Event Management: complete events module
You can now manage the full lifecycle of events inside ManageMyTrust:
- Create events with a clear status workflow (including a new Completed status for past events)
- Configure ticket types (free, paid, or donation)
- Capture registrations with support for discount codes
- Add and manage event content like agenda, lineup, and FAQs
Event registrations: dynamic custom fields
Event registration forms can now be tailored per event:
- Add custom registration fields across 7 field types
- Fields update dynamically during registration (no page reload), so the form always matches the selected event and ticket type
Public website: Events live sections + public registration (new)
Events can now be published directly on the organisation’s public website (subsite):
- New injectable live sections:
- Events list
- Event detail
- Choose a Featured Event in CMS settings
- Public registration form with email confirmation
Compliance Self‑Assessment: guided public wizard
Organisations can now run a structured self‑assessment across 8 compliance domains:
- No login required (public wizard)
- Produces a score and emails a gap analysis report
- Supports safe resume links so users can continue later
Security & reliability hardening (self‑assessment)
This release includes important protections for public flows:
- Resume codes now use HMAC‑SHA256 (keyed with SECRET_KEY) to prevent offline brute‑force risk
- Improved XSS safety by escaping admin answer displays when parameter text contains HTML
- Stronger rate limiting using atomic cache operations to prevent burst bypass under concurrency
- Email/report delivery flags are now set only when the email task is successfully queued
