reMember 2.0.0

• Enhancement: Applying for an event first shows a dialog: review and save the profile (changes optional), then return to the application. The "my profile is current" confirmation remains required.
• Enhancement: Staff can append profile notes on a member record, separate from vetting. Notes are either visible to the member on their profile or private to wp-admin (not shown on the member front end). Confidential print includes them; the event card does not.
• Enhancement: Daily duplicate-profile scan (legal names, location, display names, IM/social handles). Staff with Merge Duplicate Profiles review side by side, pick surviving fields and roles, keep the later-entered password, then merge or undo. Emergency contact is hidden without Access Emergency Contact. Merged profiles cannot log in or request a password reset. Members are emailed only after a merge.
• Enhancement: Settings → Notifications uses sub-tabs (Vetting, Applications, Billing, General).

Update: this release should appear under Plugins → Updates if you are on 1.3.5 or later. Otherwise download remember-2.0.0.zip below (not GitHub's "Source code" zip, which unpacks to the wrong folder name). Load any admin page once after updating so database migrations through 2.1.3 run.

reMember 1.4.0

• Enhancement: Clothing sizes keep the member's actual size and show the inventory size that is available. Settings → Clothing has a write-in Stock table per category; Available as is filled from that, not the seeded body-size list. Dropdowns and staff views use labels like XL (available L). Database 1.41.0.
• Fix: Hide the Bluehost plugin's "Login with Bluehost" button on wp-login.php so members use username and password. Filter remember_hide_hosting_sso to keep the button.
• Enhancement: Nonced front-end Log out via Appearance → Menus (reMember box), a Log out block in the Site Editor Navigation, a Custom Link to /remember-logout, or [remember_logout]. The admin bar is hidden when the only WordPress role is Subscriber.
• Enhancement: Members can change their password on Edit Profile (current, new, confirm under Basic Information) with Save Profile.
• Enhancement: Interests is limited to 2,000 characters (plain text) on registration, profile edit, and admin member edit, with a live counter.
• Security: Event apply builds add-on names/descriptions and role labels as text, not HTML.
• Security: CSV exports prefix cells that start with =, +, -, or @ so Excel/LibreOffice will not treat member-controlled text as a formula.
• Security: Browser security headers on front, login, admin, and REST. Filter remember_security_headers to tighten or disable.
• Security: Unauthenticated GET /wp-json/wp/v2/users no longer returns login slugs.
• Security: XML-RPC stays available for Jetpack and the WordPress mobile app; pingback methods and open pings are removed.
• Security: Debug logs no longer write to the public /wp-content/debug.log URL.

Update: this release should appear under Plugins → Updates if you are on 1.3.7 or later. Otherwise download remember-1.4.0.zip below (not GitHub's "Source code" zip, which unpacks to the wrong folder name). Load any admin page once after updating so database migrations through 1.41.0 run.

reMember 1.3.7

• Enhancement: The event card printout uses a larger square photo at top left, with the display name and the first four opted-in custom fields in the column beside it. Remaining event-card fields continue in two columns under that row, then Interests.
• Enhancement: Assigned member numbers print on both sheets: under the display name on the confidential profile and the event card, and in the confidential footer.
• Fix: Member billing register follows Xero/QBO invoice totals: voided or deleted invoices are cancelled locally (zero balance, no ghost debit), deleted payments and credit notes drop off on sync, and remaining credits are applied so Current Balance matches the provider.
• Fix: Opening a member profile always refreshes invoices, payments, and credits from Xero or QuickBooks (no 60-second cache).
• Fix: Settings → Xero shows Reconnect Xero while a connection is stored, and warns when the access token can no longer be refreshed.
• Fix: Xero reconnect keeps the authorization error on the Xero tab, uses a stored OAuth state plus PKCE, and exchanges the code with the same redirect URI that started the flow.
• Fix: Xero token exchange, refresh, and revoke send the same User-Agent as other Xero calls. identity.xero.com was returning HTTP 403 (Akamai) for WordPress’s default user-agent. A failed reconnect notice is cleared once the live connection works again.

Update: this release should appear under Plugins → Updates if you are on 1.3.5 or 1.3.6. Otherwise download remember-1.3.7.zip below (not GitHub's "Source code" zip, which unpacks to the wrong folder name) and use Plugins → Add New → Upload Plugin. If you already installed the first 1.3.7 zip, upload this one to pick up member numbers on the printouts.

reMember 1.3.6

• Enhancement: Member profiles print in two formats, chosen from a Print menu on the profile. Confidential profile is the full staff record — identity, profile, emergency contact, and health on page one, interests and custom fields on page two — with red CONFIDENTIAL banners repeated on every page. Event card is meant for posting at an event: photo, display name, interests, and opted-in custom fields, with no contact details, address, roles, emergency contact, or health information. Save-as-PDF filenames use {display_name}_member_full_profile_{yymmdd}.pdf and {display_name}_event_card_{yymmdd}.pdf.
• Enhancement: Custom profile fields gain a Show on event card setting, off by default, so a question like "What medications do you take?" never reaches a publicly posted card unless you opt it in. Database 1.35.0.
• Enhancement: Role capability editing uses a module × Create/Read/Edit/Delete matrix, with settings, exports, emergency contact, health, and printing listed under Other.
• Security: Member profile printing is gated by remember_print_confidential and remember_print_event_card. Without the matching cap the Print control is hidden and Ctrl/Cmd+P yields a permission notice instead of the sheet. Seeded to System Administrator and Event Administrator. Database 1.39.0.
• Security: Emergency contact and health information (dietary, allergies, medical) are gated behind remember_access_emergency_contact and remember_access_health. Without those caps the fields are hidden on member view/edit, omitted from CSV exports, and ignored on import and forged POSTs. Database 1.36.0; renamed from remember_read_* in 1.37.0.
• Security: The member profile's billing register honors remember_read_billing, and the QuickBooks/Xero sync buttons and their POST handlers require remember_update_billing. Vetting cases on the profile require remember_read_vetting.
• Security: Privilege escalation hardening — role capability saves require remember_update_roles, you can only grant caps you already hold, System Administrator cannot be deleted or edited except by a WordPress administrator, and member role assignment cannot add or remove roles whose caps you do not hold. Member CSV export respects attendees-only scoping.
• Fix: "None" sorts first in dietary, allergy, and medical accommodation checklists. Database 1.38.0.
• Fix: The confidential printout no longer strands the dietary/allergy/medical cards below the profile card with a dead gap, and the profile row stretches when emergency contact or health are hidden from the viewer.
• Fix: Settings → Plugin Version reports the installed files, and the stored option is synced on admin load after Upload → Replace.

Update: this release should appear under Plugins → Updates if you are on 1.3.5. Otherwise download remember-1.3.6.zip below (not GitHub's "Source code" zip, which unpacks to the wrong folder name) and use Plugins → Add New → Upload Plugin. Load any admin page once after updating so database migrations through 1.39.0 run.

reMember 1.3.5

• Enhancement: Updates arrive in the WordPress dashboard. reMember checks GitHub Releases and offers the packaged remember-x.y.z.zip, so Plugins → Update works like any other plugin (requires WordPress 5.8+).
• Fix: Every rich-text field is Visual-only — the Visual/Code switcher is gone from events, locations, agreements, member edit, registration, and profile.

Install: download remember-1.3.5.zip below (not GitHub's "Source code" zip, which unpacks to the wrong folder name), then use Plugins → Add New → Upload Plugin. This is the last release that needs a manual upload; 1.3.6 onward will appear under Plugins → Updates.

v1.3.4

1.3.4

• Enhancement: Admin-assignable unique alphanumeric member number; members see it read-only. Closes #21.
• Enhancement: Event apply and dashboard application edits require profile-currency confirmation (phrase + profile saved within 24 hours); profile updated_by audit fields. Closes #22.
• Fix: Interests editors (profile, registration, admin) show Visual only — Code tab hidden.
• Fix: Long profile edit forms no longer clip custom fields or force horizontal overflow.
• Fix: Upload → Replace no longer fails on git/dev trees (.git, dist, etc.): deactivate earlier, purge non-release paths, chmod writable, retry clear when WordPress reports files_not_writable.

Install: Use the remember-1.3.4.zip asset below (not GitHub’s Source code zip).

**N If Upload → Replace still fails on a Local/git checkout that was already mid-failure, delete wp-content/plugins/remember (or remove .git / dist / bin / .github under it) and install this zip fresh — the wipe runs with the currently installed upgrader until 1.3.4 is on disk.

reMember 1.3.3

reMember 1.3.3

Security / capabilities

• Attendees-only: member detail and POST actions respect shared-event scope (no arbitrary ?view= access).
• Setup wizard, Settings, Products: mutations require remember_access_settings, not nonce alone.
• Dashboard: applications-only staff can open the main admin dashboard.
• Event-role AJAX: separate admin/front nonces; no Referer / manage_options unlock for full role lists.
• Tickets: staff viewing uses remember_read_applications.

Platforms

• Admin-managed Instant Messenger platforms (DB 1.32.0). Closes #20.
• Social Media + IM combined in a two-column Platforms settings tab.

Install

Download remember-1.3.3.zip from Assets below — not GitHub’s “Source code (zip)”. The asset unpacks to remember/.

reMember 1.3.2

reMember 1.3.2

Registration / profile

• Country required (defaults to US). Closes #17.
• Interests prompt clarifies what you want from the event. Closes #16.
• Time zone starts empty at registration and opens unfiltered; clearer copy. Closes #13.
• Dietary / medical / allergies include None and require a response; expanded catalogs. Closes #15, #19.
• Privacy copy explains sharing and networking photo/IM. Closes #18.
• Profile photo required at registration. Closes #14.
• Custom fields can be required only when an earlier pick-one / pick-several matches chosen values. Closes #11.

Admin / upgrades

• Admin mobile: vetting, applications, billing, and related tables stack into labeled cards. Closes #8, #9, #10.
• Load dbDelta before admin schema migrations so upgrades are not stalled mid-chain.
• Plugin header Update URI points at the GitHub repository.

Docs

• Root docs are README.md + CHANGELOG.md only.

Install

Download remember-1.3.2.zip from Assets below — not GitHub’s “Source code (zip)”. The asset unpacks to remember/.

reMember 1.3.1

reMember 1.3.1

Fixes

• Custom fields: Registration/profile custom questions no longer collide with the two-column layout (stacked rows; checkbox labels scoped correctly). Closes #6.
• Admin mobile: Member/event headers stack; wide tables scroll horizontally instead of crushing columns. Closes #7.

Install

Download remember-1.3.1.zip from Assets below — not GitHub’s “Source code (zip)”. The asset unpacks to remember/.

reMember 1.3.0

Highlights

• Custom profile fields (text / select / multi-select) on register, profile, and admin; CSV Short names
• Agreements library with pinned revisions; ack + typed legal name on apply
• Allow reapply for declined/cancelled applications
• Lean admin member-edit requireds
• Per-event accepted participant CSV (remember_event_data_export)
• Import/Export gated by remember_import_export; richer member CSV; Custom Fields definition import/export

Upgrade notes

• Prefer remember-1.3.0.zip from this release (root folder remember/). Do not use GitHub’s auto “Source code” zip.
• Sites still on ≤1.2.0: deactivate reMember once before installing 1.3.0 the first time (zip overwrite upgrader only helps after 1.3.0 is already present).
• After upgrade, load wp-admin once so schema/caps migrate through 1.27.0.

Demo → production

1. Export Custom Fields → import on target
2. Export Members → import on target