v2.2.0

• Feature: The members list can be sorted by name, status, roles, joined date, or updated date. Updated is the last profile change. Each admin’s sort is remembered on their account.
• Feature: wp remember can back up, restore, import, and export reMember data, sync QuickBooks or Xero payments, and scan for duplicate profiles. Commands run as the --user you pass, so the same access checks apply. Restore does nothing unless --yes is included. Import can --dry-run.
• Feature: A saved report can be emailed as a CSV on a daily, weekly, or monthly schedule. The file is built with the report owner's access and sent only to staff who can still run that report. An empty result can be skipped. A report with health or emergency fields is not emailed unless that is confirmed. Database 2.3.9.
• Feature: An event can add a check-in code to the admission ticket that already prints. It is off unless the event turns it on. Staff with Check In Attendees open Check-in, scan or type the code or search by name, and see whether the ticket is valid, already used, void, or for another event. The event participant CSV and application reports include the check-in time. Database 2.3.8.
• Feature: An event can email Event Administrators, or move the oldest waiting application for that role to pending, when an accepted spot is withdrawn or declined. The automatic choice runs only while registration is open and the role has room. It does not accept the application or create an invoice. Off leaves the waitlist for staff.
• Feature: Public registration can require Cloudflare Turnstile or hCaptcha. The secret key is encrypted and left out of backups. The same form allows 10 attempts from one IP address in an hour unless that number is changed. A site can also reject an email domain or add its own check before an account is created.
• Feature: Tools → Export Personal Data and Erase Personal Data include the reMember profile, health, emergency contact, applications, and survey answers. Erase removes those personal fields and the photo. Payment amounts and invoice identifiers stay. Staff note text is left out of the export and deleted on erase.
• Feature: A log records who views or exports health information or emergency contacts, including member screens, duplicate review, member and event CSVs, reports, and full backups. WordPress administrators can read it under Access log. Entries are kept for 12 months unless that is changed. The log is included in a full backup and does not contain the sensitive values themselves.
• Security: The readme states that one-click updates install the latest GitHub release zip with no signature check. The accounts that can publish a release are what keep that update safe.
• Fix: QuickBooks and Xero secrets are encrypted with a key that is not stored in the database. Existing connections are rewritten only after the new value decrypts to the same secret. If that check fails, the old key and the old values stay.
• Fix: A new profile photo is stored under a random file name. The original camera name is no longer part of the URL. Photos already on the site keep their current names.
• Fix: Registration checks the profile photo before it creates an account. A photo that is not a real image is rejected, and no account is left behind.
• Fix: A backup restore that fails removes WordPress users it just created. Accounts that were already on the site stay.
• Fix: Saving a profile rejects a time zone that is not a real zone. A blank time zone still defaults to America/Los_Angeles. Registration already rejected a bad zone.
• Fix: A member import skips a WordPress administrator unless the person importing is also an administrator. Their name is left as it is, and no member record is attached.
• Fix: A staff backup restore cannot add reMember capabilities that person cannot grant, and cannot newly assign a role that carries those capabilities. Assignments and capabilities already on the site stay. A WordPress administrator restore is unchanged.
• Fix: Member CSV imports and backup restores read the uploaded file in place. The file is no longer copied into the public uploads folder under its original name.
• Fix: A member, event, or location import that does not save is counted as an error and includes the database message. An update that changes nothing is still a success.
• Fix: Member import rejects a Status the member table cannot store before it creates a WordPress user. A blank Status still starts as pending vetting. Vetted is accepted as vetted.
• Fix: Re-importing members leaves profile columns alone when those columns are not in the file. A blank cell still clears that field. A new member still gets the usual empty defaults.
• Enhancement: The event screen lists each survey under Attendees. Fixed-choice questions show how many people picked each answer and that count's share of submitted responses.
• Fix: Report filters follow the field type. Choice fields, including survey role, question, survey kind, and timing, offer their lists. An answer filter uses the selected question: a dropdown for pick-one and yes/no, a multi-select for pick-several, and a text box for typed answers.
• Enhancement: An event can include one survey on the application, shown before agreements and hidden when the event has none. Follow-on surveys are issued separately to accepted participants. Survey answers are a Reports subject, and the event picker limits a run to one event. The Surveys screen lists existing surveys, with edit and delete on each row. A survey is not on the application unless that is turned on. Each survey has its own title and an optional instructions block above the questions. A survey can include any number of event roles. Leaving every role unchecked covers everyone on the event. A role sees an application survey that names it before the survey for everyone. Follow-on surveys go only to accepted participants in the selected roles. Database 2.3.0, 2.3.4.
• Fix: The allergy reaction explanation shows on the admin member edit form, directly under the allergy list, and on the member detail page whenever an allergy other than None is selected.
• Enhancement: A member can change their account email from their profile, and staff can change it on the admin member edit form. The address must be valid and unused. Saving a new address changes it immediately, updates the linked Xero contact or QuickBooks customer, and WordPress emails the previous address.
• Enhancement: Settings can send vetting emails to everyone with the Vetting role, or only the primary vetter and collaborators on that case. Assignment, scheduling, completion, and collaborator invitations use that choice. The member’s own accepted or rejected email is unchanged.
• Enhancement: After public registration, the new member is signed in, sees a short confirmation that the profile was received, and is sent to the membership dashboard.
• Enhancement: When Allergies is anything other than None, a required explanation of the reaction appears immediately after that field. None hides it and does not require it.

Install remember-2.2.0.zip from this release (Plugins → Add New → Upload, or Plugins → Updates on 1.3.5+). Do not install the GitHub Source code zip.