@anonympins/fingerprint 0.7.2 → 0.7.4

package/src/php/WordPress/{fingerprint-wordpress.php → fingerprint-anti-bot.php}

@@ -3,10 +3,12 @@
  * Plugin Name: Fingerprint Anti-Bot & Proof-of-Work
  * Plugin URI: https://github.com/anonympins/fingerprint
  * Description: High-performance client-side anti-bot protection and Proof-of-Work challenge verification for WordPress.
- * Version: 0.7.2
- * Author: Anonympins
+ * Version: 0.7.4
+ * Author: anonympins
+ * Requires at least: 5.9
+ * Requires PHP: 8.0
  * License: MIT
- * Text Domain: fingerprint-wordpress
+ * Text Domain: fingerprint-anti-bot
  * Domain Path: /languages
  */
 
@@ -27,7 +29,7 @@ if (!defined('ABSPATH')) {
 // Détecte et bloque instantanément les scans de vulnérabilités ciblant
 // Laravel, Symfony, Spring Boot, Django, ASP.NET, phpMyAdmin, Git, Cloud, etc.
 // =============================================================================
-$foreignEnvTrapUrls = [
+$fingerprint_foreign_env_trap_urls = [
     // Outils d'administration BDD & scripts de debug
     '/phpmyadmin', '/pma', '/adminer', '/mysql', '/dbadmin', '/phpinfo',
     // Frameworks PHP (Laravel, Symfony) & fichiers d'environnement
@@ -44,7 +46,7 @@ $foreignEnvTrapUrls = [
     '/.git', '/.svn', '/.aws', '/.kube', '/docker-compose', '/serverless'
 ];
 
-$foreignEnvHoneypotFields = [
+$fingerprint_foreign_env_honeypot_fields = [
     // Tokens CSRF et formulaires spécifiques à d'autres frameworks
     '_token',                // Laravel
     'csrfmiddlewaretoken',   // Django
@@ -60,15 +62,15 @@ $foreignEnvHoneypotFields = [
 // =============================================================================
 // CONFIGURATION PAR DÉFAUT DES PROFILS DE SÉCURITÉ PAR CONTEXTE
 // =============================================================================
-$fingerprintSecurityProfiles = [
+$fingerprint_security_profiles = [
     'api' => [
         'profile'   => 'api',
         'overrides' => [
             'verbose'             => false,
             'challengeNewDevices' => false,
             'honeypot'            => [
-                'fields'           => $foreignEnvHoneypotFields,
-                'trapUrls'         => $foreignEnvTrapUrls,
+                'fields'           => $fingerprint_foreign_env_honeypot_fields,
+                'trapUrls'         => $fingerprint_foreign_env_trap_urls,
                 'detectInjections' => true,
             ],
         ],
@@ -79,8 +81,8 @@ $fingerprintSecurityProfiles = [
             'verbose'             => true,
             'challengeNewDevices' => true,
             'honeypot'            => [
-                'fields'           => $foreignEnvHoneypotFields,
-                'trapUrls'         => $foreignEnvTrapUrls,
+                'fields'           => $fingerprint_foreign_env_honeypot_fields,
+                'trapUrls'         => $fingerprint_foreign_env_trap_urls,
                 'detectInjections' => true,
             ],
         ],
@@ -91,8 +93,8 @@ $fingerprintSecurityProfiles = [
             'verbose'             => false,
             'challengeNewDevices' => false,
             'honeypot'            => [
-                'fields'           => $foreignEnvHoneypotFields,
-                'trapUrls'         => $foreignEnvTrapUrls,
+                'fields'           => $fingerprint_foreign_env_honeypot_fields,
+                'trapUrls'         => $fingerprint_foreign_env_trap_urls,
                 'detectInjections' => true,
             ],
         ],
@@ -114,22 +116,17 @@ function fingerprint_get_effective_profiles(array $defaultProfiles): array {
     ];
 }
 
-// Chargement du domaine de traduction i18n (FR / EN / DE)
-add_action('init', function (): void {
-    load_plugin_textdomain('fingerprint-wordpress', false, dirname(plugin_basename(__FILE__)) . '/languages');
-});
-
 // 1. Autoloader PSR-4 pour le moteur Fingerprint
 if (!class_exists(DirectFingerprint::class)) {
-    $composerPaths = [
+    $fingerprint_composer_paths = [
         __DIR__ . '/vendor/autoload.php',
         dirname(__DIR__, 2) . '/vendor/autoload.php',
         dirname(__DIR__, 3) . '/vendor/autoload.php',
         (defined('ABSPATH') ? ABSPATH . 'vendor/autoload.php' : ''),
     ];
-    foreach ($composerPaths as $cPath) {
-        if (!empty($cPath) && file_exists($cPath)) {
-            require_once $cPath;
+    foreach ($fingerprint_composer_paths as $fingerprint_composer_path) {
+        if (!empty($fingerprint_composer_path) && file_exists($fingerprint_composer_path)) {
+            require_once $fingerprint_composer_path;
             break;
         }
     }
@@ -197,15 +194,15 @@ add_action('fingerprint_prune_expired_entries', function () {
 add_action('admin_notices', function () {
     if (!is_ssl()) {
         echo '<div class="notice notice-warning is-dismissible">';
-        echo '<p><strong>' . esc_html__('[Fingerprint Anti-Bot Security Warning]', 'fingerprint-wordpress') . '</strong> : ' .
-            esc_html__('Your website is currently running on unencrypted HTTP. In this mode, modern web browsers disable the native Web Cryptography API (crypto.subtle) for security reasons, forcing a JavaScript fallback simulation that is slower and vulnerable to Man-in-the-Middle (MitM) attacks. We strongly recommend deploying a TLS/SSL certificate and enforcing HTTPS to ensure the cryptographic integrity of Proof-of-Work computations and identity protection.', 'fingerprint-wordpress') .
+        echo '<p><strong>' . esc_html__('[Fingerprint Anti-Bot Security Warning]', 'fingerprint-anti-bot') . '</strong> : ' .
+            esc_html__('Your website is currently running on unencrypted HTTP. In this mode, modern web browsers disable the native Web Cryptography API (crypto.subtle) for security reasons, forcing a JavaScript fallback simulation that is slower and vulnerable to Man-in-the-Middle (MitM) attacks. We strongly recommend deploying a TLS/SSL certificate and enforcing HTTPS to ensure the cryptographic integrity of Proof-of-Work computations and identity protection.', 'fingerprint-anti-bot') .
             '</p>';
         echo '</div>';
     }
 });
 
 // 6. Interception de sécurité au plus tôt du cycle de vie WordPress
-add_action('plugins_loaded', function () use ($fingerprintSecurityProfiles) {
+add_action('plugins_loaded', function () use ($fingerprint_security_profiles) {
     // Ignore WP-CLI et les exécutions internes de cron
     if ((defined('WP_CLI') && WP_CLI) || (defined('DOING_CRON') && DOING_CRON)) {
         return;
@@ -215,23 +212,26 @@ add_action('plugins_loaded', function () use ($fingerprintSecurityProfiles) {
     $store = new WpDbStore();
     StoreManager::configureStore($store);
 
-    $requestUri = $_SERVER['REQUEST_URI'] ?? '/';
+    // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Sanitized with sanitize_text_field
+    $rawUri = isset($_SERVER['REQUEST_URI']) ? sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'])) : '/';
+    $requestUri = !empty($rawUri) ? $rawUri : '/';
     $isRestApi = defined('REST_REQUEST') && REST_REQUEST;
-    $isAdmin = is_admin() || str_contains($requestUri, 'wp-login.php');
+    // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
+    $isAdmin = is_admin() || (isset($_SERVER['PHP_SELF']) && str_contains(sanitize_text_field(wp_unslash($_SERVER['PHP_SELF'])), 'wp-login.php')) || str_contains($requestUri, 'wp-login.php');
 
     // Fusion avec les options enregistrées via l'admin WP
-    $effectiveProfiles = fingerprint_get_effective_profiles($fingerprintSecurityProfiles);
+    $effectiveProfiles = fingerprint_get_effective_profiles($fingerprint_security_profiles);
 
     // Possibilité de filtrer la configuration via functions.php ou un thème
     $configs = apply_filters('fingerprint_security_profiles', $effectiveProfiles);
 
     // Sélection adaptative du profil selon la cible de la requête
     if ($isRestApi || str_starts_with($requestUri, '/wp-json/')) {
-        $contextConfig = $configs['api'] ?? $fingerprintSecurityProfiles['api'];
+        $contextConfig = $configs['api'] ?? $fingerprint_security_profiles['api'];
     } elseif ($isAdmin) {
-        $contextConfig = $configs['admin'] ?? $fingerprintSecurityProfiles['admin'];
+        $contextConfig = $configs['admin'] ?? $fingerprint_security_profiles['admin'];
     } else {
-        $contextConfig = $configs['frontend'] ?? $fingerprintSecurityProfiles['frontend'];
+        $contextConfig = $configs['frontend'] ?? $fingerprint_security_profiles['frontend'];
     }
 
     $securityConfig = SecurityProfiles::createSecurityProfile($contextConfig['profile'], $contextConfig['overrides'] ?? []);
@@ -247,8 +247,8 @@ add_action('plugins_loaded', function () use ($fingerprintSecurityProfiles) {
 
 add_action('admin_menu', function () {
     add_options_page(
-        __('Fingerprint Anti-Bot', 'fingerprint-wordpress'),
-        __('Fingerprint Anti-Bot', 'fingerprint-wordpress'),
+        __('Fingerprint Anti-Bot', 'fingerprint-anti-bot'),
+        __('Fingerprint Anti-Bot', 'fingerprint-anti-bot'),
         'manage_options',
         'fingerprint-settings',
         'fingerprint_render_admin_page'
@@ -260,10 +260,10 @@ add_action('admin_menu', function () {
  */
 function fingerprint_render_admin_page(): void {
     if (!current_user_can('manage_options')) {
-        wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'fingerprint-wordpress'));
+        wp_die(esc_html__('You do not have sufficient permissions to access this page.', 'fingerprint-anti-bot'));
     }
 
-    global $fingerprintSecurityProfiles, $wpdb;
+    global $fingerprint_security_profiles, $wpdb;
 
     // Sauvegarde des réglages
     if (isset($_POST['fingerprint_save_settings']) && check_admin_referer('fingerprint_settings_nonce', 'fingerprint_nonce')) {
@@ -273,16 +273,16 @@ function fingerprint_render_admin_page(): void {
         }
 
         // Profils sélectionnés
-        $saved['frontend']['profile'] = sanitize_text_field($_POST['frontend_profile'] ?? 'blog');
-        $saved['admin']['profile']    = sanitize_text_field($_POST['admin_profile'] ?? 'strict');
-        $saved['api']['profile']      = sanitize_text_field($_POST['api_profile'] ?? 'api');
+        $saved['frontend']['profile'] = isset($_POST['frontend_profile']) ? sanitize_text_field(wp_unslash($_POST['frontend_profile'])) : 'blog';
+        $saved['admin']['profile']    = isset($_POST['admin_profile']) ? sanitize_text_field(wp_unslash($_POST['admin_profile'])) : 'strict';
+        $saved['api']['profile']      = isset($_POST['api_profile']) ? sanitize_text_field(wp_unslash($_POST['api_profile'])) : 'api';
 
         // Seuils Frontend
         $saved['frontend']['overrides']['thresholds'] = [
-            'low'    => max(1, (int)($_POST['frontend_threshold_low'] ?? 20)),
-            'medium' => max(5, (int)($_POST['frontend_threshold_medium'] ?? 45)),
-            'high'   => max(10, (int)($_POST['frontend_threshold_high'] ?? 75)),
-            'block'  => max(20, (int)($_POST['frontend_threshold_block'] ?? 95)),
+            'low'    => max(1, isset($_POST['frontend_threshold_low']) ? (int)sanitize_text_field(wp_unslash($_POST['frontend_threshold_low'])) : 20),
+            'medium' => max(5, isset($_POST['frontend_threshold_medium']) ? (int)sanitize_text_field(wp_unslash($_POST['frontend_threshold_medium'])) : 45),
+            'high'   => max(10, isset($_POST['frontend_threshold_high']) ? (int)sanitize_text_field(wp_unslash($_POST['frontend_threshold_high'])) : 75),
+            'block'  => max(20, isset($_POST['frontend_threshold_block']) ? (int)sanitize_text_field(wp_unslash($_POST['frontend_threshold_block'])) : 95),
         ];
 
         // Options booléennes
@@ -292,49 +292,51 @@ function fingerprint_render_admin_page(): void {
 
         // Surcharges de l'ensemble des poids de métriques
         foreach ($_POST as $postKey => $postVal) {
-            if (str_starts_with($postKey, 'weight_')) {
-                $wKey = substr($postKey, 7);
-                $val = (float)$postVal;
+            if (str_starts_with((string)$postKey, 'weight_')) {
+                $wKey = sanitize_key(substr((string)$postKey, 7));
+                $val = (float)sanitize_text_field(wp_unslash($postVal));
                 $saved['frontend']['overrides']['weights'][$wKey] = max(0.0, min(2.0, $val));
             }
         }
 
         update_option('fingerprint_security_options', $saved);
-        echo '<div class="notice notice-success is-dismissible"><p><strong>' . esc_html__('Fingerprint settings updated successfully.', 'fingerprint-wordpress') . '</strong></p></div>';
+        echo '<div class="notice notice-success is-dismissible"><p><strong>' . esc_html__('Fingerprint settings updated successfully.', 'fingerprint-anti-bot') . '</strong></p></div>';
     }
 
     // Action pour vider le cache SQL manuellement
     if (isset($_POST['fingerprint_clear_store']) && check_admin_referer('fingerprint_clear_nonce', 'fingerprint_nonce_clear')) {
         $store = new WpDbStore();
         $store->clear();
-        echo '<div class="notice notice-info is-dismissible"><p>' . esc_html__('SQL cache table ($wpdb) cleared successfully.', 'fingerprint-wordpress') . '</p></div>';
+        echo '<div class="notice notice-info is-dismissible"><p>' . esc_html__('SQL cache table ($wpdb) cleared successfully.', 'fingerprint-anti-bot') . '</p></div>';
     }
 
     // Récupération des profils effectifs
-    $effective = fingerprint_get_effective_profiles($fingerprintSecurityProfiles);
+    $effective = fingerprint_get_effective_profiles($fingerprint_security_profiles);
     $frontendConfig = SecurityProfiles::createSecurityProfile($effective['frontend']['profile'], $effective['frontend']['overrides'] ?? []);
 
     // Statistiques de la table de cache SQL
-    $tableName = $wpdb->prefix . 'fingerprint_store';
-    $totalRows = (int)$wpdb->get_var("SELECT COUNT(*) FROM {$tableName}");
+    $tableName = esc_sql($wpdb->prefix . 'fingerprint_store');
+    // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- Administrative stats on custom high-velocity table.
+    $totalRows = (int)$wpdb->get_var("SELECT COUNT(*) FROM `{$tableName}`");
     $now = time();
-    $expiredRows = (int)$wpdb->get_var($wpdb->prepare("SELECT COUNT(*) FROM {$tableName} WHERE expires_at IS NOT NULL AND expires_at < %d", $now));
+    // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- Administrative stats on custom high-velocity table.
+    $expiredRows = (int)$wpdb->get_var($wpdb->prepare("SELECT COUNT(*) FROM `{$tableName}` WHERE expires_at IS NOT NULL AND expires_at < %d", $now));
 
     // Métriques Prometheus au format texte
     $prometheusRaw = MetricsManager::getPrometheusMetrics($frontendConfig);
     ?>
     <div class="wrap">
         <h1><span class="dashicons dashicons-shield-alt" style="font-size:32px;vertical-align:middle;margin-right:8px;"></span> Fingerprint Anti-Bot & Proof-of-Work</h1>
-        <p class="description"><?php esc_html_e('Client-side behavioral and cryptographic anti-bot protection without third-party CAPTCHA for WordPress.', 'fingerprint-wordpress'); ?></p>
+        <p class="description"><?php esc_html_e('Client-side behavioral and cryptographic anti-bot protection without third-party CAPTCHA for WordPress.', 'fingerprint-anti-bot'); ?></p>
 
         <div style="background:#fff;border-left:4px solid #2271b1;padding:12px 18px;margin:18px 0;box-shadow:0 1px 1px rgba(0,0,0,.04);">
             <p style="margin:4px 0;">
-                <strong><?php esc_html_e('Official documentation reference:', 'fingerprint-wordpress'); ?></strong>
+                <strong><?php esc_html_e('Official documentation reference:', 'fingerprint-anti-bot'); ?></strong>
                 <a href="https://github.com/anonympins/fingerprint/blob/main/doc/full_options.md" target="_blank" rel="noopener noreferrer" class="button button-secondary" style="margin-left:8px;">
-                    <span class="dashicons dashicons-external" style="vertical-align:middle;"></span> <?php esc_html_e('View Full Configuration Options on GitHub', 'fingerprint-wordpress'); ?>
+                    <span class="dashicons dashicons-external" style="vertical-align:middle;"></span> <?php esc_html_e('View Full Configuration Options on GitHub', 'fingerprint-anti-bot'); ?>
                 </a>
                 <a href="https://github.com/anonympins/fingerprint" target="_blank" rel="noopener noreferrer" class="button button-secondary" style="margin-left:4px;">
-                    <span class="dashicons dashicons-admin-plugins" style="vertical-align:middle;"></span> <?php esc_html_e('GitHub Repository', 'fingerprint-wordpress'); ?>
+                    <span class="dashicons dashicons-admin-plugins" style="vertical-align:middle;"></span> <?php esc_html_e('GitHub Repository', 'fingerprint-anti-bot'); ?>
                 </a>
             </p>
         </div>
@@ -342,37 +344,40 @@ function fingerprint_render_admin_page(): void {
         <!-- TABLEAU DE BORD STATISTIQUES & ÉTAT -->
         <div style="display:grid;grid-template-columns:repeat(auto-fit, minmax(240px, 1fr));gap:16px;margin-bottom:24px;">
             <div style="background:#fff;padding:16px;border-radius:4px;border:1px solid #ccd0d4;">
-                <h3 style="margin-top:0;"><?php esc_html_e('HTTPS Status', 'fingerprint-wordpress'); ?></h3>
+                <h3 style="margin-top:0;"><?php esc_html_e('HTTPS Status', 'fingerprint-anti-bot'); ?></h3>
                 <?php if (is_ssl()): ?>
                     <p style="color:#007017;font-weight:bold;font-size:16px;">
-                        <span class="dashicons dashicons-yes-alt"></span> <?php esc_html_e('Active (WebCrypto Subtle available)', 'fingerprint-wordpress'); ?>
+                        <span class="dashicons dashicons-yes-alt"></span> <?php esc_html_e('Active (WebCrypto Subtle available)', 'fingerprint-anti-bot'); ?>
                     </p>
                 <?php else: ?>
                     <p style="color:#d63638;font-weight:bold;font-size:16px;">
-                        <span class="dashicons dashicons-warning"></span> <?php esc_html_e('Insecure (Unencrypted HTTP)', 'fingerprint-wordpress'); ?>
+                        <span class="dashicons dashicons-warning"></span> <?php esc_html_e('Insecure (Unencrypted HTTP)', 'fingerprint-anti-bot'); ?>
                     </p>
                 <?php endif; ?>
             </div>
             <div style="background:#fff;padding:16px;border-radius:4px;border:1px solid #ccd0d4;">
-                <h3 style="margin-top:0;"><?php esc_html_e('SQL Cache ($wpdb)', 'fingerprint-wordpress'); ?></h3>
-                <p style="font-size:22px;margin:0;font-weight:600;"><?php echo esc_html((string)$totalRows); ?> <span style="font-size:14px;color:#646970;font-weight:normal;"><?php esc_html_e('keys in database', 'fingerprint-wordpress'); ?></span></p>
-                <small style="color:#8c8f94;"><?php echo sprintf(esc_html__('%d expired keys awaiting cron purge', 'fingerprint-wordpress'), $expiredRows); ?></small>
+                <h3 style="margin-top:0;"><?php esc_html_e('SQL Cache ($wpdb)', 'fingerprint-anti-bot'); ?></h3>
+                <p style="font-size:22px;margin:0;font-weight:600;"><?php echo esc_html((string)$totalRows); ?> <span style="font-size:14px;color:#646970;font-weight:normal;"><?php esc_html_e('keys in database', 'fingerprint-anti-bot'); ?></span></p>
+                <small style="color:#8c8f94;"><?php
+                    /* translators: %d: number of expired keys awaiting cron purge */
+                    echo esc_html(sprintf(__(' %d expired keys awaiting cron purge', 'fingerprint-anti-bot'), $expiredRows));
+                ?></small>
             </div>
             <div style="background:#fff;padding:16px;border-radius:4px;border:1px solid #ccd0d4;">
-                <h3 style="margin-top:0;"><?php esc_html_e('Active Profiles', 'fingerprint-wordpress'); ?></h3>
+                <h3 style="margin-top:0;"><?php esc_html_e('Active Profiles', 'fingerprint-anti-bot'); ?></h3>
                 <p style="margin:0;">
-                    <?php esc_html_e('Frontend:', 'fingerprint-wordpress'); ?> <strong><?php echo esc_html($effective['frontend']['profile']); ?></strong><br>
-                    <?php esc_html_e('Admin:', 'fingerprint-wordpress'); ?> <strong><?php echo esc_html($effective['admin']['profile']); ?></strong><br>
-                    <?php esc_html_e('REST API:', 'fingerprint-wordpress'); ?> <strong><?php echo esc_html($effective['api']['profile']); ?></strong>
+                    <?php esc_html_e('Frontend:', 'fingerprint-anti-bot'); ?> <strong><?php echo esc_html($effective['frontend']['profile']); ?></strong><br>
+                    <?php esc_html_e('Admin:', 'fingerprint-anti-bot'); ?> <strong><?php echo esc_html($effective['admin']['profile']); ?></strong><br>
+                    <?php esc_html_e('REST API:', 'fingerprint-anti-bot'); ?> <strong><?php echo esc_html($effective['api']['profile']); ?></strong>
                 </p>
             </div>
         </div>
 
         <!-- ONGLETS DE NAVIGATION -->
         <h2 class="nav-tab-wrapper">
-            <a href="#tab-settings" class="nav-tab nav-tab-active" onclick="fingerprintSwitchTab(event, 'tab-settings')"><?php esc_html_e('Settings & Profiles', 'fingerprint-wordpress'); ?></a>
-            <a href="#tab-metrics" class="nav-tab" onclick="fingerprintSwitchTab(event, 'tab-metrics')"><?php esc_html_e('Metrics & Weights View', 'fingerprint-wordpress'); ?></a>
-            <a href="#tab-prometheus" class="nav-tab" onclick="fingerprintSwitchTab(event, 'tab-prometheus')"><?php esc_html_e('Prometheus Stream', 'fingerprint-wordpress'); ?></a>
+            <a href="#tab-settings" class="nav-tab nav-tab-active" onclick="fingerprintSwitchTab(event, 'tab-settings')"><?php esc_html_e('Settings & Profiles', 'fingerprint-anti-bot'); ?></a>
+            <a href="#tab-metrics" class="nav-tab" onclick="fingerprintSwitchTab(event, 'tab-metrics')"><?php esc_html_e('Metrics & Weights View', 'fingerprint-anti-bot'); ?></a>
+            <a href="#tab-prometheus" class="nav-tab" onclick="fingerprintSwitchTab(event, 'tab-prometheus')"><?php esc_html_e('Prometheus Stream', 'fingerprint-anti-bot'); ?></a>
         </h2>
 
         <!-- TAB 1 : RÉGLAGES -->
@@ -380,35 +385,35 @@ function fingerprint_render_admin_page(): void {
             <form method="post" action="">
                 <?php wp_nonce_field('fingerprint_settings_nonce', 'fingerprint_nonce'); ?>
 
-                <h3><?php esc_html_e('1. Target Security Profiles', 'fingerprint-wordpress'); ?></h3>
+                <h3><?php esc_html_e('1. Target Security Profiles', 'fingerprint-anti-bot'); ?></h3>
                 <table class="form-table">
                     <tr>
-                        <th scope="row"><label for="frontend_profile"><?php esc_html_e('Visitors & Frontend', 'fingerprint-wordpress'); ?></label></th>
+                        <th scope="row"><label for="frontend_profile"><?php esc_html_e('Visitors & Frontend', 'fingerprint-anti-bot'); ?></label></th>
                         <td>
                             <select name="frontend_profile" id="frontend_profile">
-                                <option value="blog" <?php selected($effective['frontend']['profile'], 'blog'); ?>><?php esc_html_e('Blog (Optimal for content, smooth UX)', 'fingerprint-wordpress'); ?></option>
-                                <option value="balanced" <?php selected($effective['frontend']['profile'], 'balanced'); ?>><?php esc_html_e('Balanced (General purpose)', 'fingerprint-wordpress'); ?></option>
-                                <option value="strict" <?php selected($effective['frontend']['profile'], 'strict'); ?>><?php esc_html_e('Strict (Maximum protection)', 'fingerprint-wordpress'); ?></option>
-                                <option value="ecommerce" <?php selected($effective['frontend']['profile'], 'ecommerce'); ?>><?php esc_html_e('E-commerce (Anti-scraping / scalping)', 'fingerprint-wordpress'); ?></option>
+                                <option value="blog" <?php selected($effective['frontend']['profile'], 'blog'); ?>><?php esc_html_e('Blog (Optimal for content, smooth UX)', 'fingerprint-anti-bot'); ?></option>
+                                <option value="balanced" <?php selected($effective['frontend']['profile'], 'balanced'); ?>><?php esc_html_e('Balanced (General purpose)', 'fingerprint-anti-bot'); ?></option>
+                                <option value="strict" <?php selected($effective['frontend']['profile'], 'strict'); ?>><?php esc_html_e('Strict (Maximum protection)', 'fingerprint-anti-bot'); ?></option>
+                                <option value="ecommerce" <?php selected($effective['frontend']['profile'], 'ecommerce'); ?>><?php esc_html_e('E-commerce (Anti-scraping / scalping)', 'fingerprint-anti-bot'); ?></option>
                             </select>
-                            <p class="description"><?php esc_html_e('Profile applied to all public pages of the WordPress site.', 'fingerprint-wordpress'); ?></p>
+                            <p class="description"><?php esc_html_e('Profile applied to all public pages of the WordPress site.', 'fingerprint-anti-bot'); ?></p>
                         </td>
                     </tr>
                     <tr>
-                        <th scope="row"><label for="admin_profile"><?php esc_html_e('Administration Area (wp-login / wp-admin)', 'fingerprint-wordpress'); ?></label></th>
+                        <th scope="row"><label for="admin_profile"><?php esc_html_e('Administration Area (wp-login / wp-admin)', 'fingerprint-anti-bot'); ?></label></th>
                         <td>
                             <select name="admin_profile" id="admin_profile">
-                                <option value="strict" <?php selected($effective['admin']['profile'], 'strict'); ?>><?php esc_html_e('Strict (Recommended to secure logins)', 'fingerprint-wordpress'); ?></option>
-                                <option value="balanced" <?php selected($effective['admin']['profile'], 'balanced'); ?>><?php esc_html_e('Balanced', 'fingerprint-wordpress'); ?></option>
+                                <option value="strict" <?php selected($effective['admin']['profile'], 'strict'); ?>><?php esc_html_e('Strict (Recommended to secure logins)', 'fingerprint-anti-bot'); ?></option>
+                                <option value="balanced" <?php selected($effective['admin']['profile'], 'balanced'); ?>><?php esc_html_e('Balanced', 'fingerprint-anti-bot'); ?></option>
                             </select>
                         </td>
                     </tr>
                     <tr>
-                        <th scope="row"><label for="api_profile"><?php esc_html_e('REST API (/wp-json/)', 'fingerprint-wordpress'); ?></label></th>
+                        <th scope="row"><label for="api_profile"><?php esc_html_e('REST API (/wp-json/)', 'fingerprint-anti-bot'); ?></label></th>
                         <td>
                             <select name="api_profile" id="api_profile">
-                                <option value="api" <?php selected($effective['api']['profile'], 'api'); ?>><?php esc_html_e('API (JSON challenges & machine PoW)', 'fingerprint-wordpress'); ?></option>
-                                <option value="strict" <?php selected($effective['api']['profile'], 'strict'); ?>><?php esc_html_e('Strict', 'fingerprint-wordpress'); ?></option>
+                                <option value="api" <?php selected($effective['api']['profile'], 'api'); ?>><?php esc_html_e('API (JSON challenges & machine PoW)', 'fingerprint-anti-bot'); ?></option>
+                                <option value="strict" <?php selected($effective['api']['profile'], 'strict'); ?>><?php esc_html_e('Strict', 'fingerprint-anti-bot'); ?></option>
                             </select>
                         </td>
                     </tr>
@@ -416,54 +421,54 @@ function fingerprint_render_admin_page(): void {
 
                 <hr>
 
-                <h3><?php esc_html_e('2. Action Thresholds (Frontend)', 'fingerprint-wordpress'); ?></h3>
+                <h3><?php esc_html_e('2. Action Thresholds (Frontend)', 'fingerprint-anti-bot'); ?></h3>
                 <table class="form-table">
                     <tr>
-                        <th scope="row"><?php esc_html_e('Suspicion Score Thresholds (0 - 100)', 'fingerprint-wordpress'); ?></th>
+                        <th scope="row"><?php esc_html_e('Suspicion Score Thresholds (0 - 100)', 'fingerprint-anti-bot'); ?></th>
                         <td>
-                            <label><?php esc_html_e('Low (Initial challenge):', 'fingerprint-wordpress'); ?>
+                            <label><?php esc_html_e('Low (Initial challenge):', 'fingerprint-anti-bot'); ?>
                                 <input type="number" name="frontend_threshold_low" value="<?php echo esc_attr((string)($frontendConfig['thresholds']['low'] ?? 20)); ?>" min="1" max="50" style="width:80px;">
                             </label><br><br>
-                            <label><?php esc_html_e('Medium (Hardened challenge):', 'fingerprint-wordpress'); ?>
+                            <label><?php esc_html_e('Medium (Hardened challenge):', 'fingerprint-anti-bot'); ?>
                                 <input type="number" name="frontend_threshold_medium" value="<?php echo esc_attr((string)($frontendConfig['thresholds']['medium'] ?? 45)); ?>" min="10" max="75" style="width:80px;">
                             </label><br><br>
-                            <label><?php esc_html_e('High (Heavy Proof-of-Work):', 'fingerprint-wordpress'); ?>
+                            <label><?php esc_html_e('High (Heavy Proof-of-Work):', 'fingerprint-anti-bot'); ?>
                                 <input type="number" name="frontend_threshold_high" value="<?php echo esc_attr((string)($frontendConfig['thresholds']['high'] ?? 75)); ?>" min="30" max="95" style="width:80px;">
                             </label><br><br>
-                            <label><?php esc_html_e('Block (Immediate 403 Forbidden):', 'fingerprint-wordpress'); ?>
+                            <label><?php esc_html_e('Block (Immediate 403 Forbidden):', 'fingerprint-anti-bot'); ?>
                                 <input type="number" name="frontend_threshold_block" value="<?php echo esc_attr((string)($frontendConfig['thresholds']['block'] ?? 95)); ?>" min="50" max="100" style="width:80px;">
                             </label>
                         </td>
                     </tr>
                     <tr>
-                        <th scope="row"><?php esc_html_e('Advanced Behaviors', 'fingerprint-wordpress'); ?></th>
+                        <th scope="row"><?php esc_html_e('Advanced Behaviors', 'fingerprint-anti-bot'); ?></th>
                         <td>
                             <label>
                                 <input type="checkbox" name="frontend_challenge_new" value="1" <?php checked(!empty($frontendConfig['challengeNewDevices'])); ?>>
-                                <?php esc_html_e('Automatically challenge unknown new devices (without device_id cookie)', 'fingerprint-wordpress'); ?>
+                                <?php esc_html_e('Automatically challenge unknown new devices (without device_id cookie)', 'fingerprint-anti-bot'); ?>
                             </label><br>
                             <label>
                                 <input type="checkbox" name="detect_injections" value="1" <?php checked(!empty($frontendConfig['honeypot']['detectInjections'])); ?>>
-                                <?php esc_html_e('Enable recursive WAF inspection (SQL, NoSQL, Log4j, Traversal in GET/POST)', 'fingerprint-wordpress'); ?>
+                                <?php esc_html_e('Enable recursive WAF inspection (SQL, NoSQL, Log4j, Traversal in GET/POST)', 'fingerprint-anti-bot'); ?>
                             </label><br>
                             <label>
                                 <input type="checkbox" name="frontend_verbose" value="1" <?php checked(!empty($frontendConfig['verbose'])); ?>>
-                                <?php esc_html_e('Verbose mode in PHP logs (Debugging)', 'fingerprint-wordpress'); ?>
+                                <?php esc_html_e('Verbose mode in PHP logs (Debugging)', 'fingerprint-anti-bot'); ?>
                             </label>
                         </td>
                     </tr>
                 </table>
 
-                <?php submit_button(esc_html__('Save Changes', 'fingerprint-wordpress'), 'primary', 'fingerprint_save_settings'); ?>
+                <?php submit_button(esc_html__('Save Changes', 'fingerprint-anti-bot'), 'primary', 'fingerprint_save_settings'); ?>
             </form>
 
             <hr>
             <form method="post" action="" style="margin-top:16px;">
                 <?php wp_nonce_field('fingerprint_clear_nonce', 'fingerprint_nonce_clear'); ?>
                 <p>
-                    <strong><?php esc_html_e('Store Maintenance:', 'fingerprint-wordpress'); ?></strong>
-                    <button type="submit" name="fingerprint_clear_store" class="button button-secondary" onclick="return confirm('<?php echo esc_js(__('Purge all stored sessions and nonces?', 'fingerprint-wordpress')); ?>');">
-                        <?php esc_html_e('Clear SQL cache table ($wpdb)', 'fingerprint-wordpress'); ?>
+                    <strong><?php esc_html_e('Store Maintenance:', 'fingerprint-anti-bot'); ?></strong>
+                    <button type="submit" name="fingerprint_clear_store" class="button button-secondary" onclick="return confirm('<?php echo esc_js(__('Purge all stored sessions and nonces?', 'fingerprint-anti-bot')); ?>');">
+                        <?php esc_html_e('Clear SQL cache table ($wpdb)', 'fingerprint-anti-bot'); ?>
                     </button>
                 </p>
             </form>
@@ -471,49 +476,49 @@ function fingerprint_render_admin_page(): void {
 
         <!-- TAB 2 : VUE DÉTAILLÉE DES MÉTRIQUES -->
         <div id="tab-metrics" class="fingerprint-tab-content" style="display:none;background:#fff;padding:20px;border:1px solid #ccd0d4;border-top:none;">
-            <h3><?php esc_html_e('Behavioral & Transport Indicator Weights (Active Frontend Profile)', 'fingerprint-wordpress'); ?></h3>
-            <p class="description"><?php echo wp_kses_post(__('The final score of each request is computed using the weighted sum: <code>Score = &Sigma; (Metric &times; Weight)</code>.', 'fingerprint-wordpress')); ?></p>
+            <h3><?php esc_html_e('Behavioral & Transport Indicator Weights (Active Frontend Profile)', 'fingerprint-anti-bot'); ?></h3>
+            <p class="description"><?php echo wp_kses_post(__('The final score of each request is computed using the weighted sum: <code>Score = &Sigma; (Metric &times; Weight)</code>.', 'fingerprint-anti-bot')); ?></p>
 
             <form method="post" action="">
                 <?php wp_nonce_field('fingerprint_settings_nonce', 'fingerprint_nonce'); ?>
                 <table class="wp-list-table widefat fixed striped">
                     <thead>
                         <tr>
-                            <th style="width:280px;"><?php esc_html_e('Indicator / Metric', 'fingerprint-wordpress'); ?></th>
-                            <th style="width:120px;"><?php esc_html_e('Current Weight', 'fingerprint-wordpress'); ?></th>
-                            <th><?php esc_html_e('Description & Detection Role', 'fingerprint-wordpress'); ?></th>
+                            <th style="width:280px;"><?php esc_html_e('Indicator / Metric', 'fingerprint-anti-bot'); ?></th>
+                            <th style="width:120px;"><?php esc_html_e('Current Weight', 'fingerprint-anti-bot'); ?></th>
+                            <th><?php esc_html_e('Description & Detection Role', 'fingerprint-anti-bot'); ?></th>
                         </tr>
                     </thead>
                     <tbody>
                         <?php
                         $metricDescriptions = [
-                            'honeypotScore'              => __('Triggering of invisible trap links, multi-framework honeypots, and injection probes.', 'fingerprint-wordpress'),
-                            'headerAnomalyScore'         => __('Missing, malformed, or out-of-order HTTP headers inconsistent with legitimate browsers.', 'fingerprint-wordpress'),
-                            'tlsSpoofingScore'           => __('Discrepancy between User-Agent and TLS cryptographic fingerprints (JA3/JA4, extensions, GREASE).', 'fingerprint-wordpress'),
-                            'behaviorScore'              => __('Dynamic biometrics: mouse movements, keystroke dynamics, and mobile touch anomalies.', 'fingerprint-wordpress'),
-                            'requestPatternScore'        => __('Velocity, robotic bursts, request standard deviation, and Benford\'s law statistical analysis.', 'fingerprint-wordpress'),
-                            'inconsistencyScore'         => __('Alteration or drift in the hardware fingerprint between visits with the same cookie.', 'fingerprint-wordpress'),
-                            'subnetScore'                => __('Aggregated IP reputation of the network subnet (/24 or /48) and nearby attacker density.', 'fingerprint-wordpress'),
-                            'ipReputationScore'          => __('Local historical reputation score of the client IP address with temporal decay over time.', 'fingerprint-wordpress'),
-                            'renderingAnomalyScore'      => __('Display rendering anomalies, V-Sync/FPS cadence, and OffscreenCanvas hooking.', 'fingerprint-wordpress'),
-                            'protocolAnomalyScore'       => __('Divergence in HTTP/2 and QUIC / HTTP/3 flow control frame settings.', 'fingerprint-wordpress'),
-                            'quicAnomalyScore'           => __('Anomalies in QUIC transport parameters (flow control windows, max streams, and control frame ordering).', 'fingerprint-wordpress'),
-                            'tcpAnomalyScore'            => __('Passive TCP/IP stack fingerprinting (SYN packet TTL, window size, MSS, options) vs declared operating system.', 'fingerprint-wordpress'),
-                            'historyScore'               => __('Suspicious rotation of multiple IP addresses associated with a single hardware identity.', 'fingerprint-wordpress'),
-                            'rotationScore'              => __('Rapid and abnormal modifications to the application stack.', 'fingerprint-wordpress'),
-                            'botScore'                   => __('Detection of native automation attributes (navigator.webdriver, Chrome CDP).', 'fingerprint-wordpress'),
-                            'cookieDroppingScore'        => __('Detection of cookie deletion, dropping, or refusal between consecutive requests to bypass device identification.', 'fingerprint-wordpress'),
-                            'threatIntelScore'           => __('Correlation with known proxy IPs, Tor exit nodes, and federated threat intelligence blacklist.', 'fingerprint-wordpress'),
-                            'clientHintsInconsistencyScore' => __('Discrepancies between standard User-Agent and Sec-CH-UA Client Hints headers (browser family, version drift).', 'fingerprint-wordpress'),
-                            'clickVarianceScore'         => __('Statistical analysis of click coordinate variance; flags unnaturally low pixel variance typical of click bots.', 'fingerprint-wordpress'),
-                            'botnetClusterScore'         => __('Clustering of volatile client requests sharing identical hardware signatures across distinct IP addresses.', 'fingerprint-wordpress'),
-                            'timeInconsistencyScore'     => __('Time delta between client timestamp and server reception to detect replay and automated delay attacks.', 'fingerprint-wordpress'),
-                            'virtualizationScore'        => __('Detection of headless browsers, virtual GPU renderers (SwiftShader, llvmpipe) and emulated display resolutions.', 'fingerprint-wordpress'),
-                            'crossLayerInconsistencyScore' => __('Strict contradiction between layers (e.g. declared OS in User-Agent vs network TCP/IP stack OS).', 'fingerprint-wordpress'),
+                            'honeypotScore'              => __('Triggering of invisible trap links, multi-framework honeypots, and injection probes.', 'fingerprint-anti-bot'),
+                            'headerAnomalyScore'         => __('Missing, malformed, or out-of-order HTTP headers inconsistent with legitimate browsers.', 'fingerprint-anti-bot'),
+                            'tlsSpoofingScore'           => __('Discrepancy between User-Agent and TLS cryptographic fingerprints (JA3/JA4, extensions, GREASE).', 'fingerprint-anti-bot'),
+                            'behaviorScore'              => __('Dynamic biometrics: mouse movements, keystroke dynamics, and mobile touch anomalies.', 'fingerprint-anti-bot'),
+                            'requestPatternScore'        => __('Velocity, robotic bursts, request standard deviation, and Benford\'s law statistical analysis.', 'fingerprint-anti-bot'),
+                            'inconsistencyScore'         => __('Alteration or drift in the hardware fingerprint between visits with the same cookie.', 'fingerprint-anti-bot'),
+                            'subnetScore'                => __('Aggregated IP reputation of the network subnet (/24 or /48) and nearby attacker density.', 'fingerprint-anti-bot'),
+                            'ipReputationScore'          => __('Local historical reputation score of the client IP address with temporal decay over time.', 'fingerprint-anti-bot'),
+                            'renderingAnomalyScore'      => __('Display rendering anomalies, V-Sync/FPS cadence, and OffscreenCanvas hooking.', 'fingerprint-anti-bot'),
+                            'protocolAnomalyScore'       => __('Divergence in HTTP/2 and QUIC / HTTP/3 flow control frame settings.', 'fingerprint-anti-bot'),
+                            'quicAnomalyScore'           => __('Anomalies in QUIC transport parameters (flow control windows, max streams, and control frame ordering).', 'fingerprint-anti-bot'),
+                            'tcpAnomalyScore'            => __('Passive TCP/IP stack fingerprinting (SYN packet TTL, window size, MSS, options) vs declared operating system.', 'fingerprint-anti-bot'),
+                            'historyScore'               => __('Suspicious rotation of multiple IP addresses associated with a single hardware identity.', 'fingerprint-anti-bot'),
+                            'rotationScore'              => __('Rapid and abnormal modifications to the application stack.', 'fingerprint-anti-bot'),
+                            'botScore'                   => __('Detection of native automation attributes (navigator.webdriver, Chrome CDP).', 'fingerprint-anti-bot'),
+                            'cookieDroppingScore'        => __('Detection of cookie deletion, dropping, or refusal between consecutive requests to bypass device identification.', 'fingerprint-anti-bot'),
+                            'threatIntelScore'           => __('Correlation with known proxy IPs, Tor exit nodes, and federated threat intelligence blacklist.', 'fingerprint-anti-bot'),
+                            'clientHintsInconsistencyScore' => __('Discrepancies between standard User-Agent and Sec-CH-UA Client Hints headers (browser family, version drift).', 'fingerprint-anti-bot'),
+                            'clickVarianceScore'         => __('Statistical analysis of click coordinate variance; flags unnaturally low pixel variance typical of click bots.', 'fingerprint-anti-bot'),
+                            'botnetClusterScore'         => __('Clustering of volatile client requests sharing identical hardware signatures across distinct IP addresses.', 'fingerprint-anti-bot'),
+                            'timeInconsistencyScore'     => __('Time delta between client timestamp and server reception to detect replay and automated delay attacks.', 'fingerprint-anti-bot'),
+                            'virtualizationScore'        => __('Detection of headless browsers, virtual GPU renderers (SwiftShader, llvmpipe) and emulated display resolutions.', 'fingerprint-anti-bot'),
+                            'crossLayerInconsistencyScore' => __('Strict contradiction between layers (e.g. declared OS in User-Agent vs network TCP/IP stack OS).', 'fingerprint-anti-bot'),
                         ];
 
                         foreach ($frontendConfig['weights'] as $indicator => $weight):
-                            $desc = $metricDescriptions[$indicator] ?? __('Behavioral suspicion indicator.', 'fingerprint-wordpress');
+                            $desc = $metricDescriptions[$indicator] ?? __('Behavioral suspicion indicator.', 'fingerprint-anti-bot');
                         ?>
                         <tr>
                             <td><code><?php echo esc_html($indicator); ?></code></td>
@@ -526,15 +531,15 @@ function fingerprint_render_admin_page(): void {
                     </tbody>
                 </table>
                 <p style="margin-top:16px;">
-                    <?php submit_button(esc_html__('Update Metric Weights', 'fingerprint-wordpress'), 'primary', 'fingerprint_save_settings', false); ?>
+                    <?php submit_button(esc_html__('Update Metric Weights', 'fingerprint-anti-bot'), 'primary', 'fingerprint_save_settings', false); ?>
                 </p>
             </form>
         </div>
 
         <!-- TAB 3 : FLUX PROMETHEUS -->
         <div id="tab-prometheus" class="fingerprint-tab-content" style="display:none;background:#fff;padding:20px;border:1px solid #ccd0d4;border-top:none;">
-            <h3><?php esc_html_e('Real-Time Prometheus Metrics', 'fingerprint-wordpress'); ?></h3>
-            <p class="description"><?php esc_html_e('Raw text format exported for scraping by Prometheus, Grafana Agent, or Datadog.', 'fingerprint-wordpress'); ?></p>
+            <h3><?php esc_html_e('Real-Time Prometheus Metrics', 'fingerprint-anti-bot'); ?></h3>
+            <p class="description"><?php esc_html_e('Raw text format exported for scraping by Prometheus, Grafana Agent, or Datadog.', 'fingerprint-anti-bot'); ?></p>
             <textarea readonly style="width:100%;height:380px;font-family:monospace;background:#f6f7f7;padding:12px;"><?php echo esc_textarea($prometheusRaw); ?></textarea>
         </div>
     </div>

package/src/php/WordPress/languages/fingerprint-wordpress-de_DE.po

@@ -1,6 +1,6 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: Fingerprint Anti-Bot 0.7.2\n"
+"Project-Id-Version: Fingerprint Anti-Bot 0.7.4\n"
 "Report-Msgid-Bugs-To: https://github.com/anonympins/fingerprint/issues\n"
 "POT-Creation-Date: 2026-09-24 12:00+0000\n"
 "PO-Revision-Date: 2026-09-24 12:00+0000\n"

package/src/php/WordPress/languages/fingerprint-wordpress-fr_FR.po

@@ -1,6 +1,6 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: Fingerprint Anti-Bot 0.7.2\n"
+"Project-Id-Version: Fingerprint Anti-Bot 0.7.4\n"
 "Report-Msgid-Bugs-To: https://github.com/anonympins/fingerprint/issues\n"
 "POT-Creation-Date: 2026-09-24 12:00+0000\n"
 "PO-Revision-Date: 2026-09-24 12:00+0000\n"