MyKeyser/CHANGELOG.md

Changelog

All notable changes to My Keyser / Discover Keyser WV will be documented in this file.

[Unreleased]

[2026-06-18]

Added

• Added a neon dark-theme redesign across the public site, including a redesigned homepage layout focused on featured businesses, upcoming events, Keyser WV context, and rotating random business discovery.
• Added configurable homepage random business rotation, with admin controls for every-two-hours or daily refresh behavior.
• Added business-owner registration tier alongside regular member registration.
• Added business claim requests for existing listed businesses, including required contact phone number collection and admin review workflow.
• Added admin dashboard visibility for pending business-owner claim requests.
• Added owner-submitted immediate edit requests during business-owner signup, including optional YouTube or Vimeo video URLs.
• Added business video support using lone-embed.php for approved listing videos.
• Added admin business edit support for direct video URL management.
• Added email verification for regular users and business owners.
• Added Mailgun-based email sending with configurable US/EU API region, domain, API key, sender name, sender email, and site base URL.
• Added configurable email format mode: designed HTML email with text fallback or simple text-only email.
• Added branded verification and thank-you email templates matching the neon dark site theme.
• Added post-verification follow-up messaging for business owners explaining that a verification call will happen within a couple of business days.
• Added verify-email.php to consume verification tokens, activate users, and send follow-up emails.
• Added PHP CLI admin utility at scripts/keyser-admin.php for listing, showing, activating, deactivating, deleting, and updating businesses.
• Added CLI support for updating business fields including name, slug, category, description, address, phone, email, website, video URL, hours JSON, coordinates, active status, and featured status.
• Added CLI support for showing menus, wiping all menus, and wiping a specific business menu with explicit --yes confirmation.

Changed

• Registration now requires an email address.
• New user accounts remain inactive until the emailed verification link is clicked.
• Login now blocks unverified users with a clear verification message.
• Business-owner signup now queues claims and initial edits but requires email verification before login.
• Owner edit review now supports website and video URL fields.
• Admin settings now include a dedicated email verification and Mailgun configuration area.
• Existing active users are marked as verified during schema upgrade so established admin/user accounts continue to work.

Security

• Added expiring hashed email verification tokens.
• Added destructive-operation safeguards to CLI menu wipe and business delete commands via required --yes.
• Prevented unverified accounts from authenticating.

Verification

• Verified public registration, login, verification, and admin settings routes locally.
• Verified unconfigured Mailgun state blocks registration cleanly without creating a user.
• Verified email verification token consumption activates a test account and marks the token used.
• Verified CLI read-only commands, invalid video URL rejection, and destructive-command confirmation guards.