=== Feedorax ===

Contributors: mohim80
Tags: social, timeline, feed, community, networking
Requires at least: 5.9
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Social timeline for Feedorax: posts, stories, friends, chat, notifications & search. Shortcode, block, REST API, public profiles.

== Description ==

Feedorax gives logged-in members a familiar social experience inside your site. Drop the timeline on any page with the shortcode or the **Feedorax Timeline** block (great for block themes). Visitors get public member profiles at pretty URLs (`/feedorax-profile/username/`), while your data stays in Feedorax users, user meta, and dedicated plugin tables. A REST API powers the UI and can support custom integrations.

**Features:**

* **Timeline** – Social feed with posts, reactions, and comments (shortcode: `[feedorax_timeline]`)
* **User search** – AJAX search in the timeline header to find people
* **REST API** – Endpoints for timeline, connections, and auth (login/register)
* **Responsive** – Works on desktop and mobile
* **Settings** – Feedorax → Overview lists the shortcode and quick start steps

**Shortcode:**

* `[feedorax_timeline]` – Displays the social timeline with topbar, feed, and sidebar

== Installation ==

1. Upload the `feedorax` folder to `/wp-content/plugins/`
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Go to **Feedorax → Overview** in the admin to see shortcode usage and copy the shortcodes.
4. Add the shortcode to any page or post: `[feedorax_timeline]` for the timeline

== Updating ==

* If you installed from WordPress.org: use Plugins → Updates or update from the Plugins screen when a new version is available.
* If you installed manually: replace the plugin folder with the new version (or upload and overwrite). Your data (tables and user meta) is preserved. The plugin runs a short upgrade check on each load and applies any required database or option changes for the new version.

== Frequently Asked Questions ==

= Do users need to be logged in? =

The timeline can be viewed by anyone. Header search (people and posts) and many actions require a logged-in user.

= Where is data stored? =

Timeline data (comments, reactions, notifications, connection requests, chat, and related data) is stored in custom database tables (prefixed with your WordPress table prefix, for example `wp_feedorax_comments`, `wp_feedorax_friend_requests`). User profile fields use WordPress users and user meta.

= Does the plugin load scripts from other sites? =

Plugin scripts and bundled UI assets are loaded from the plugin package. Optional features can request third-party services as documented in the External Services section.

= How are REST API requests secured? =

REST routes that change data use Feedorax authentication, capability checks, and nonces where appropriate.

= Should I put screenshot PNGs inside the plugin ZIP? =

No. Directory screenshots, banners, and icons belong in the WordPress.org SVN `assets/` branch after approval, not inside the plugin code ZIP.

== Privacy ==

* **Accounts:** Feedorax uses WordPress user accounts (name, email, profile data as stored in WordPress).
* **Database:** Custom tables store posts, comments, reactions, friend requests, notifications, chat, and related data on your server only.
* **Media:** Uploaded images and videos are stored in the WordPress Media Library.
* **REST API:** Mutating requests are protected with nonces and permission checks.
* **External services:** Optional GIF search, Google-hosted fonts, and location lookup features may contact third-party services as documented below.

Site owners are responsible for their privacy policy and compliance with applicable laws (for example GDPR where relevant).

== External Services ==

Feedorax can connect to third-party services for specific optional features:

= GIPHY API (GIF Search) =

* **What it is used for:** Search and attach GIFs from the post composer.
* **What data is sent and when:** When a logged-in user searches GIFs, the plugin sends the search query text and your configured GIPHY API key from your server to `api.giphy.com`.
* **Service provider:** GIPHY, Inc.
* **Terms:** https://support.giphy.com/hc/en-us/articles/360020027752-GIPHY-API-Terms-of-Service
* **Privacy:** https://giphy.com/privacy

= Google Fonts (Optional Typography) =

* **What it is used for:** Load selected font families for frontend typography settings.
* **What data is sent and when:** When a site owner configures Google-hosted font families, a visitor's browser requests font CSS and files from `fonts.googleapis.com` and `fonts.gstatic.com` on pages where the Feedorax UI loads. System fonts do not make these requests.
* **Service provider:** Google LLC
* **Terms:** https://policies.google.com/terms
* **Privacy:** https://policies.google.com/privacy

= OpenStreetMap Nominatim (Optional Location Labels) =

* **What it is used for:** Search for places and convert selected browser geolocation coordinates into a human-readable place name in the post composer.
* **What data is sent and when:** When a member uses location search, the visitor's browser sends the typed place query to `nominatim.openstreetmap.org`. When a member chooses current location, the browser asks for geolocation permission and sends latitude and longitude to `nominatim.openstreetmap.org` after permission is granted.
* **Service provider:** OpenStreetMap Foundation (Nominatim)
* **Terms:** https://operations.osmfoundation.org/policies/nominatim/
* **Privacy:** https://wiki.osmfoundation.org/wiki/Privacy_Policy

== Source Code ==

All plugin PHP/JS/CSS source shipped in this release is included directly in this plugin package.

== Screenshots ==

1. Feedorax profile page with cover, stats, and composer.
2. Timeline (light mode) with menu, feed, and right sidebar.
3. Timeline (dark mode) with full responsive layout.
4. Timeline (light mode) with suggestions and trending widgets.

== Changelog ==

= 1.0.0 = (Initial release)
* Timeline shortcode [feedorax_timeline] with topbar, sidebar, and feed
* Create posts with text, image, video; post reactions (emoji), comments, replies, comment reactions
* Share posts to timeline, copy link, add to story
* Stories (moments): add image/video story with text overlay, viewer with progress bar
* Header: dynamic avatar, AJAX search (people + posts), notification dropdown
* Notifications for reactions, comments, shares, replies; mark as read
* Sidebar: People you may know, Online now, Trending
* REST API for users, search, stories, posts, comments, reactions, connections, notifications, auth
* Database tables: friend_requests, comments, comment_reactions, post_reactions, notifications
* Security: nonce validation, sanitization, prepared SQL, directory listing disabled
* Settings page and uninstall cleanup

== Upgrade Notice ==

= 1.0.0 =
Initial release of Feedorax. Timeline, stories, posts, comments, reactions, notifications, and REST API.
