* Add a world cities database with type-ahead search on the Member Directory.
* Users can search for a known city to order users by distance from that city
rather than from their own configured location on their settings page.
* Users must opt-in their own location before this feature may be used, in order
to increase adoption of the location feature and to enforce fairness.
* The `nonshy setup locations` command can import the world cities database.
* Remove the ability for regular (non-admin) users to search the Member
Directory for non-certified profiles.
* Profiles who don't certify can be a risk to contact, as the likelihood
of fake pictures and scams/spam is much higher.
* Dark theme fixes to brighten notification colors on mobile
* Add change log buttons around various pages to easily look into the history
of an object in the database:
* User profile page ('about user' and user table history links)
* User friends page
* User/Site gallery page (history of all (user) photos)
* Admin insights page (comments, threads, and blocklist history)
* Admin certification page (history of a user's cert photos)
* Comment history buttons on forums and photos
* Add a Search page to the forums to filter by user ID and find threads and
replies matching your search terms, with "quoted phrases" and -negation
support.
* On user profile pages, add an "Activity" box showing statistics on their
forum threads/comments, likes given/received, photo counts, etc.
* On the "Newest" and Search page for Forums: show an indicator whenever a
post includes an attached photo.
* Signup: if entering an existing email, don't admit that the email
exists. Instead, send a specialized email to its address.
* Search: no longer search for users by email address.
* Login: always hash the incoming password on user not found, to take
constant time compared to when the user did exist.
* Fix a pagination bug when a private (shy account) views a non-friend's
photo gallery.
* Users with private profiles or no public photo at all are considered
to be Shy Accounts and are isolated from the non-shy profiles.
* Restrictions include:
* Site Gallery shows only them + their friends' photos.
* User Galleries: must be a friend or had private photos granted to
see a user's gallery page.
* DMs: can not initiate a DM to a non-shy member (other shy members
OK).
* Users who set their Profile Picture to "friends only" or "private" can have
their avatar be private all over the website to users who are not their
friends or not granted access.
* Users who are not your friends see a yellow placeholder avatar, and users
not granted access to a private Profile Pic sees a purple avatar.
* Admin users see these same placeholder avatars most places too (on search,
forums, comments, etc.) if the user did not friend or grant the admin. But
admins ALWAYS see it on their Profile Page directly, for ability to moderate.
* Fix marking Notifications as read: clicking the link in an unread notification
now will wait on the ajax request to finish before allowing the redirect.
* Update the FAQ
* Add ability to unlock your private photos for others.
* Link to unlock is on another user's Photos page.
* You can also access your "Manage Private Photos" page in the User Menu
or Dashboard and add a user by username.
* See who you have granted access, and see users who have granted you
access to their private photos.
* Private photos of users who unlocked them for you may appear on the Site
Gallery if the photo allows.
* Add new filters to the Site Gallery: you can choose to filter by Explicit,
limit to a specific Visibility, and order by Newest or Oldest. Non-explicit
users do not get a filter to see explicit content - they must opt-in in
their settings.
* Bugfix: Site Gallery was not correctly filtering Explicit photos away from
users who did not opt-in for explicit!
* Add setting to mark profile as "private"
* If a profile is private you can't see their profile page or user photo
gallery unless you are friends (or admin)
* The Site Gallery never shows pictures from private profiles.
* Add HTML5 drag/drop upload support for photo gallery.
* Suppress SQL logging except in debug mode.
* Clean up extra logs.
* Add "forgot password" workflow.
* Add ability to change user email address (confirmation link sent)
* Add ability to change user's password.
* Add rate limiter to deter brute force login attempts.
* Add user deep delete functionality (delete account).
* Ping user LastLoginAt every 8 hours for long-lived session cookies.
* Add age filters to user search page.
* Add sort options to user search (last login, created, username/name)
