1. 1.0.4

    Latest
    • Security: the confirmation and checkout pages of a registration show the attendee's details only to the attendee, or through a signed link, never to a visitor guessing its number
    • Security: new registration numbers are 10 random digits, so a ticket number can no longer be guessed from another one
    • Security: a payment is recorded only once, even when the return page and the webhook arrive together, and a late failure never undoes a recorded payment
    • Security: the events created from the front end only accept a newly uploaded image, never a file already on the site
    • Added: an optional CAPTCHA on the registration form (Events settings > CAPTCHA)
    • New "Event Reminder" email: every confirmed attendee gets a reminder with the date, the place (or the online link) and their ticket before the event starts, once per registration
    • Choose when it is sent in Events > Settings > Notifications (24 hours before by default, from 1 hour to 1 week); turn it on or off in Settings > Notifications like the other event emails
    • Sent by the new events:send-reminders command, run every 15 minutes by the scheduler (the cron job of the site must be set up)
    • Attendees who register after the reminder time has passed do not get it, and nobody is reminded of a past, cancelled or unpublished event