11.16.11

• update version
• email: fix the from address fallback, and rate limit change_email
• user: converge on emoncms.org where the two copies had drifted
• email: document the transport setting in the settings.php templates
• user: load Lib/email.php with require_once
• email: select the delivery transport in settings
• user: use the shared account gate in passwordreset too
• user: apply the account access gate to the remember me path too
• user: survive a missing password reset column in every mysqli error mode
• user: remove the unused get_salt method
• user: do not follow redirects when fetching a gravatar
• user: address the gravatar proxy with sha256 only
• user: confine the gravatar proxy to the visitor's own avatar
• tests: cover the password hashing helpers
• user: replace emailed password with a one time password reset link
• user: enforce remember me expiry server side and allow bulk revocation
• user: only count failed logins towards the login rate limit
• user: verify passwords through the new helpers and upgrade hashes on login
• user: add bcrypt/argon2id password hashing helpers
• update version
• return 400 when input/bulk rejects a batch
• update version
• restore skipping of null values in input bulk upload

Full commit diff