From 3a8b1edf27cb62cf81aa4bcc19e6ad0e52a3bed9 Mon Sep 17 00:00:00 2001 From: Ty Clifford Date: Thu, 18 Jun 2026 14:54:36 -0400 Subject: [PATCH] - --- CHANGELOG.md | 50 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 50 insertions(+) create mode 100644 CHANGELOG.md diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..86d9fa2 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,50 @@ +# Changelog + +All notable changes to My Keyser / Discover Keyser WV will be documented in this file. + +## [Unreleased] + +## [2026-06-18] + +### Added + +- Added a neon dark-theme redesign across the public site, including a redesigned homepage layout focused on featured businesses, upcoming events, Keyser WV context, and rotating random business discovery. +- Added configurable homepage random business rotation, with admin controls for every-two-hours or daily refresh behavior. +- Added business-owner registration tier alongside regular member registration. +- Added business claim requests for existing listed businesses, including required contact phone number collection and admin review workflow. +- Added admin dashboard visibility for pending business-owner claim requests. +- Added owner-submitted immediate edit requests during business-owner signup, including optional YouTube or Vimeo video URLs. +- Added business video support using `lone-embed.php` for approved listing videos. +- Added admin business edit support for direct video URL management. +- Added email verification for regular users and business owners. +- Added Mailgun-based email sending with configurable US/EU API region, domain, API key, sender name, sender email, and site base URL. +- Added configurable email format mode: designed HTML email with text fallback or simple text-only email. +- Added branded verification and thank-you email templates matching the neon dark site theme. +- Added post-verification follow-up messaging for business owners explaining that a verification call will happen within a couple of business days. +- Added `verify-email.php` to consume verification tokens, activate users, and send follow-up emails. +- Added PHP CLI admin utility at `scripts/keyser-admin.php` for listing, showing, activating, deactivating, deleting, and updating businesses. +- Added CLI support for updating business fields including name, slug, category, description, address, phone, email, website, video URL, hours JSON, coordinates, active status, and featured status. +- Added CLI support for showing menus, wiping all menus, and wiping a specific business menu with explicit `--yes` confirmation. + +### Changed + +- Registration now requires an email address. +- New user accounts remain inactive until the emailed verification link is clicked. +- Login now blocks unverified users with a clear verification message. +- Business-owner signup now queues claims and initial edits but requires email verification before login. +- Owner edit review now supports website and video URL fields. +- Admin settings now include a dedicated email verification and Mailgun configuration area. +- Existing active users are marked as verified during schema upgrade so established admin/user accounts continue to work. + +### Security + +- Added expiring hashed email verification tokens. +- Added destructive-operation safeguards to CLI menu wipe and business delete commands via required `--yes`. +- Prevented unverified accounts from authenticating. + +### Verification + +- Verified public registration, login, verification, and admin settings routes locally. +- Verified unconfigured Mailgun state blocks registration cleanly without creating a user. +- Verified email verification token consumption activates a test account and marks the token used. +- Verified CLI read-only commands, invalid video URL rejection, and destructive-command confirmation guards.