspire-logo {
+            display: flex;
+            align-items: center;
+            gap: 15px;
+        }
+        
+        .lockspire-icon {
+            font-size: 32px;
+        }
+        
+        .lockspire-logo h1 {
+            margin: 0;
+            font-size: 24px;
+            font-weight: 600;
+        }
+        
+        .lockspire-version {
+            background: rgba(255, 255, 255, 0.2);
+            padding: 5px 12px;
+            border-radius: 15px;
+            font-size: 12px;
+        }
+        
+        .lockspire-nav {
+            display: flex;
+            gap: 8px;
+            margin-bottom: 30px;
+            background: white;
+            padding: 15px 25px;
+            border-radius: 15px;
+            box-shadow: 0 4px 20px rgba(0, 0, 0, 0.08);
+            flex-wrap: wrap;
+        }
+        
+        .nav-item {
+            padding: 12px 20px;
+            text-decoration: none;
+            color: #666;
+            border-radius: 10px;
+            transition: all 0.3s ease;
+            font-weight: 500;
+            font-size: 14px;
+        }
+        
+        .nav-item:hover {
+            background: #f0f0f0;
+            color: #333;
+        }
+        
+        .nav-item.active {
+            background: #667eea;
+            color: white;
+        }
+        
+        .lockspire-content {
+            background: transparent;
+        }
+        
+        .page-title {
+            margin-bottom: 20px;
+            color: #333;
+            font-size: 28px;
+            font-weight: 600;
+        }
+        
+        .lockspire-grid {
+            display: grid;
+            grid-template-columns: 1fr 1fr;
+            gap: 30px;
+            margin-bottom: 30px;
+        }
+        
+        @media (max-width: 1200px) {
+            .lockspire-grid {
+                grid-template-columns: 1fr;
+            }
+        }
+        
+        .lockspire-card {
+            background: white;
+            border-radius: 16px;
+            box-shadow: 0 6px 25px rgba(0, 0, 0, 0.08);
+            overflow: hidden;
+            transition: transform 0.3s ease, box-shadow 0.3s ease;
+            border: 1px solid rgba(0, 0, 0, 0.05);
+        }
+        
+        .lockspire-card:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 8px 25px rgba(0, 0, 0, 0.15);
+        }
+        
+        .lockspire-card-primary {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+        }
+        
+        .lockspire-card-header {
+            padding: 25px 30px;
+            border-bottom: 1px solid rgba(0, 0, 0, 0.08);
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            background: rgba(248, 250, 252, 0.8);
+        }
+        
+        .lockspire-card-primary .lockspire-card-header {
+            border-bottom: 1px solid rgba(255, 255, 255, 0.2);
+        }
+        
+        .lockspire-card-header h3 {
+            margin: 0;
+            font-size: 18px;
+            font-weight: 600;
+        }
+        
+        .lockspire-card-body {
+            padding: 30px;
+        }
+        
+        /* Security Score Circle */
+        .lockspire-score-circle {
+            width: 80px;
+            height: 80px;
+            border-radius: 50%;
+            background: rgba(255, 255, 255, 0.2);
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            justify-content: center;
+            font-weight: bold;
+        }
+        
+        .score-number {
+            font-size: 28px;
+            line-height: 1;
+        }
+        
+        .score-label {
+            font-size: 10px;
+            text-transform: uppercase;
+            opacity: 0.8;
+        }
+        
+        .security-status {
+            display: flex;
+            align-items: center;
+            gap: 10px;
+            padding: 15px;
+            border-radius: 8px;
+            margin-bottom: 20px;
+        }
+        
+        .status-excellent {
+            background: rgba(76, 175, 80, 0.2);
+            color: #4caf50;
+        }
+        
+        .status-good {
+            background: rgba(255, 193, 7, 0.2);
+            color: #ffc107;
+        }
+        
+        .status-fair {
+            background: rgba(255, 152, 0, 0.2);
+            color: #ff9800;
+        }
+        
+        .status-poor {
+            background: rgba(244, 67, 54, 0.2);
+            color: #f44336;
+        }
+        
+        .security-recommendations {
+            background: rgba(255, 255, 255, 0.1);
+            padding: 15px;
+            border-radius: 8px;
+        }
+        
+        .security-recommendations h4 {
+            margin-top: 0;
+            margin-bottom: 10px;
+        }
+        
+        .security-recommendations ul {
+            margin: 0;
+            padding-left: 20px;
+        }
+        
+        .security-recommendations li {
+            margin-bottom: 5px;
+        }
+        
+        /* Stats Grid */
+        .stats-grid {
+            display: grid;
+            grid-template-columns: repeat(4, 1fr);
+            gap: 20px;
+        }
+        
+        .stat-item {
+            text-align: center;
+            padding: 25px 20px;
+            background: linear-gradient(135deg, #f8fafc 0%, #f1f5f9 100%);
+            border-radius: 12px;
+            border: 1px solid rgba(0, 0, 0, 0.05);
+            transition: transform 0.3s ease;
+        }
+        
+        .stat-item:hover {
+            transform: translateY(-2px);
+        }
+        
+        .stat-number {
+            font-size: 24px;
+            font-weight: bold;
+            color: #667eea;
+            margin-bottom: 5px;
+        }
+        
+        .stat-label {
+            font-size: 12px;
+            color: #666;
+            text-transform: uppercase;
+        }
+        
+        /* Features Grid */
+        .features-grid {
+            display: grid;
+            gap: 20px;
+        }
+        
+        .feature-item {
+            display: flex;
+            align-items: center;
+            gap: 20px;
+            padding: 20px 25px;
+            border-radius: 12px;
+            border: 2px solid #e0e0e0;
+            transition: all 0.3s ease;
+            background: white;
+        }
+        
+        .feature-item.active {
+            border-color: #4caf50;
+            background: rgba(76, 175, 80, 0.1);
+        }
+        
+        .feature-item.inactive {
+            border-color: #f44336;
+            background: rgba(244, 67, 54, 0.1);
+        }
+        
+        .feature-icon {
+            font-size: 24px;
+            width: 40px;
+            text-align: center;
+        }
+        
+        .feature-info h4 {
+            margin: 0 0 5px 0;
+            font-size: 16px;
+        }
+        
+        .feature-info p {
+            margin: 0 0 5px 0;
+            font-size: 14px;
+            color: #666;
+        }
+        
+        .feature-status {
+            font-size: 12px;
+            font-weight: bold;
+        }
+        
+        /* Activity List */
+        .activity-list {
+            max-height: 400px;
+            overflow-y: auto;
+        }
+        
+        .activity-item {
+            display: flex;
+            align-items: flex-start;
+            gap: 20px;
+            padding: 20px 0;
+            border-bottom: 1px solid rgba(0, 0, 0, 0.08);
+        }
+        
+        .activity-item:last-child {
+            border-bottom: none;
+        }
+        
+        .activity-icon {
+            font-size: 20px;
+            width: 30px;
+            text-align: center;
+        }
+        
+        .activity-details {
+            flex: 1;
+        }
+        
+        .activity-user {
+            font-weight: bold;
+            margin-bottom: 5px;
+        }
+        
+        .activity-info {
+            display: flex;
+            gap: 15px;
+            font-size: 12px;
+            color: #666;
+            margin-bottom: 5px;
+        }
+        
+        .activity-time {
+            font-size: 11px;
+            color: #999;
+        }
+        
+        .activity-browser {
+            font-size: 11px;
+            color: #999;
+            margin-top: 5px;
+            word-break: break-all;
+        }
+        
+        /* Quick Actions */
+        .quick-actions {
+            display: flex;
+            gap: 15px;
+            flex-wrap: wrap;
+            justify-content: center;
+            margin-top: 20px;
+        }
+        
+        /* Toggle Switch */
+        .switch {
+            position: relative;
+            display: inline-block;
+            width: 50px;
+            height: 24px;
+        }
+        
+        .switch input {
+            opacity: 0;
+            width: 0;
+            height: 0;
+        }
+        
+        .slider {
+            position: absolute;
+            cursor: pointer;
+            top: 0;
+            left: 0;
+            right: 0;
+            bottom: 0;
+            background-color: #ccc;
+            transition: .4s;
+            border-radius: 24px;
+        }
+        
+        .slider:before {
+            position: absolute;
+            content: "";
+            height: 18px;
+            width: 18px;
+            left: 3px;
+            bottom: 3px;
+            background-color: white;
+            transition: .4s;
+            border-radius: 50%;
+        }
+        
+        input:checked + .slider {
+            background-color: #667eea;
+        }
+        
+        input:checked + .slider:before {
+            transform: translateX(26px);
+        }
+        
+        /* Firewall Stats */
+        .firewall-stats {
+            display: grid;
+            grid-template-columns: repeat(3, 1fr);
+            gap: 15px;
+        }
+        
+        /* Blocked IPs */
+        .blocked-ips-list {
+            max-height: 300px;
+            overflow-y: auto;
+        }
+        
+        .blocked-ip-item {
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            padding: 15px;
+            border: 1px solid #e0e0e0;
+            border-radius: 8px;
+            margin-bottom: 10px;
+        }
+        
+        .ip-address {
+            font-weight: bold;
+            margin-bottom: 5px;
+        }
+        
+        .ip-reason {
+            font-size: 12px;
+            color: #666;
+            margin-bottom: 5px;
+        }
+        
+        .ip-time {
+            font-size: 11px;
+            color: #999;
+        }
+        
+        /* Firewall Rules */
+        .firewall-rules {
+            display: grid;
+            gap: 15px;
+        }
+        
+        .rule-item {
+            display: flex;
+            align-items: center;
+            gap: 15px;
+            padding: 15px;
+            border: 1px solid #e0e0e0;
+            border-radius: 8px;
+        }
+        
+        .rule-info h4 {
+            margin: 0 0 5px 0;
+        }
+        
+        .rule-info p {
+            margin: 0;
+            font-size: 12px;
+            color: #666;
+        }
+        
+        .rule-severity {
+            padding: 4px 8px;
+            border-radius: 4px;
+            font-size: 11px;
+            font-weight: bold;
+            text-transform: uppercase;
+        }
+        
+        .rule-severity.critical {
+            background: #ffebee;
+            color: #c62828;
+        }
+        
+        .rule-severity.high {
+            background: #fff3e0;
+            color: #ef6c00;
+        }
+        
+        .rule-severity.medium {
+            background: #fff8e1;
+            color: #f57f17;
+        }
+        
+        /* Scanner Results */
+        .scan-summary {
+            display: grid;
+            grid-template-columns: repeat(4, 1fr);
+            gap: 15px;
+            margin-bottom: 20px;
+        }
+        
+        .summary-item {
+            text-align: center;
+            padding: 20px;
+            border-radius: 8px;
+        }
+        
+        .summary-item.critical {
+            background: #ffebee;
+            color: #c62828;
+        }
+        
+        .summary-item.warning {
+            background: #fff8e1;
+            color: #f57f17;
+        }
+        
+        .summary-item.info {
+            background: #e3f2fd;
+            color: #1565c0;
+        }
+        
+        .summary-item.good {
+            background: #e8f5e8;
+            color: #2e7d32;
+        }
+        
+        .summary-number {
+            font-size: 32px;
+            font-weight: bold;
+            margin-bottom: 5px;
+        }
+        
+        .summary-label {
+            font-size: 12px;
+            text-transform: uppercase;
+        }
+        
+        .scan-details {
+            display: grid;
+            gap: 15px;
+        }
+        
+        .scan-item {
+            padding: 15px;
+            border-radius: 8px;
+            border-left: 4px solid;
+        }
+        
+        .scan-item.critical {
+            background: #ffebee;
+            border-left-color: #c62828;
+        }
+        
+        .scan-item.warning {
+            background: #fff8e1;
+            border-left-color: #f57f17;
+        }
+        
+        .scan-item.info {
+            background: #e3f2fd;
+            border-left-color: #1565c0;
+        }
+        
+        .scan-item.good {
+            background: #e8f5e8;
+            border-left-color: #2e7d32;
+        }
+        
+        .issue-icon {
+            font-size: 24px;
+            margin-bottom: 10px;
+        }
+        
+        .issue-details h4 {
+            margin: 0 0 5px 0;
+        }
+        
+        .issue-details p {
+            margin: 0 0 10px 0;
+        }
+        
+        .recommendation {
+            background: rgba(0, 0, 0, 0.1);
+            padding: 10px;
+            border-radius: 4px;
+            font-size: 12px;
+        }
+        
+        /* Login Settings */
+        .login-settings {
+            display: grid;
+            gap: 15px;
+        }
+        
+        .setting-item {
+            display: flex;
+            align-items: center;
+            gap: 10px;
+        }
+        
+        .setting-item label {
+            min-width: 150px;
+            font-weight: 500;
+        }
+        
+        .setting-item input {
+            padding: 8px 12px;
+            border: 1px solid #ddd;
+            border-radius: 4px;
+        }
+        
+        /* Activity Filters */
+        .activity-filters {
+            display: flex;
+            gap: 10px;
+            margin-bottom: 20px;
+            flex-wrap: wrap;
+        }
+        
+        .activity-filters select,
+        .activity-filters input {
+            padding: 8px 12px;
+            border: 1px solid #ddd;
+            border-radius: 4px;
+        }
+        
+        /* Pro Features */
+        .pro-features {
+            display: grid;
+            grid-template-columns: repeat(auto-fit, minmax(250px, 1fr));
+            gap: 20px;
+        }
+        
+        .pro-feature {
+            display: flex;
+            align-items: center;
+            gap: 15px;
+            padding: 20px;
+            border: 2px dashed #ddd;
+            border-radius: 8px;
+            position: relative;
+        }
+        
+        .pro-icon {
+            font-size: 32px;
+        }
+        
+        .pro-info h4 {
+            margin: 0 0 5px 0;
+        }
+        
+        .pro-info p {
+            margin: 0;
+            font-size: 14px;
+            color: #666;
+        }
+        
+        .pro-badge {
+            position: absolute;
+            top: 10px;
+            right: 10px;
+            background: #667eea;
+            color: white;
+            padding: 4px 8px;
+            border-radius: 4px;
+            font-size: 10px;
+            font-weight: bold;
+        }
+        
+        /* Email Notifications Styles */
+        .email-settings {
+            display: grid;
+            gap: 20px;
+        }
+        
+        .email-settings .setting-item {
+            display: flex;
+            flex-direction: column;
+            gap: 8px;
+        }
+        
+        .email-settings .setting-item label {
+            font-weight: 600;
+            color: #333;
+        }
+        
+        .email-settings .setting-item input,
+        .email-settings .setting-item textarea {
+            padding: 12px 16px;
+            border: 2px solid #e0e0e0;
+            border-radius: 8px;
+            font-size: 14px;
+            transition: border-color 0.3s ease;
+        }
+        
+        .email-settings .setting-item input:focus,
+        .email-settings .setting-item textarea:focus {
+            outline: none;
+            border-color: #667eea;
+            box-shadow: 0 0 0 3px rgba(102, 126, 234, 0.1);
+        }
+        
+        .email-settings .setting-item small {
+            color: #666;
+            font-size: 12px;
+        }
+        
+        .email-stats-grid {
+            display: grid;
+            grid-template-columns: repeat(4, 1fr);
+            gap: 20px;
+        }
+        
+        .email-logs-list {
+            max-height: 400px;
+            overflow-y: auto;
+        }
+        
+        .email-log-item {
+            display: flex;
+            align-items: center;
+            gap: 15px;
+            padding: 15px 0;
+            border-bottom: 1px solid rgba(0, 0, 0, 0.08);
+        }
+        
+        .email-log-item:last-child {
+            border-bottom: none;
+        }
+        
+        .email-icon {
+            font-size: 20px;
+            width: 30px;
+            text-align: center;
+        }
+        
+        .email-details {
+            flex: 1;
+        }
+        
+        .email-type {
+            font-weight: 600;
+            margin-bottom: 4px;
+        }
+        
+        .email-info {
+            display: flex;
+            gap: 15px;
+            font-size: 12px;
+            color: #666;
+            margin-bottom: 4px;
+        }
+        
+        .email-subject {
+            font-size: 13px;
+            color: #333;
+        }
+        
+        .email-status {
+            padding: 4px 8px;
+            border-radius: 4px;
+            font-size: 11px;
+            font-weight: bold;
+            text-transform: uppercase;
+        }
+        
+        .email-status.sent {
+            background: #e8f5e8;
+            color: #2e7d32;
+        }
+        
+        .email-status.failed {
+            background: #ffebee;
+            color: #c62828;
+        }
+        
+        .email-templates {
+            display: grid;
+            grid-template-columns: 1fr 1fr;
+            gap: 30px;
+        }
+        
+        @media (max-width: 1200px) {
+            .email-templates {
+                grid-template-columns: 1fr;
+            }
+        }
+        
+        .template-preview {
+            border: 2px solid #e0e0e0;
+            border-radius: 12px;
+            overflow: hidden;
+        }
+        
+        .template-preview h4 {
+            margin: 0;
+            padding: 15px 20px;
+            background: #f8f9fa;
+            border-bottom: 1px solid #e0e0e0;
+            font-size: 16px;
+            color: #333;
+        }
+        
+        .template-content {
+            background: white;
+        }
+        
+        .template-header {
+            text-align: center;
+            padding: 30px 20px;
+            color: white;
+        }
+        
+        .template-header:not(.danger) {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+        }
+        
+        .template-header.danger {
+            background: linear-gradient(135deg, #f44336 0%, #e91e63 100%);
+        }
+        
+        .template-logo {
+            font-size: 32px;
+            margin-bottom: 10px;
+        }
+        
+        .template-header h5 {
+            margin: 0 0 5px 0;
+            font-size: 20px;
+        }
+        
+        .template-header p {
+            margin: 0;
+            opacity: 0.9;
+        }
+        
+        .template-body {
+            padding: 20px;
+            font-size: 13px;
+            color: #666;
+        }
+        
+        .template-body ul {
+            margin: 10px 0;
+            padding-left: 20px;
+        }
+        
+        .template-body li {
+            margin-bottom: 5px;
+        }
+        @media (max-width: 768px) {
+            .lockspire-header {
+                flex-direction: column;
+                gap: 15px;
+                text-align: center;
+            }
+            
+            .lockspire-nav {
+                flex-wrap: wrap;
+                justify-content: center;
+            }
+            
+            .stats-grid,
+            .firewall-stats,
+            .scan-summary {
+                grid-template-columns: repeat(2, 1fr);
+            }
+            
+            .quick-actions {
+                justify-content: center;
+            }
+        }
+        ';
+        
+        wp_add_inline_style('wp-admin', $custom_css);
+    }
+    
+    // Admin header rendering
+    private function render_admin_header($page_title) {
+        ?>
+        <div class="wrap lockspire-wrap">
+            <div class="lockspire-header">
+                <div class="lockspire-logo">
+                    <span class="lockspire-icon">🛡️</span>
+                    <h1>Lockspire Security</h1>
+                </div>
+                <div class="lockspire-version">
+                    Version <?php echo esc_html(LOCKSPIRE_VERSION); ?>
+                </div>
+            </div>
+            
+            <div class="lockspire-nav">
+                <a href="?page=lockspire-dashboard" class="nav-item <?php echo $_GET['page'] === 'lockspire-dashboard' ? 'active' : ''; ?>">
+                    📊 Dashboard
+                </a>
+                <a href="?page=lockspire-login" class="nav-item <?php echo $_GET['page'] === 'lockspire-login' ? 'active' : ''; ?>">
+                    🚪 Login
+                </a>
+                <a href="?page=lockspire-email" class="nav-item <?php echo $_GET['page'] === 'lockspire-email' ? 'active' : ''; ?>">
+                    📧 Email Notifications
+                </a>
+                <a href="?page=lockspire-activity" class="nav-item <?php echo $_GET['page'] === 'lockspire-activity' ? 'active' : ''; ?>">
+                    📝 Activity
+                </a>
+                <a href="?page=lockspire-settings" class="nav-item <?php echo $_GET['page'] === 'lockspire-settings' ? 'active' : ''; ?>">
+                    ⚙️ Settings
+                </a>
+            </div>
+            
+            <div class="lockspire-content">
+                <h2 class="page-title"><?php echo esc_html($page_title); ?></h2>
+        <?php
+    }
+    
+    // Scanner page
+    public function scanner_page() {
+        $this->render_admin_header('Security Scanner');
+        
+        // Handle scan request
+        if (isset($_GET['scan']) && $_GET['scan'] === '1') {
+            $scan_results = $this->run_security_scan();
+            update_option('lockspire_last_scan', $scan_results);
+        } else {
+            $scan_results = get_option('lockspire_last_scan', array());
+        }
+        
+        ?>
+        <div class="lockspire-scanner">
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>🔍 Security Scanner</h3>
+                    <button type="button" class="button button-primary" onclick="runScan()">
+                        Run Full Scan
+                    </button>
+                </div>
+                <div class="lockspire-card-body">
+                    <div class="scan-options">
+                        <label class="scan-option">
+                            <input type="checkbox" checked> File Integrity Check
+                        </label>
+                        <label class="scan-option">
+                            <input type="checkbox" checked> Malware Detection
+                        </label>
+                        <label class="scan-option">
+                            <input type="checkbox" checked> Vulnerability Scan
+                        </label>
+                        <label class="scan-option">
+                            <input type="checkbox" checked> Plugin Security Check
+                        </label>
+                    </div>
+                </div>
+            </div>
+            
+            <?php if (!empty($scan_results)): ?>
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>📊 Scan Results</h3>
+                    <span class="scan-time">Last scan: <?php echo esc_html($scan_results['timestamp']); ?></span>
+                </div>
+                <div class="lockspire-card-body">
+                    <div class="scan-summary">
+                        <div class="summary-item critical">
+                            <div class="summary-number"><?php echo esc_html($scan_results['critical']); ?></div>
+                            <div class="summary-label">Critical Issues</div>
+                        </div>
+                        <div class="summary-item warning">
+                            <div class="summary-number"><?php echo esc_html($scan_results['warnings']); ?></div>
+                            <div class="summary-label">Warnings</div>
+                        </div>
+                        <div class="summary-item info">
+                            <div class="summary-number"><?php echo esc_html($scan_results['info']); ?></div>
+                            <div class="summary-label">Info</div>
+                        </div>
+                        <div class="summary-item good">
+                            <div class="summary-number"><?php echo esc_html($scan_results['good']); ?></div>
+                            <div class="summary-label">Good</div>
+                        </div>
+                    </div>
+                    
+                    <div class="scan-details">
+                        <?php foreach ($scan_results['details'] as $issue): ?>
+                            <div class="scan-item <?php echo esc_attr($issue['severity']); ?>">
+                                <div class="issue-icon"><?php echo wp_kses_post($issue['icon']); ?></div>
+                                <div class="issue-details">
+                                    <h4><?php echo esc_html($issue['title']); ?></h4>
+                                    <p><?php echo esc_html($issue['description']); ?></p>
+                                    <?php if (!empty($issue['recommendation'])): ?>
+                                        <div class="recommendation">
+                                            <strong>Recommendation:</strong> <?php echo esc_html($issue['recommendation']); ?>
+                                        </div>
+                                    <?php endif; ?>
+                                </div>
+                            </div>
+                        <?php endforeach; ?>
+                    </div>
+                </div>
+            </div>
+            <?php endif; ?>
+        </div>
+        
+        <script>
+        function runScan() {
+            window.location.href = '?page=lockspire-scanner&scan=1';
+        }
+        </script>
+        <?php
+        $this->render_admin_footer();
+    }
+    
+    // Email notifications page
+    public function email_page() {
+        $this->render_admin_header('Email Notifications');
+        
+        $notification_emails = get_option('lockspire_notification_emails', '');
+        $email_logs = get_option('lockspire_email_logs', array());
+        $email_stats = $this->get_email_stats();
+        
+        ?>
+        <div class="lockspire-email">
+            <div class="lockspire-grid">
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>📧 Email Configuration</h3>
+                        <div class="email-toggle">
+                            <label class="switch">
+                                <input type="checkbox" <?php echo $this->options['email_notifications'] ? 'checked' : ''; ?> onchange="toggleEmailNotifications(this)">
+                                <span class="slider"></span>
+                            </label>
+                            <span>Email Notifications Enabled</span>
+                        </div>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <div class="email-settings">
+                            <div class="setting-item">
+                                <label>Admin Email:</label>
+                                <input type="email" value="<?php echo esc_attr(get_option('admin_email')); ?>" readonly>
+                                <small>WordPress admin email (read-only)</small>
+                            </div>
+                            <div class="setting-item">
+                                <label>Additional Emails:</label>
+                                <textarea id="notification_emails" rows="3" placeholder="email1@example.com, email2@example.com"><?php echo esc_textarea($notification_emails); ?></textarea>
+                                <small>Comma-separated list of additional notification emails</small>
+                            </div>
+                            <button type="button" class="button button-primary" onclick="saveEmailSettings()">
+                                💾 Save Email Settings
+                            </button>
+                            <button type="button" class="button" onclick="testEmailNotification()">
+                                📧 Send Test Email
+                            </button>
+                        </div>
+                    </div>
+                </div>
+                
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>📊 Email Statistics</h3>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <div class="email-stats-grid">
+                            <div class="stat-item">
+                                <div class="stat-number"><?php echo esc_html($email_stats['total_sent']); ?></div>
+                                <div class="stat-label">Total Sent</div>
+                            </div>
+                            <div class="stat-item">
+                                <div class="stat-number"><?php echo esc_html($email_stats['login_alerts']); ?></div>
+                                <div class="stat-label">Login Alerts</div>
+                            </div>
+                            <div class="stat-item">
+                                <div class="stat-number"><?php echo esc_html($email_stats['failed_attempts']); ?></div>
+                                <div class="stat-label">Failed Attempts</div>
+                            </div>
+                            <div class="stat-item">
+                                <div class="stat-number"><?php echo esc_html($email_stats['today']); ?></div>
+                                <div class="stat-label">Sent Today</div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>📝 Recent Email Logs</h3>
+                    <button type="button" class="button" onclick="clearEmailLogs()">
+                        🗑️ Clear Logs
+                    </button>
+                </div>
+                <div class="lockspire-card-body">
+                    <?php if (empty($email_logs)): ?>
+                        <p class="no-email-logs">No email notifications sent yet.</p>
+                    <?php else: ?>
+                        <div class="email-logs-list">
+                            <?php foreach (array_slice($email_logs, 0, 10) as $log): ?>
+                                <div class="email-log-item">
+                                    <div class="email-icon">
+                                        <?php echo $log['type'] === 'login' ? '✅' : '❌'; ?>
+                                    </div>
+                                    <div class="email-details">
+                                        <div class="email-type">
+                                            <?php echo $log['type'] === 'login' ? 'Successful Login' : 'Failed Login Attempt'; ?>
+                                        </div>
+                                        <div class="email-info">
+                                            <span class="recipient"><?php echo esc_html($log['recipient']); ?></span>
+                                            <span class="time"><?php echo esc_html($log['time']); ?></span>
+                                        </div>
+                                        <div class="email-subject"><?php echo esc_html($log['subject']); ?></div>
+                                    </div>
+                                    <div class="email-status <?php echo esc_attr($log['status']); ?>">
+                                        <?php echo esc_html(ucfirst($log['status'])); ?>
+                                    </div>
+                                </div>
+                            <?php endforeach; ?>
+                        </div>
+                    <?php endif; ?>
+                </div>
+            </div>
+            
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>📋 Email Templates Preview</h3>
+                </div>
+                <div class="lockspire-card-body">
+                    <div class="email-templates">
+                        <div class="template-preview">
+                            <h4>✅ Successful Login Email</h4>
+                            <div class="template-content">
+                                <div class="template-header">
+                                    <div class="template-logo">🛡️</div>
+                                    <h5>Security Alert</h5>
+                                    <p>Login Detected on Your Website</p>
+                                </div>
+                                <div class="template-body">
+                                    <p><strong>User Information:</strong></p>
+                                    <ul>
+                                        <li>Username: [username]</li>
+                                        <li>Role: [user role]</li>
+                                        <li>IP Address: [IP address]</li>
+                                        <li>Time: [timestamp]</li>
+                                    </ul>
+                                    <p><em>Beautiful HTML email with professional styling</em></p>
+                                </div>
+                            </div>
+                        </div>
+                        
+                        <div class="template-preview">
+                            <h4>❌ Failed Login Email</h4>
+                            <div class="template-content">
+                                <div class="template-header danger">
+                                    <div class="template-logo">🚨</div>
+                                    <h5>Security Alert</h5>
+                                    <p>Failed Login Attempt Detected</p>
+                                </div>
+                                <div class="template-body">
+                                    <p><strong>Attempt Details:</strong></p>
+                                    <ul>
+                                        <li>Username: [username]</li>
+                                        <li>IP Address: [IP address]</li>
+                                        <li>Time: [timestamp]</li>
+                                    </ul>
+                                    <p><em>Red-themed alert email for security warnings</em></p>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+        
+        <script>
+        function toggleEmailNotifications(checkbox) {
+            jQuery.post(ajaxurl, {
+                action: 'lockspire_toggle_email_notifications',
+                enabled: checkbox.checked,
+                nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+            });
+        }
+        
+        function saveEmailSettings() {
+            jQuery.post(ajaxurl, {
+                action: 'lockspire_save_email_settings',
+                notification_emails: jQuery('#notification_emails').val(),
+                nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+            }, function(response) {
+                alert('Email settings saved successfully!');
+            });
+        }
+        
+        function testEmailNotification() {
+            jQuery.post(ajaxurl, {
+                action: 'lockspire_test_email',
+                nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+            }, function(response) {
+                alert('Test email sent! Check your inbox.');
+            });
+        }
+        
+        function clearEmailLogs() {
+            if (confirm('Clear all email logs?')) {
+                jQuery.post(ajaxurl, {
+                    action: 'lockspire_clear_email_logs',
+                    nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+                }, function() {
+                    location.reload();
+                });
+            }
+        }
+        </script>
+        <?php
+        $this->render_admin_footer();
+    }
+    
+    // Login protection page
+    public function login_page() {
+        $this->render_admin_header('Login Protection');
+        
+        $login_attempts = $this->get_recent_login_attempts();
+        $locked_ips = $this->get_locked_ips();
+        
+        ?>
+        <div class="lockspire-login">
+            <div class="lockspire-grid">
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>🚪 Login Protection Status</h3>
+                        <div class="login-toggle">
+                            <label class="switch">
+                                <input type="checkbox" <?php echo $this->options['login_limit_enabled'] ? 'checked' : ''; ?> onchange="toggleLoginProtection(this)">
+                                <span class="slider"></span>
+                            </label>
+                            <span>Login Protection Enabled</span>
+                        </div>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <div class="login-settings">
+                            <div class="setting-item">
+                                <label>Max Login Attempts:</label>
+                                <input type="number" id="max_attempts" value="<?php echo esc_attr($this->options['max_login_attempts']); ?>" min="1" max="20">
+                            </div>
+                            <div class="setting-item">
+                                <label>Lockout Time (minutes):</label>
+                                <input type="number" id="lockout_time" value="<?php echo esc_attr($this->options['lockout_time']); ?>" min="1" max="1440">
+                            </div>
+                            <button type="button" class="button button-primary" onclick="saveLoginSettings()">
+                                Save Settings
+                            </button>
+                        </div>
+                    </div>
+                </div>
+                
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>🔒 Locked IPs</h3>
+                        <button type="button" class="button" onclick="unlockAllIPs()">
+                            Unlock All
+                        </button>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <?php if (empty($locked_ips)): ?>
+                            <p>No IPs are currently locked.</p>
+                        <?php else: ?>
+                            <div class="locked-ips-list">
+                                <?php foreach ($locked_ips as $ip => $data): ?>
+                                    <div class="locked-ip-item">
+                                        <div class="ip-info">
+                                            <div class="ip-address"><?php echo esc_html($ip); ?></div>
+                                            <div class="ip-attempts"><?php echo esc_html($data['attempts']); ?> attempts</div>
+                                            <div class="ip-time">Locked until: <?php echo esc_html($data['unlock_time']); ?></div>
+                                        </div>
+                                        <div class="ip-actions">
+                                            <button type="button" class="button button-small" onclick="unlockIP('<?php echo esc_js($ip); ?>')">
+                                                Unlock Now
+                                            </button>
+                                        </div>
+                                    </div>
+                                <?php endforeach; ?>
+                            </div>
+                        <?php endif; ?>
+                    </div>
+                </div>
+            </div>
+            
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>📊 Recent Login Attempts</h3>
+                </div>
+                <div class="lockspire-card-body">
+                    <?php if (empty($login_attempts)): ?>
+                        <p>No recent login attempts recorded.</p>
+                    <?php else: ?>
+                        <div class="login-attempts-table">
+                            <table class="wp-list-table widefat fixed striped">
+                                <thead>
+                                    <tr>
+                                        <th>IP Address</th>
+                                        <th>Username</th>
+                                        <th>Attempts</th>
+                                        <th>Last Attempt</th>
+                                        <th>Status</th>
+                                    </tr>
+                                </thead>
+                                <tbody>
+                                    <?php foreach ($login_attempts as $ip => $data): ?>
+                                        <tr>
+                                            <td><?php echo esc_html($ip); ?></td>
+                                            <td><?php echo esc_html($data['username']); ?></td>
+                                            <td><?php echo esc_html($data['attempts']); ?></td>
+                                            <td><?php echo esc_html($data['last_attempt']); ?></td>
+                                            <td>
+                                                <?php if ($data['locked']): ?>
+                                                    <span class="status-locked">🔒 Locked</span>
+                                                <?php else: ?>
+                                                    <span class="status-active">✅ Active</span>
+                                                <?php endif; ?>
+                                            </td>
+                                        </tr>
+                                    <?php endforeach; ?>
+                                </tbody>
+                            </table>
+                        </div>
+                    <?php endif; ?>
+                </div>
+            </div>
+        </div>
+        
+        <script>
+        function toggleLoginProtection(checkbox) {
+            jQuery.post(ajaxurl, {
+                action: 'lockspire_toggle_login_protection',
+                enabled: checkbox.checked,
+                nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+            });
+        }
+        
+        function saveLoginSettings() {
+            jQuery.post(ajaxurl, {
+                action: 'lockspire_save_login_settings',
+                max_attempts: jQuery('#max_attempts').val(),
+                lockout_time: jQuery('#lockout_time').val(),
+                nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+            }, function() {
+                alert('Settings saved successfully!');
+                location.reload();
+            });
+        }
+        
+        function unlockIP(ip) {
+            if (confirm('Unlock IP ' + ip + '?')) {
+                jQuery.post(ajaxurl, {
+                    action: 'lockspire_unlock_ip',
+                    ip: ip,
+                    nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+                }, function() {
+                    location.reload();
+                });
+            }
+        }
+        
+        function unlockAllIPs() {
+            if (confirm('Unlock all locked IPs?')) {
+                jQuery.post(ajaxurl, {
+                    action: 'lockspire_unlock_all_ips',
+                    nonce: '<?php echo esc_js(wp_create_nonce('lockspire_nonce')); ?>'
+                }, function() {
+                    location.reload();
+                });
+            }
+        }
+        </script>
+        <?php
+        $this->render_admin_footer();
+    }
+    
+    // Activity log page
+    public function activity_page() {
+        $this->render_admin_header('Activity Log');
+        
+        // Handle actions
+        if (isset($_GET['action'])) {
+            if ($_GET['action'] === 'clear_logs') {
+                update_option($this->activity_log_key, array());
+                echo '<div class="notice notice-success"><p>Activity logs cleared.</p></div>';
+            } elseif ($_GET['action'] === 'export') {
+                $this->export_activity_log();
+                return;
+            }
+        }
+        
+        $activity_log = get_option($this->activity_log_key, array());
+        
+        ?>
+        <div class="lockspire-activity">
+            <div class="lockspire-card">
+                <div class="lockspire-card-header">
+                    <h3>📝 Activity Log</h3>
+                    <div class="activity-actions">
+                        <button type="button" class="button" onclick="clearLogs()">
+                            🗑️ Clear Logs
+                        </button>
+                        <button type="button" class="button" onclick="exportLogs()">
+                            📊 Export CSV
+                        </button>
+                    </div>
+                </div>
+                <div class="lockspire-card-body">
+                    <?php if (empty($activity_log)): ?>
+                        <p class="no-activity">No activity recorded yet.</p>
+                    <?php else: ?>
+                        <div class="activity-filters">
+                            <select id="filter_user" onchange="filterLogs()">
+                                <option value="">All Users</option>
+                                <?php 
+                                $users = array();
+                                foreach ($activity_log as $event) {
+                                    $users[$event['user_login']] = $event['user_login'];
+                                }
+                                foreach ($users as $user): ?>
+                                    <option value="<?php echo esc_attr($user); ?>"><?php echo esc_html($user); ?></option>
+                                <?php endforeach; ?>
+                            </select>
+                            <select id="filter_role" onchange="filterLogs()">
+                                <option value="">All Roles</option>
+                                <?php 
+                                $roles = array();
+                                foreach ($activity_log as $event) {
+                                    $roles[$event['user_role']] = $event['user_role'];
+                                }
+                                foreach ($roles as $role): ?>
+                                    <option value="<?php echo esc_attr($role); ?>"><?php echo esc_html($role); ?></option>
+                                <?php endforeach; ?>
+                            </select>
+                            <input type="date" id="filter_date" onchange="filterLogs()">
+                        </div>
+                        
+                        <div class="activity-list" id="activity-list">
+                            <?php foreach ($activity_log as $index => $event): ?>
+                                <div class="activity-item" data-user="<?php echo esc_attr($event['user_login']); ?>" data-role="<?php echo esc_attr($event['user_role']); ?>" data-date="<?php echo esc_attr(gmdate('Y-m-d', strtotime($event['time']))); ?>">
+                                    <div class="activity-icon">👤</div>
+                                    <div class="activity-details">
+                                        <div class="activity-user"><?php echo esc_html($event['user_login']); ?></div>
+                                        <div class="activity-info">
+                                            <span class="role"><?php echo esc_html($event['user_role']); ?></span>
+                                            <span class="ip"><?php echo esc_html($event['ip']); ?></span>
+                                        </div>
+                                        <div class="activity-time"><?php echo esc_html($event['time']); ?></div>
+                                        <div class="activity-browser"><?php echo esc_html($event['user_agent']); ?></div>
+                                    </div>
+                                </div>
+                            <?php endforeach; ?>
+                        </div>
+                    <?php endif; ?>
+                </div>
+            </div>
+        </div>
+        
+        <script>
+        function clearLogs() {
+            if (confirm('Are you sure you want to clear all activity logs?')) {
+                window.location.href = '?page=lockspire-activity&action=clear_logs';
+            }
+        }
+        
+        function exportLogs() {
+            window.location.href = '?page=lockspire-activity&action=export';
+        }
+        
+        function filterLogs() {
+            var user = jQuery('#filter_user').val();
+            var role = jQuery('#filter_role').val();
+            var date = jQuery('#filter_date').val();
+            
+            jQuery('.activity-item').each(function() {
+                var show = true;
+                
+                if (user && jQuery(this).data('user') !== user) show = false;
+                if (role && jQuery(this).data('role') !== role) show = false;
+                if (date && jQuery(this).data('date') !== date) show = false;
+                
+                jQuery(this).toggle(show);
+            });
+        }
+        </script>
+        <?php
+        $this->render_admin_footer();
+    }
+    
+    // Settings page
+    public function settings_page() {
+        $this->render_admin_header('Settings');
+        ?>
+        <div class="lockspire-settings">
+            <form method="post" action="options.php">
+                <?php
+                settings_fields('lockspire_options');
+                do_settings_sections('lockspire-settings');
+                ?>
+                
+                <div class="lockspire-grid">
+                    <div class="lockspire-card">
+                        <div class="lockspire-card-header">
+                            <h3>🔒 Core Security Settings</h3>
+                        </div>
+                        <div class="lockspire-card-body">
+                            <table class="form-table">
+                                <tr>
+                                    <th scope="row">Login Protection</th>
+                                    <td>
+                                        <label class="switch">
+                                            <input type="checkbox" name="lockspire_options[login_limit_enabled]" value="1" <?php checked($this->options['login_limit_enabled'], '1'); ?>>
+                                            <span class="slider"></span>
+                                        </label>
+                                        <span class="setting-description">Limit login attempts to prevent brute force attacks</span>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <th scope="row">Max Login Attempts</th>
+                                    <td>
+                                        <input type="number" name="lockspire_options[max_login_attempts]" value="<?php echo esc_attr($this->options['max_login_attempts']); ?>" min="1" max="20">
+                                        <p class="description">Maximum failed login attempts before lockout</p>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <th scope="row">Lockout Time</th>
+                                    <td>
+                                        <input type="number" name="lockspire_options[lockout_time]" value="<?php echo esc_attr($this->options['lockout_time']); ?>" min="1" max="1440">
+                                        <p class="description">Lockout duration in minutes</p>
+                                    </td>
+                                </tr>
+                            </table>
+                        </div>
+                    </div>
+                    
+                    <div class="lockspire-card">
+                        <div class="lockspire-card-header">
+                            <h3>🔥 Firewall Settings</h3>
+                        </div>
+                        <div class="lockspire-card-body">
+                            <table class="form-table">
+                                <tr>
+                                    <th scope="row">Enable Firewall</th>
+                                    <td>
+                                        <label class="switch">
+                                            <input type="checkbox" name="lockspire_options[firewall_enabled]" value="1" <?php checked($this->options['firewall_enabled'], '1'); ?>>
+                                            <span class="slider"></span>
+                                        </label>
+                                        <span class="setting-description">Block malicious requests and bad bots</span>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <th scope="row">Disable XML-RPC</th>
+                                    <td>
+                                        <label class="switch">
+                                            <input type="checkbox" name="lockspire_options[disable_xmlrpc]" value="1" <?php checked($this->options['disable_xmlrpc'], '1'); ?>>
+                                            <span class="slider"></span>
+                                        </label>
+                                        <span class="setting-description">Disable XML-RPC to prevent attacks</span>
+                                    </td>
+                                </tr>
+                            </table>
+                        </div>
+                    </div>
+                </div>
+                
+                <div class="lockspire-grid">
+                    <div class="lockspire-card">
+                        <div class="lockspire-card-header">
+                            <h3>👻 Admin Protection</h3>
+                        </div>
+                        <div class="lockspire-card-body">
+                            <table class="form-table">
+                                <tr>
+                                    <th scope="row">Hide Admin URL</th>
+                                    <td>
+                                        <label class="switch">
+                                            <input type="checkbox" name="lockspire_options[hide_admin_enabled]" value="1" <?php checked($this->options['hide_admin_enabled'], '1'); ?>>
+                                            <span class="slider"></span>
+                                        </label>
+                                        <span class="setting-description">Hide wp-admin with secret key</span>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <th scope="row">Admin Secret Key</th>
+                                    <td>
+                                        <input type="text" name="lockspire_options[admin_secret_key]" value="<?php echo esc_attr($this->options['admin_secret_key']); ?>" class="regular-text">
+                                        <p class="description">Access wp-admin at: /wp-admin/?<?php echo esc_html($this->options['admin_secret_key']); ?>=1</p>
+                                    </td>
+                                </tr>
+                            </table>
+                        </div>
+                    </div>
+                    
+                    <div class="lockspire-card">
+                        <div class="lockspire-card-header">
+                            <h3>📧 Notifications & Logging</h3>
+                        </div>
+                        <div class="lockspire-card-body">
+                            <table class="form-table">
+                                <tr>
+                                    <th scope="row">Email Notifications</th>
+                                    <td>
+                                        <label class="switch">
+                                            <input type="checkbox" name="lockspire_options[email_notifications]" value="1" <?php checked($this->options['email_notifications'], '1'); ?>>
+                                            <span class="slider"></span>
+                                        </label>
+                                        <span class="setting-description">Send email alerts for admin logins</span>
+                                    </td>
+                                </tr>
+                                <tr>
+                                    <th scope="row">Activity Logging</th>
+                                    <td>
+                                        <label class="switch">
+                                            <input type="checkbox" name="lockspire_options[activity_log_enabled]" value="1" <?php checked($this->options['activity_log_enabled'], '1'); ?>>
+                                            <span class="slider"></span>
+                                        </label>
+                                        <span class="setting-description">Log user login activity</span>
+                                    </td>
+                                </tr>
+                            </table>
+                        </div>
+                    </div>
+                </div>
+                
+                <div class="lockspire-card">
+                    <div class="lockspire-card-header">
+                        <h3>💎 Pro Features (Coming Soon)</h3>
+                    </div>
+                    <div class="lockspire-card-body">
+                        <div class="pro-features">
+                            <div class="pro-feature">
+                                <div class="pro-icon">🔍</div>
+                                <div class="pro-info">
+                                    <h4>Malware Scanner</h4>
+                                    <p>Advanced malware detection and removal</p>
+                                    <span class="pro-badge">PRO</span>
+                                </div>
+                            </div>
+                            <div class="pro-feature">
+                                <div class="pro-icon">🚫</div>
+                                <div class="pro-info">
+                                    <h4>IP Address Blocking</h4>
+                                    <p>Advanced IP blocking and geolocation</p>
+                                    <span class="pro-badge">PRO</span>
+                                </div>
+                            </div>
+                            <div class="pro-feature">
+                                <div class="pro-icon">🌍</div>
+                                <div class="pro-info">
+                                    <h4>Country Blocking</h4>
+                                    <p>Block access from specific countries</p>
+                                    <span class="pro-badge">PRO</span>
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+                
+                <?php submit_button('Save Settings', 'primary', 'submit', true, array('class' => 'button-large')); ?>
+            </form>
+        </div>
+        <?php
+        $this->render_admin_footer();
+    }
+    
+    // Helper methods for email functionality
+    private function get_email_stats() {
+        $email_logs = get_option('lockspire_email_logs', array());
+        $today = gmdate('Y-m-d');
+        
+        $stats = array(
+            'total_sent' => count($email_logs),
+            'login_alerts' => 0,
+            'failed_attempts' => 0,
+            'today' => 0
+        );
+        
+        foreach ($email_logs as $log) {
+            if ($log['type'] === 'login') {
+                $stats['login_alerts']++;
+            } elseif ($log['type'] === 'failed_login') {
+                $stats['failed_attempts']++;
+            }
+            
+            if (gmdate('Y-m-d', strtotime($log['time'])) === $today) {
+                $stats['today']++;
+            }
+        }
+        
+        return $stats;
+    }
+    
+    private function log_email_sent($type, $recipient, $subject, $status = 'sent') {
+        $email_logs = get_option('lockspire_email_logs', array());
+        
+        $log_entry = array(
+            'type' => $type,
+            'recipient' => $recipient,
+            'subject' => $subject,
+            'status' => $status,
+            'time' => current_time('mysql')
+        );
+        
+        array_unshift($email_logs, $log_entry);
+        
+        // Keep only last 50 entries
+        $email_logs = array_slice($email_logs, 0, 50);
+        
+        update_option('lockspire_email_logs', $email_logs);
+    }
+    private function run_security_scan() {
+        $results = array(
+            'timestamp' => current_time('mysql'),
+            'critical' => 0,
+            'warnings' => 0,
+            'info' => 0,
+            'good' => 0,
+            'details' => array()
+        );
+        
+        // Check WordPress version
+        global $wp_version;
+        if (version_compare($wp_version, '6.0', '<')) {
+            $results['critical']++;
+            $results['details'][] = array(
+                'severity' => 'critical',
+                'icon' => '🔴',
+                'title' => 'Outdated WordPress Version',
+                'description' => "Your WordPress version ($wp_version) is outdated and may contain security vulnerabilities.",
+                'recommendation' => 'Update WordPress to the latest version immediately.'
+            );
+        } else {
+            $results['good']++;
+            $results['details'][] = array(
+                'severity' => 'good',
+                'icon' => '✅',
+                'title' => 'WordPress Version',
+                'description' => "WordPress version ($wp_version) is up to date.",
+                'recommendation' => ''
+            );
+        }
+        
+        // Check admin URL hiding
+        if (!$this->options['hide_admin_enabled']) {
+            $results['warnings']++;
+            $results['details'][] = array(
+                'severity' => 'warning',
+                'icon' => '🟡',
+                'title' => 'Admin URL Not Hidden',
+                'description' => 'Your wp-admin URL is accessible to everyone.',
+                'recommendation' => 'Enable admin URL hiding to protect against direct attacks.'
+            );
+        }
+        
+        // Check XML-RPC
+        if (!$this->options['disable_xmlrpc']) {
+            $results['warnings']++;
+            $results['details'][] = array(
+                'severity' => 'warning',
+                'icon' => '🟡',
+                'title' => 'XML-RPC Enabled',
+                'description' => 'XML-RPC is enabled and can be exploited.',
+                'recommendation' => 'Disable XML-RPC to prevent XML-RPC attacks.'
+            );
+        }
+        
+        // Check file permissions
+        $wp_config = ABSPATH . 'wp-config.php';
+        if (file_exists($wp_config)) {
+            $perms = fileperms($wp_config);
+            if (($perms & 0x0077) != 0) {
+                $results['warnings']++;
+                $results['details'][] = array(
+                    'severity' => 'warning',
+                    'icon' => '🟡',
+                    'title' => 'File Permissions',
+                    'description' => 'wp-config.php has world-writable permissions.',
+                    'recommendation' => 'Change file permissions to 640 or 600.'
+                );
+            }
+        }
+        
+        // Check debug mode
+        if (defined('WP_DEBUG') && WP_DEBUG) {
+            $results['info']++;
+            $results['details'][] = array(
+                'severity' => 'info',
+                'icon' => 'ℹ️',
+                'title' => 'Debug Mode Enabled',
+                'description' => 'WordPress debug mode is enabled on a production site.',
+                'recommendation' => 'Disable debug mode in production.'
+            );
+        }
+        
+        return $results;
+    }
+    
+    private function get_default_firewall_rules() {
+        return array(
+            'block_bad_bots' => array(
+                'name' => 'Block Bad Bots',
+                'description' => 'Block known malicious bots and crawlers',
+                'enabled' => true,
+                'severity' => 'high'
+            ),
+            'block_sql_injection' => array(
+                'name' => 'Block SQL Injection',
+                'description' => 'Block common SQL injection patterns',
+                'enabled' => true,
+                'severity' => 'critical'
+            ),
+            'block_xss' => array(
+                'name' => 'Block XSS Attacks',
+                'description' => 'Block cross-site scripting attempts',
+                'enabled' => true,
+                'severity' => 'high'
+            ),
+            'block_directory_traversal' => array(
+                'name' => 'Block Directory Traversal',
+                'description' => 'Block directory traversal attacks',
+                'enabled' => true,
+                'severity' => 'medium'
+            ),
+            'block_file_inclusion' => array(
+                'name' => 'Block File Inclusion',
+                'description' => 'Block local and remote file inclusion attempts',
+                'enabled' => true,
+                'severity' => 'high'
+            )
+        );
+    }
+    
+    private function get_blocked_requests_today() {
+        $blocked = get_option('lockspire_blocked_today', 0);
+        return $blocked;
+    }
+    
+    private function get_recent_login_attempts() {
+        $attempts = array();
+        
+        // Try to get from cache first
+        $cache_key = 'lockspire_recent_login_attempts';
+        $cached_attempts = wp_cache_get($cache_key);
+        
+        if ($cached_attempts !== false) {
+            return $cached_attempts;
+        }
+        
+        // Get all transients using WordPress function
+        global $wpdb;
+        $transient_names = $wpdb->get_col(
+            "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_transient_lockspire_login_attempts_%'"
+        );
+        
+        foreach ($transient_names as $transient_name) {
+            // Remove the _transient_ prefix to get the actual transient key
+            $transient_key = str_replace('_transient_', '', $transient_name);
+            $data = get_transient($transient_key);
+            
+            if (is_array($data) && !empty($data)) {
+                $ip = str_replace('lockspire_login_attempts_', '', $transient_key);
+                $last_attempt = end($data);
+                $attempts[$ip] = array(
+                    'username' => $last_attempt['username'],
+                    'attempts' => count($data),
+                    'last_attempt' => gmdate('Y-m-d H:i:s', $last_attempt['time']),
+                    'locked' => count($data) >= intval($this->options['max_login_attempts'])
+                );
+            }
+        }
+        
+        // Cache for 5 minutes
+        wp_cache_set($cache_key, $attempts, '', 300);
+        
+        return $attempts;
+    }
+    
+    private function get_locked_ips() {
+        $locked = array();
+        $attempts = $this->get_recent_login_attempts();
+        
+        foreach ($attempts as $ip => $data) {
+            if ($data['locked']) {
+                $unlock_time = time() + (intval($this->options['lockout_time']) * 60);
+                $locked[$ip] = array(
+                    'attempts' => $data['attempts'],
+                    'unlock_time' => gmdate('Y-m-d H:i:s', $unlock_time)
+                );
+            }
+        }
+        
+        return $locked;
+    }
+    
+    private function export_activity_log() {
+        global $wp_filesystem;
+        if (empty($wp_filesystem)) {
+            require_once(ABSPATH . '/wp-admin/includes/file.php');
+            WP_Filesystem();
+        }
+        
+        $activity_log = get_option($this->activity_log_key, array());
+        
+        header('Content-Type: text/csv');
+        header('Content-Disposition: attachment; filename="lockspire-activity-log.csv"');
+        
+        $output = fopen('php://output', 'w');
+        
+        // CSV header
+        fputcsv($output, array('User Login', 'User Role', 'IP Address', 'Time', 'User Agent'));
+        
+        // CSV data
+        foreach ($activity_log as $event) {
+            fputcsv($output, array(
+                $event['user_login'],
+                $event['user_role'],
+                $event['ip'],
+                $event['time'],
+                $event['user_agent']
+            ));
+        }
+        
+        $wp_filesystem->put_contents('php://output', '', false); // Close the output stream
+        exit;
+    }
+    
+    // AJAX handlers
+    // AJAX handlers for email functionality
+    public function ajax_toggle_email_notifications() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $this->options['email_notifications'] = $_POST['enabled'] ? '1' : '0';
+        update_option('lockspire_options', $this->options);
+        
+        wp_die('Email notifications updated');
+    }
+    
+    public function ajax_save_email_settings() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $notification_emails = sanitize_textarea_field($_POST['notification_emails']);
+        update_option('lockspire_notification_emails', $notification_emails);
+        
+        wp_die('Email settings saved');
+    }
+    
+    public function ajax_test_email() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $current_user = wp_get_current_user();
+        $this->send_admin_login_notification($current_user->user_login, $current_user);
+        
+        wp_die('Test email sent');
+    }
+    
+    public function ajax_clear_email_logs() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        update_option('lockspire_email_logs', array());
+        
+        wp_die('Email logs cleared');
+    }
+    
+    public function ajax_block_ip() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $ip = sanitize_text_field($_POST['ip']);
+        $reason = sanitize_text_field($_POST['reason']);
+        
+        $blocked_ips = get_option('lockspire_blocked_ips', array());
+        $blocked_ips[$ip] = array(
+            'reason' => $reason,
+            'time' => current_time('mysql')
+        );
+        update_option('lockspire_blocked_ips', $blocked_ips);
+        
+        wp_die('IP blocked');
+    }
+    
+    public function ajax_unblock_ip() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $ip = sanitize_text_field($_POST['ip']);
+        $blocked_ips = get_option('lockspire_blocked_ips', array());
+        unset($blocked_ips[$ip]);
+        update_option('lockspire_blocked_ips', $blocked_ips);
+        
+        wp_die('IP unblocked');
+    }
+    
+    public function ajax_toggle_rule() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $rule_id = sanitize_text_field($_POST['rule_id']);
+        $enabled = $_POST['enabled'] ? true : false;
+        
+        $firewall_rules = get_option('lockspire_firewall_rules', $this->get_default_firewall_rules());
+        if (isset($firewall_rules[$rule_id])) {
+            $firewall_rules[$rule_id]['enabled'] = $enabled;
+            update_option('lockspire_firewall_rules', $firewall_rules);
+        }
+        
+        wp_die('Rule updated');
+    }
+    
+    public function ajax_toggle_login_protection() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $this->options['login_limit_enabled'] = $_POST['enabled'] ? '1' : '0';
+        update_option('lockspire_options', $this->options);
+        
+        wp_die('Login protection updated');
+    }
+    
+    public function ajax_save_login_settings() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $this->options['max_login_attempts'] = absint($_POST['max_attempts']);
+        $this->options['lockout_time'] = absint($_POST['lockout_time']);
+        update_option('lockspire_options', $this->options);
+        
+        wp_die('Settings saved');
+    }
+    
+    public function ajax_unlock_ip() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        $ip = sanitize_text_field($_POST['ip']);
+        delete_transient($this->login_attempts_key . '_' . $ip);
+        
+        wp_die('IP unlocked');
+    }
+    
+    public function ajax_unlock_all_ips() {
+        check_ajax_referer('lockspire_nonce', 'nonce');
+        
+        if (!current_user_can('manage_options')) {
+            wp_die('Permission denied');
+        }
+        
+        // Clear all login attempt transients using WordPress functions
+        global $wpdb;
+        $transient_names = $wpdb->get_col(
+            "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_transient_lockspire_login_attempts_%'"
+        );
+        
+        foreach ($transient_names as $transient_name) {
+            // Remove the _transient_ prefix to get the actual transient key
+            $transient_key = str_replace('_transient_', '', $transient_name);
+            delete_transient($transient_key);
+        }
+        
+        // Clear cache
+        wp_cache_delete('lockspire_recent_login_attempts');
+        wp_cache_delete('lockspire_today_login_attempts_' . gmdate('Y-m-d'));
+        
+        wp_die('All IPs unlocked');
+    }
+    
+    // Close content wrapper
+    private function render_admin_footer() {
+        ?>
+            </div>
+        </div>
+        <?php
+    }
+    
+    // Plugin activation/deactivation
+    public function activate() {
+        // Set default options
+        $this->set_default_options();
+        
+        // Set default firewall rules
+        update_option('lockspire_firewall_rules', $this->get_default_firewall_rules());
+        
+        // Flush rewrite rules if needed
+        flush_rewrite_rules();
+    }
+    
+    public function deactivate() {
+        // Clean up all Lockspire transients using WordPress functions
+        global $wpdb;
+        $transient_names = $wpdb->get_col(
+            "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_transient_lockspire_%'"
+        );
+        
+        foreach ($transient_names as $transient_name) {
+            // Remove the _transient_ prefix to get the actual transient key
+            $transient_key = str_replace('_transient_', '', $transient_name);
+            delete_transient($transient_key);
+        }
+        
+        // Clear all Lockspire cache
+        wp_cache_flush();
+        
+        // Flush rewrite rules
+        flush_rewrite_rules();
     }
 }
 
-// Activation Hook - Set default options and create database table
-register_activation_hook(__FILE__, 'lockspire_activate_plugin');
-function lockspire_activate_plugin() {
-    lockspire_set_default_options();
-    lockspire_create_database_table();
-}
-
-function lockspire_set_default_options() {
-    $defaults = [
-        'lockspire_max_attempts' => 5,
-        'lockspire_lockout_time' => 15,
-        'lockspire_reset_time' => 60,
-        'lockspire_lockout_message' => 'Too many login attempts. Please try again later.',
-        'lockspire_notify_admin' => 0,
-        'lockspire_admin_email' => get_option('admin_email'),
-        'lockspire_notify_threshold' => 3,
-        'lockspire_whitelist_ips' => '',
-        'lockspire_blacklist_ips' => '',
-        'lockspire_enable_country_blocking' => 0,
-        'lockspire_blocked_countries' => ''
-    ];
-    
-    foreach ($defaults as $option => $default) {
-        if (!get_option($option)) {
-            update_option($option, $default);
-        }
-    }
-}
-
-// Add settings link in admin menu
-add_action('admin_menu', 'lockspire_add_settings_menu');
-function lockspire_add_settings_menu() {
-    add_menu_page(
-        'Lockspire – Smart Access Protection',
-        'Lockspire',
-        'manage_options',
-        'lockspire',
-        'lockspire_settings_page',
-        'dashicons-shield',
-        80
-    );
-}
+// Initialize the plugin
+new Lockspire_Security();

lockspire-smart-access-protection/trunk/readme.txt

@@ -8 +8 @@
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-Lockspire – Limit Login And Smart Access Protection helps protect your WordPress site by limiting login attempts and blocking suspicious users. It makes your website safer and prevents unauthorized access easily.
-
 == Description ==
 
 Lockspire – Limit Login And Smart Access Protection helps protect your WordPress site by limiting login attempts and blocking suspicious users. It makes your website safer and prevents unauthorized access easily.
 
-**Key Features:**
 
-* 🛡️ **Advanced Protection**: Configurable login attempt limits with customizable lockout durations
-* 📊 **Real-time Dashboard**: Beautiful dashboard with live statistics and security monitoring
-* 🔒 **IP Management**: Whitelist and blacklist IP addresses for granular control
-* 🌍 **Country Blocking**: Block login attempts from specific countries
-* 📧 **Smart Notifications**: Email alerts for security events with customizable thresholds
-* 📋 **Comprehensive Logging**: Detailed activity logs with export functionality
-* 🎨 **Modern Interface**: Beautiful, responsive admin interface with tabbed navigation
-* ⚡ **Performance Optimized**: Smart caching for optimal database performance
-* 🔧 **Developer Friendly**: Clean, well-documented code following WordPress standards
+**Core Features (Free):**
+* ✅ **Login Attempt Limiting** - Configurable maximum attempts and lockout time
+* ✅ **Admin URL Hiding** - Hide wp-admin with custom secret key
+* ✅ **XML-RPC Protection** - Complete XML-RPC disabling
+* ✅ **Basic Firewall** - Block bad bots and common exploit attempts
+* ✅ **Email Notifications** - Get alerts when admin users log in
+* ✅ **Activity Logging** - Simple admin activity log (last 10 events)
+
+**Pro Features (Coming Soon):**
+* 🔍 Malware Scanner
+* 🚫 IP Address Blocking
+* 🌍 Country Blocking
+
+== Why Choose Lockspire? ==
+
+* **Lightweight** - No database tables, minimal resource usage
+* **Beginner Friendly** - Simple toggle switches and clear explanations
+* **Install & Forget** - Set it up once and let it protect your site
+* **Performance Optimized** - No slow queries or heavy processing
+* **WordPress Standards** - Follows WordPress coding standards and best practices
 
 == Installation ==
 
-1. Upload the `login-attempt-limiter` folder to the `/wp-content/plugins/` directory
-2. Activate the plugin through the 'Plugins' menu in WordPress
-3. Navigate to **Secure Guard** in your WordPress admin to configure settings
-4. Adjust security settings according to your needs
+1. Upload the plugin files to the `/wp-content/plugins/lockspire-security` directory, or install the plugin through the WordPress plugins screen directly.
+2. Activate the plugin through the 'Plugins' screen in WordPress
+3. Navigate to **Settings → Lockspire Security** to configure your security settings
+
+== Configuration ==
+
+**Basic Setup:**
+1. Go to Settings → Lockspire Security
+2. Enable the features you need using the toggle switches
+3. Configure your preferred settings:
+   - Set max login attempts (default: 5)
+   - Set lockout time in minutes (default: 15)
+   - Set custom admin secret key if hiding wp-admin
+
+**Admin URL Hiding:**
+When enabled, access your admin dashboard at:
+`/wp-admin/?your-secret-key=1`
+
+Replace `your-secret-key` with your custom secret key.
 
 == Frequently Asked Questions ==
 
-= How does the plugin protect against brute-force attacks? =
+= Will this plugin slow down my website? =
 
-The plugin limits the number of failed login attempts from a single IP address within a specified time period. When the limit is exceeded, the IP is temporarily locked out.
+No! Lockspire is designed to be extremely lightweight with minimal impact on site performance.
 
-= Can I whitelist trusted IP addresses? =
+= Do I need technical knowledge to use this plugin? =
 
-Yes! You can whitelist IP addresses in the Security tab. Whitelisted IPs will never be locked out, regardless of failed attempts.
+Not at all! Lockspire is designed for beginners with simple toggle switches and clear explanations for each feature.
 
-= Does the plugin work with multisite installations? =
+= Does this plugin create database tables? =
 
-Yes, the plugin is fully compatible with WordPress multisite installations and can be activated network-wide.
+No, Lockspire uses the WordPress Options API and doesn't create any additional database tables.
 
-= How do I receive security notifications? =
+= Can I use this alongside other security plugins? =
 
-Enable email notifications in the Notifications tab. You can configure custom email addresses and notification thresholds to avoid alert fatigue.
+Yes, Lockspire is designed to work well with other plugins, but for optimal performance, we recommend using it as your primary security solution.
 
-= Can I export login logs? =
+= What happens if I forget my admin secret key? =
 
-Yes! The plugin allows you to export login activity logs in CSV format for analysis and record-keeping.
+You can still access wp-admin by disabling the "Hide wp-admin URL" feature via FTP or file manager in the plugin file.
 
 == Screenshots ==
 
-1. Beautiful dashboard with real-time statistics
-2. Comprehensive settings with tabbed interface
-3. Detailed login activity logs
-4. IP and country management options
-5. Email notification configuration
+1. Clean settings page with toggle switches
+2. Activity log showing recent login events
+3. Pro features placeholder section
 
 == Changelog ==
 
-= 1.0 =
+= 1.0.0 =
 * Initial release
-* Advanced login attempt limiting
-* Real-time dashboard with statistics
-* IP whitelist/blacklist functionality
-* Country blocking capabilities
-* Email notification system
-* Comprehensive logging with export
-* Modern responsive admin interface
-* Performance optimization with caching
-* Full WordPress standards compliance
+* Core security features implemented
+* Lightweight, beginner-friendly interface
+* Performance optimized implementation
 
 == Upgrade Notice ==
 
-= 1.0 =
-Initial release of the Lockspire – Smart Access Protection plugin with comprehensive security features.
+= 1.0.0 =
+Initial release of Lockspire Security Plugin.
 
 == Additional Information ==
 
-**Plugin URI:** https://github.com/anilatgithub/login-attempt-limiter
-**Author URI:** https://github.com/anilatgithub
-**Text Domain:** lockspire
+**Plugin Website:** https://lockspire.com
 
-**Security Features:**
-- CSRF protection with WordPress nonces
-- Input sanitization and validation
-- SQL injection prevention
-- XSS protection
-- Secure file handling
+**Support:** For support and feature requests, please visit our website or contact us through the WordPress support forums.
 
-**Performance Features:**
-- Smart caching system
-- Optimized database queries
-- Minimal resource usage
-- Efficient log management
+**Privacy Policy:** Lockspire Security does not collect or transmit any personal data. All data is stored locally on your WordPress installation.
 
-**Compatibility:**
-- WordPress 5.0+
-- PHP 7.4+
-- Multisite compatible
-- WooCommerce compatible
-- Compatible with most caching plugins
+== Developer Information ==
 
-**Support:**
-For support and feature requests, please visit the GitHub repository or contact the developer.
+This plugin follows WordPress coding standards and best practices:
+* Proper escaping of all output
+* Input validation and nonce verification
+* No database queries or heavy processing
+* Uses WordPress Options API for settings storage
+* Compatible with multisite installations
+
+**Hooks and Filters:**
+The plugin provides several hooks for developers to extend functionality:
+* `lockspire_before_firewall_check` - Runs before firewall checks
+* `lockspire_after_login_attempt` - Runs after failed login attempt
+* `lockspire_admin_notification_subject` - Filter admin notification email subject
+* `lockspire_admin_notification_message` - Filter admin notification email message