Human Verification Brain Puzzle For Login Security Guard

Human Verification Brain Puzzle For Login Security Guard replaces the traditional CAPTCHA with a lightweight, accessible 3×3 puzzle on the WordPress login page. Users must correctly complete the puzzle before the Log In button becomes active. The answer is also verified server-side, so it cannot be bypassed by disabling JavaScript.

How it works

1. A random 3×3 puzzle is displayed on the login page.
2. Each row and each column must contain the digits 1, 2, and 3 exactly once.
3. Click (or tap) an empty cell to select it, then pick a number from the picker — or press 1, 2, or 3 on your keyboard.
4. Once the puzzle is solved correctly, the Log In button becomes clickable.
5. The answer is validated server-side on submission for extra security.

Features

• 6 built-in puzzle variations chosen at random each visit.
• Client-side validation with instant feedback (wrong cells highlighted in red).
• Server-side answer verification — cannot be bypassed without JavaScript.
• WP nonce protection against CSRF attacks.
• Accessible: full keyboard navigation, ARIA roles and labels, aria-live status region.
• No external requests — no JavaScript frameworks or CDN dependencies.
• Tiny footprint: one CSS file, one JS file, one PHP class.
• Fully translatable via standard WordPress i18n functions.
• Matches native WordPress login page styling.
• Works on the standard wp-login.php screen, the WooCommerce „My Account“ login form, and the MemberPress login form.

Privacy

This plugin is stateless — it does not use PHP sessions, cookies, or any database storage. The puzzle shown to a visitor is bound to a signed WordPress nonce embedded in the form itself. No personal data is stored or transmitted to third parties.