HSArticle Login Math Verification

by hsarticle

Description

HSArticle Login Math Verification protects your WordPress login page from bots and brute-force attacks using a simple math question. No Google reCAPTCHA, no Cloudflare, no API keys required.

Features

Math captcha (e.g. “8 + 5 = ?”) on the login page
Secure answer stored as WordPress transient (no PHP sessions)
Beautiful light and dark-themed login page design
Customizable accent color with live preview
Enable/disable toggle from admin settings
Login attempt stats (passed vs. blocked) in the admin dashboard
Lightweight — no external scripts loaded on the front end

Installation

Upload the hsarticle-login-math-verification folder to /wp-content/plugins/
Activate the plugin from the Plugins menu in WordPress
Go to Settings Login Math Verification to configure

Faq

Does this require any API keys?

No. Everything runs on your WordPress server using PHP and WordPress transients.

Will this slow down my site?

No. The plugin only loads on the login page and admin settings page.

What if the captcha expires?

Each captcha token is valid for 10 minutes. If it expires, the user just needs to refresh the login page.

What happens when I uninstall the plugin?

All plugin settings and captcha transients are automatically cleaned from your database when you delete the plugin via the WordPress admin.

Reviews

Changelog

1.0.1

Plugin renamed to HSArticle Login Math Verification with new slug hsarticle-login-math-verification
All prefixes updated from slc_ to almv_ throughout
Inline CSS moved to wp_add_inline_style() — no more raw style tags
Inline JS moved to wp_add_inline_script() — no more raw script tags
Google Fonts loaded via wp_enqueue_style() on both login and admin pages
Stat counters (passed/blocked) now increment correctly on each login attempt
All text domain references updated to hsarticle-login-math-verification

1.0.0

Initial release