Administration
Security, Reliability & Operations
- Strengthened administrator permissions and closed role-escalation loopholes.
- Only System Owners can create or manage administrators, and users cannot suspend or demote themselves.
- Added centralized protection for every Administration page.
- Added rate limiting for login, signup, password changes, uploads, and contest entries.
- Reduced account-discovery risk during login and strengthened session cookies and session limits.
- Added security headers, safer error pages, and audit records for important changes.
- Passwords remain securely hashed and are never displayed to administrators.
- Added SQLite foreign-key protections, indexes, integrity checks, and concurrent-write safeguards.
- Added verified online SQLite backups and automatic cleanup of expired data.
- Railway now refuses to start without persistent storage for the database and uploads.
- Added a durable email outbox so failed deliveries are retried automatically.
- Added membership, approval, upcoming-event, and license-expiration email notifications.
- Added a functional mobile navigation menu and improved small-screen layouts.
- Expanded automated security, database, upload, radio-frequency, export, desktop, and mobile testing.
Contests
Contest Desk Layout
- Moved the scorecard closer to the top and reduced extra spacing so more of the Contest Desk fits on screen.
Contests
Contest Desk Entry Form
- Simplified the logging area and made automatic mode selection respect a mode that the operator selected manually, such as CW.
Website
Automatic Band & Mode
- Band and mode now populate from the entered frequency before submission.
Contests
Contest Modes & Time
- Replaced SSB with LSB and USB and changed displayed contest times to the 24-hour format.
Contests
Contest Log Details
- Added the contact date and operator callsign to each contest-log row.
Contests
Contest Scorecard & Duplicate Search
- Added a live scorecard showing each operator, their contact count, and the club’s unique-contact total.
- Added an exact callsign duplicate checker showing when and by whom a station was contacted.
Contests
Contest Contact Corrections
- Members can edit or delete contacts they entered, and the editor closes after a successful save.
Events
Calendar Series & Contest Entry Memory
- Added the ability to update a complete recurring calendar series.
- Contest entry settings are preserved between contacts, except for callsign and section.
- Removed unnecessary signal-report fields from contest contacts.
Marketplace
Documents, Marketplace & Navigation
- Added document categories, descriptions, searching, and filtering.
- Added in-portal PDF viewing and a dedicated + Add Document screen.
- New documents require administrator approval.
- Administrators can edit, replace, archive, approve, or reject documents.
- Pending, rejected, archived, and deleted documents are protected from unauthorized access.
- Members can edit their Marketplace listings and remove individual photos.
- Removed the Call Seller link.
- Renamed the Calendar navigation link to Calendar & Nets and reordered the Contest Desk link.
- Added safe contest CSV export and proper active or closed contest management.
Photos
Marketplace Photos & Document Viewing
- Added multiple Marketplace listing photos, galleries, and thumbnail previews.
- Improved handling of draft, active, expired, and archived listings.
- Strengthened private photo access and upload-size enforcement.
- Added document previews and improved the document browsing experience.
Accounts
Announcements & Member Passwords
- Moved new announcements to a separate submission page and added administrator approval.
- Announcements now identify their creator and use consistent title capitalization.
- Members can change their own password from My Account after confirming their current password.
Accounts
Email Address Sign-In
- Email addresses are now matched consistently regardless of capitalization.
Accounts
Member Login Reliability
- Corrected member email lookup behavior that could reject a valid password.
Website
Administrator Password Resets
- Administrators can reset a member’s password, which signs that member out of existing sessions.
Accounts
Member Profiles
- My Account now includes the member fields used by the Roster.
- The member’s name in the navigation links directly to My Account.
Website
Password Requirements
- Set the minimum password length to nine characters while continuing to allow special characters.
Accounts
Member Signup & Approval
- Added public member signup, a login-page signup link, and an administrator approval process.
- Improved member application approval, rejection, and notification workflows.
Events
Accounts, Roster, Calendar & Sessions
- Added 30-day Keep me signed in support.
- Added My Account editing for phone, email, callsign, license class, and member name.
- Added a member Roster with contact and license information.
- Member-submitted calendar events now require administrator approval.
- Added weekly club net and monthly club meeting information.
