{% include 'admin/partials/header.html' %}{% include 'admin/partials/sidebar.html' %}
<div class="acp-page-head"><div><span class="eyebrow">Security & anti-automation</span><h1>NexusShield</h1><p>Self-hosted risk scoring, form timing, honeypots, rate limits, and accessible one-time challenges.</p></div><a class="acp-primary" href="{{ $baseUrl }}/admin/settings">Security settings</a></div>
<div class="shield-admin-stats"><article class="dash-stat"><span>Assessed (24h)</span><strong>{{ $stats['total'] ?: 0 }}</strong><small>Login and registration requests</small></article><article class="dash-stat"><span>Passed</span><strong>{{ $stats['passed'] ?: 0 }}</strong><small>Requests accepted</small></article><article class="dash-stat danger"><span>Blocked</span><strong>{{ $stats['blocked'] ?: 0 }}</strong><small>High-risk submissions</small></article><article class="dash-stat"><span>Credential failures</span><strong>{{ $stats['failed'] ?: 0 }}</strong><small>Failed sign-in attempts</small></article></div>
<section class="dash-card shield-overview"><div class="dash-card-head"><div><h2>Protection status</h2><p>No external API, tracking cookie, or usage fee.</p></div><span class="status-pill {{ $settings['nexus_shield_enabled']?'enabled':'disabled' }}">{{ $settings['nexus_shield_enabled']?'Enabled':'Disabled' }}</span></div><div class="shield-layer-grid"><div><b>Invisible checks</b><span>Honeypot fields, minimum completion time, replay protection, and request-rate analysis.</span></div><div><b>Step-up challenges</b><span>Short-lived local math, logic, and copy challenges with accessible text prompts.</span></div><div><b>Privacy</b><span>Challenge verification remains on this NexusForum installation.</span></div><div><b>Current scope</b><span>Registration and repeated-failure login protection. Plugin and posting hooks are next.</span></div></div></section>
<section class="dash-card"><div class="dash-card-head"><div><h2>Recent assessments</h2><p>Latest 100 NexusShield outcomes.</p></div><form method="post" action="{{ $baseUrl }}/admin/nexus-shield/clear" onsubmit="return confirm('Clear NexusShield attempt history?')"><input type="hidden" name="_token" value="{{ $csrfToken }}"><button class="acp-secondary" type="submit">Clear logs</button></form></div><div class="acp-table-wrap"><table class="acp-table"><thead><tr><th>Time</th><th>Action</th><th>Outcome</th><th>Risk</th><th>Reason</th><th>IP</th></tr></thead><tbody>{% if $attempts %}{% foreach $attempts as $attempt %}<tr><td>{{ $attempt['created_at'] }}</td><td><code>{{ $attempt['action'] }}</code></td><td><span class="status-pill {{ $attempt['outcome']==='passed'?'enabled':'disabled' }}">{{ $attempt['outcome'] }}</span></td><td>{{ $attempt['risk_score'] }}</td><td>{{ $attempt['reason'] }}</td><td>{{ $attempt['ip_address'] }}</td></tr>{% endforeach %}{% else %}<tr><td colspan="6"><div class="empty-state"><b>No assessments yet</b><span>NexusShield activity will appear after protected forms are submitted.</span></div></td></tr>{% endif %}</tbody></table></div></section>
{% include 'admin/partials/footer.html' %}