chore: readme accuracy + WordPress.org SVN deploy script

.gitignore

@@ -29,3 +29,6 @@ composer.lock
 
 # Logs
 *.log
+
+# WordPress.org SVN working copy (created by bin/deploy-wporg.sh)
+/.svn-wporg/

bin/deploy-wporg.sh

@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+#
+# Deploy an approved WebDecoy release to the WordPress.org plugin SVN repo.
+#
+# Prerequisites (all one-time, after the Plugins Team approves the plugin):
+#   - The plugin is approved and its SVN repo exists at
+#     https://plugins.svn.wordpress.org/webdecoy/
+#   - `svn` is installed and you have wp.org commit access (you'll be prompted
+#     for your wordpress.org username/password on commit).
+#   - `rsvg-convert` is available to (re)generate the icon/banner PNGs from the
+#     SVGs in assets/ (optional — skipped with a warning if missing).
+#
+# Usage:
+#   bin/deploy-wporg.sh <version>            # stage everything, then PRINT the
+#                                            # svn commit command (nothing is
+#                                            # published — review first)
+#   bin/deploy-wporg.sh <version> --commit   # stage AND commit/publish
+#
+# What it does: builds the .org variant, syncs it into SVN trunk/, refreshes the
+# directory assets (icon/banner) in assets/, tags tags/<version>/, and either
+# prints or runs the commit.
+#
+set -euo pipefail
+
+VERSION="${1:?usage: bin/deploy-wporg.sh <version> [--commit]}"
+DO_COMMIT=0
+for arg in "$@"; do [ "$arg" = "--commit" ] && DO_COMMIT=1; done
+
+SLUG="webdecoy"
+PLUGIN_DIR="$(cd "$(dirname "$0")/.." && pwd)"
+SVN_URL="https://plugins.svn.wordpress.org/${SLUG}"
+BUILD_SRC="${PLUGIN_DIR}/build/${SLUG}"
+SVN_DIR="${PLUGIN_DIR}/.svn-wporg"
+
+echo "==> Building WordPress.org variant v${VERSION}"
+cd "${PLUGIN_DIR}"
+./build.sh "${VERSION}" --org >/dev/null
+[ -d "${BUILD_SRC}" ] || { echo "error: build tree not found at ${BUILD_SRC}"; exit 1; }
+
+echo "==> Checking out / updating SVN working copy"
+if [ -d "${SVN_DIR}/.svn" ]; then
+    svn update --quiet "${SVN_DIR}"
+else
+    svn checkout --quiet "${SVN_URL}" "${SVN_DIR}"
+fi
+
+echo "==> Syncing build tree into trunk/"
+mkdir -p "${SVN_DIR}/trunk"
+rsync -a --delete --exclude='.svn' "${BUILD_SRC}/" "${SVN_DIR}/trunk/"
+
+echo "==> Refreshing directory assets (icon + banner)"
+mkdir -p "${SVN_DIR}/assets"
+if command -v rsvg-convert >/dev/null 2>&1; then
+    rsvg-convert -w 128 -h 128  "${PLUGIN_DIR}/assets/icon.svg"   -o "${SVN_DIR}/assets/icon-128x128.png"
+    rsvg-convert -w 256 -h 256  "${PLUGIN_DIR}/assets/icon.svg"   -o "${SVN_DIR}/assets/icon-256x256.png"
+    rsvg-convert -w 772 -h 250  "${PLUGIN_DIR}/assets/banner.svg" -o "${SVN_DIR}/assets/banner-772x250.png"
+    rsvg-convert -w 1544 -h 500 "${PLUGIN_DIR}/assets/banner.svg" -o "${SVN_DIR}/assets/banner-1544x500.png"
+else
+    echo "    ! rsvg-convert not found — add PNGs to ${SVN_DIR}/assets/ manually"
+fi
+
+echo "==> Tagging tags/${VERSION}"
+rm -rf "${SVN_DIR}/tags/${VERSION}"
+mkdir -p "${SVN_DIR}/tags"
+cp -R "${SVN_DIR}/trunk" "${SVN_DIR}/tags/${VERSION}"
+
+echo "==> Reconciling svn add/delete"
+cd "${SVN_DIR}"
+# Add anything new; then delete anything gone from the working tree.
+svn add --force trunk tags assets >/dev/null 2>&1 || true
+svn status | awk '/^!/ {print $2}' | while read -r p; do svn delete --force "$p" >/dev/null 2>&1 || true; done
+
+echo ""
+echo "==> Staged. Summary:"
+svn status | sed 's/^/    /'
+echo ""
+
+if [ "${DO_COMMIT}" = "1" ]; then
+    echo "==> Committing to WordPress.org"
+    svn ci -m "Release ${VERSION}"
+    echo "Published v${VERSION} to https://wordpress.org/plugins/${SLUG}/"
+else
+    echo "Dry run complete (nothing published). Review the staged changes above, then run:"
+    echo "    (cd ${SVN_DIR} && svn ci -m \"Release ${VERSION}\")"
+    echo "or re-run: bin/deploy-wporg.sh ${VERSION} --commit"
+fi

readme.txt

@@ -52,7 +52,7 @@ WebDecoy is a **free, fully-functional** bot detection and protection plugin tha
 * Comment spam protection
 * Login brute force protection
 * Registration spam prevention
-* Invisible honeypot fields with obfuscated names
+* Invisible honeypot fields on comment, login, and registration forms
 
 **WooCommerce Protection**
 * Checkout carding attack prevention