Rally Quest Engine v0.6.2

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.6.1

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.6.0

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.5.0

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.4.2

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.4.1

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.4.0

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL JavaScript security analysis passed. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.3.0

Rally Quest Engine v0.3.0

• Public results Bib links can open each participant's accepted bonuses with submitted proof photos beside Bonus ID, description and awarded points.
• Enable Publish accepted bonus details and photos in Embed this Event on a Post or Page. This is off by default and requires public results enabled.
• Administrative Results and Reviewed Bib links open the accepted-bonus section of the participant score sheet; full submission history remains available.
• Public requests verify event publication, additional photo/detail consent and participant enrollment. Rejected/pending submissions, contact information, rejection reasons and inbox metadata remain private.
• WordPress site administrators alone can configure inboxes, test connections and manually poll. Changing an IMAP host, port, encryption or username requires a newly entered password, preventing retained credentials from being sent to a changed destination.
• Schema 16 adds the opt-in without changing scores, participant assignments or submission decisions.

Install and privacy

Back up the database and event gallery, then install rally-quest-engine-v0.3.0.zip through WordPress Plugins > Add New > Upload Plugin.

Obtain participant permission before publishing proof photos. Existing images use direct WordPress uploads URLs: disabling public listings cannot revoke already shared URLs, downloaded photos or cached pages. Purge WordPress/CDN caches after changing publication or scores. Missing images are identified explicitly.

Review and release gates

This release passed all 16 PHP regression suites, PHP/JavaScript syntax checks, CodeQL JavaScript security-extended analysis, Semgrep PHP/JavaScript and WordPress exploit rules, Gitleaks history/tree secret scans, Trivy dependency/secret scans, Composer audit and the no-open-Dependabot-alert gate. CodeQL does not analyze PHP; PHP checks use the other scanners and tests.

SOLID/WordPress review retained separate query, publication-policy and rendering responsibilities and shared accepted-bonus rendering between public/admin views. New public strings use the plugin text domain; mutations retain capability and nonce checks. The WordPress Coding Standards scan reports an existing formatting/internationalization/documentation and context-sensitive diagnostic backlog. Full WPCS conformance, WordPress.org approval, formal SOLID certification and absence of all vulnerabilities are not claimed.

Previous releases are deprecated. Use v0.3.0 for new installations and upgrades.

Rally Quest Engine v0.2.3 - DEPRECATED

DEPRECATED: This release is superseded by v0.3.0. Upgrade after backing up the database and event gallery. v0.3.0 includes mailbox credential hardening and opt-in accepted-bonus photo publication.

What's new in v0.2.3

• Choose Vintage Ornamental or Classic Formal certificates in Event Details. Print, PDF download and reviewed email attachments share the event's saved design.
• Certificates include event name, image, year and description; participant name and Bib; accepted/rejected bonus counts; total score; overall position; and final status. Bronze, Silver and Gold statuses receive matching medal icons.
• Finisher, Bronze Finisher, Silver Finisher and Gold Finisher always qualify for individual/all printing and administrator-approved email after manual finalization.
• Default Event Status order: Registered, DNS, Active, Preliminary Finisher, Preliminary Bronze Finisher, Preliminary Silver Finisher, Preliminary Gold Finisher, Finisher, Bronze Finisher, Silver Finisher, Gold Finisher, DNF.
• Schema 15 upgrade preserves custom status choices, disabled flags, participant assignments and scores. Subsequent manual ordering remains available.
• Changing design, description, image or ranking requires fresh certificate email review. Long descriptions continue on additional pages instead of being clipped.

Back up the database and event gallery before upgrading. Sample PDFs for both designs are in the repository's docs directory. Local certificate image rendering requires PHP GD; PDFs also require DOM and mbstring.

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL was skipped because the repository is private. Publication remains permitted when the other security gates pass. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.

Rally Quest Engine v0.2.2 - DEPRECATED

DEPRECATED: This release is superseded by v0.3.0. Upgrade after backing up the database and event gallery. v0.3.0 includes mailbox credential hardening and opt-in accepted-bonus photo publication.

v0.2.2

• Ordered Registration/Event Status choices and inclusive preliminary finisher thresholds.
• Collapsed event embed section and aligned status collapse markers.
• Event locking/archiving with protected mutations and remembered archived-event visibility.
• Printable and local PDF finisher certificates, plus explicitly reviewed individual/bulk PDF emails with bounded batches and delivery outcomes.
• Schema 14, bundled renderer dependencies, certificate privacy/retention handling and updated README.

Upgrade: Back up first. Equality now qualifies for the applicable preliminary finisher tier; manual final statuses remain authoritative. PDF generation requires PHP DOM and mbstring. Browser printing remains available.

Install the ZIP through WordPress Plugins > Add New > Upload Plugin. See the bundled readme changelog for this version's changes. This source passed syntax, Semgrep static security (including WordPress exploit rules), Trivy dependency/secret, and Gitleaks history/working-tree secret checks. CodeQL was skipped because the repository is private. Publication remains permitted when the other security gates pass. Publication also required no open repository Dependabot alerts. These checks do not certify NIST compliance or absence of all CVEs; deployed WordPress, PHP, and other plugins require separate assessment. Event-scoped IMAP, Gmail API, and Microsoft 365 inboxes can ingest participant bonus submissions for Administrator or Scorer review with transactional point awards. Back up the database and event gallery files separately before upgrading. Rally Quest Engine replaces Motorcycle Rally Scoring Application: install it, deactivate the former plugin, then open wp-admin as a site administrator to import existing data once.