reMember 1.3.6

• Enhancement: Member profiles print in two formats, chosen from a Print menu on the profile. Confidential profile is the full staff record — identity, profile, emergency contact, and health on page one, interests and custom fields on page two — with red CONFIDENTIAL banners repeated on every page. Event card is meant for posting at an event: photo, display name, interests, and opted-in custom fields, with no contact details, address, roles, emergency contact, or health information. Save-as-PDF filenames use {display_name}_member_full_profile_{yymmdd}.pdf and {display_name}_event_card_{yymmdd}.pdf.
• Enhancement: Custom profile fields gain a Show on event card setting, off by default, so a question like "What medications do you take?" never reaches a publicly posted card unless you opt it in. Database 1.35.0.
• Enhancement: Role capability editing uses a module × Create/Read/Edit/Delete matrix, with settings, exports, emergency contact, health, and printing listed under Other.
• Security: Member profile printing is gated by remember_print_confidential and remember_print_event_card. Without the matching cap the Print control is hidden and Ctrl/Cmd+P yields a permission notice instead of the sheet. Seeded to System Administrator and Event Administrator. Database 1.39.0.
• Security: Emergency contact and health information (dietary, allergies, medical) are gated behind remember_access_emergency_contact and remember_access_health. Without those caps the fields are hidden on member view/edit, omitted from CSV exports, and ignored on import and forged POSTs. Database 1.36.0; renamed from remember_read_* in 1.37.0.
• Security: The member profile's billing register honors remember_read_billing, and the QuickBooks/Xero sync buttons and their POST handlers require remember_update_billing. Vetting cases on the profile require remember_read_vetting.
• Security: Privilege escalation hardening — role capability saves require remember_update_roles, you can only grant caps you already hold, System Administrator cannot be deleted or edited except by a WordPress administrator, and member role assignment cannot add or remove roles whose caps you do not hold. Member CSV export respects attendees-only scoping.
• Fix: "None" sorts first in dietary, allergy, and medical accommodation checklists. Database 1.38.0.
• Fix: The confidential printout no longer strands the dietary/allergy/medical cards below the profile card with a dead gap, and the profile row stretches when emergency contact or health are hidden from the viewer.
• Fix: Settings → Plugin Version reports the installed files, and the stored option is synced on admin load after Upload → Replace.

Update: this release should appear under Plugins → Updates if you are on 1.3.5. Otherwise download remember-1.3.6.zip below (not GitHub's "Source code" zip, which unpacks to the wrong folder name) and use Plugins → Add New → Upload Plugin. Load any admin page once after updating so database migrations through 1.39.0 run.