Ignition Crowdfunding v0.9.0

This release brings frontend account management out of wp-admin. Backers and creators now have a dedicated Account tab on the dashboard with Profile, Email, Password, Notifications, and Privacy sections — including one-click unsubscribe and a privacy-by-default toggle. A branded lost-password and reset flow replaces the bare WordPress default email, registration and claim capture first and last names so the backer list can display real names instead of “Guest,” and password fields ship with a strength meter and show/hide toggle. Dashboard tabs were trimmed to drop the redundant “My “ prefix, wrap on narrow screens, and use a per-tab underline.

New Features

• My Account dashboard tab — Backers and creators now manage their account from a frontend Account tab with five sections: Profile, Email, Password, Notifications, and Privacy. Privacy defaults to “Hide my name on backer lists” for new accounts, and a logout link sits next to the section nav so no one needs to enter wp-admin. See My Account.
• Email change with confirmation — The Email section sends a confirmation link to the new address; the change only takes effect when the link is clicked. Both old and new addresses are notified afterwards.
• Frontend password change — The Password section accepts a current-password check and a new password (verified by strength meter), then sends a security-alert email once the change completes.
• Notification preferences with one-click unsubscribe — The Notifications section groups transactional emails into toggle-able categories. Every notification email includes a one-click unsubscribe link that flips the matching category off without requiring login. See Email Notifications.
• Branded lost-password and reset flow — A frontend Lost password? link on the auth form starts a request flow that sends a branded HTML email. The reset link opens an in-site set-password form rather than wp-login.php. The WordPress-default plain-text reset email is suppressed so users only ever see the branded version. See Lost Password.
• First and last name capture at registration and claim — Registration and the guest-claim form now collect first and last name. The backer list displays a real name when one is on file, falling back to “Guest” for unclaimed guest accounts and “Anonymous” for backers who have hidden their name.

Improvements

• Password strength meter and show/hide toggle — All password inputs (register, claim, reset, account password change) share a partial that renders a four-step strength indicator and an eye-icon toggle. The password-confirm field was dropped site-wide; the show/hide control covers fat-finger errors.
• Mobile account navigation — On narrow viewports the section nav stacks as a vertical list and tapping a section opens it on its own screen with a back link. The desktop layout keeps the side nav + content split.
• Dashboard tab polish — Tabs are now labelled Campaigns, Pledges, and Account (the “My “ prefix is gone), they flex-wrap on mobile so all three fit, and the active tab is marked with a per-tab underline.

Developer

• New actions — igcf_email_change_requested (a confirmation link was just generated), igcf_email_changed (an email change completed), and igcf_password_changed (a frontend password change completed). See Actions Reference.
• New filters — igcf_account_tab_sections (register extra sections on the Account tab), igcf_notification_categories (register extra notification toggles + their email types), and igcf_password_reset_url (rewrite the reset URL embedded in the branded reset email). See Filters Reference.
• WordPress-default reset email suppression — add_filter( 'retrieve_password_message', '__return_empty_string' ) is registered so only the branded Igcf_Email_Password_Reset email is delivered when a reset is requested. Add-ons that emit their own reset email should adjust priority accordingly.
• Four new security email types — password_reset, email_change_request, email_changed, and password_changed register through the email registry but are locked on in Settings → Emails (they cannot be disabled). Templates live at emails/password-reset.php, emails/email-change-request.php, emails/email-changed.php, and emails/password-changed.php and can be overridden by themes. See Template Overrides.
• New overrideable templates — dashboard-my-account.php (account container with section nav), the five account-sections/*.php templates (Profile, Email, Password, Notifications, Privacy), partials/password-field.php (shared password input + strength meter + show/hide), and partials/auth-form-lostpassword.php / partials/auth-form-reset.php / partials/auth-form-confirm-email.php / partials/auth-form-unsubscribe.php for the new auth routes.
• New CSS classes — .igcf-account, .igcf-account-subnav (with __item, __divider, __logout), .igcf-account-section (with __title, __help, __form, __field), .igcf-password-field (with __toggle, __strength, __strength-bar, __strength--0 through __strength--4, __strength-label), and .igcf-notifications-toggle (with .igcf-notifications-group and .igcf-notifications-toggles). See CSS Classes.
• Dashboard tabs renamed — Tab keys are unchanged, but labels rendered through igcf_dashboard_tabs are now Campaigns, Pledges, and Account. Add-ons that overrode labels via this filter should re-check their assumptions.