Chat's updates for security, db and workflow

2026-10-20 06:45:30 -04:00
parent 02223083f6
commit 1e63076123
116 changed files with 3252 additions and 2932 deletions
@@ -4,6 +4,11 @@ Login, signup, password changes, and password reset now use `classes/AuthService
 The existing PHP/XSL presentation structure is retained. Signup creates an active
 `User` account; it does not grant administrator access or club membership.

+The October 19 update adds mailbox verification and reset-link invalidation on
+account changes. Apply the newest schema before using that code; see
+[production safeguard changes](PRODUCTION-FIXES.md) for migration and rollout
+instructions. Ordinary club access now requires verified email ownership.
+
 ## Before using this version against your database

 1. Back up the database and use a maintenance window for the schema update.