Changelog

Board members who connected the association bank with the same login they use to pay dues were hitting a Stripe error and a scrambled three-column note. Bank pay starts again. If it still cannot, the page says to pay by card or type your own routing and account numbers. The association-bank note is a stacked box above the pay buttons.

Public pages, association landing sites, and the board dashboard describe photos instead of leaving alt blank. Feature cards fall back to the feature name when a custom alt is missing.

Get the word out and Get things done were painting white type on a white pane. All three columns are navy now, so the sample numbers show.

HOA Case Files uses badge buttons on the show page and each episode, not a line of text links.

The public vendor upload page no longer treats a lapsed insurance date like a missing file. It asks for a current certificate. A PDF with a past date is not current.

HOA Case Files Podcast leads with the title, tagline, and player. No giant cover under the intro.

Long groups such as Resources no longer run off the bottom of the phone drawer.

Checked-off steps on Getting started keep an Open button, so you can import a second list without un-doing the check.

On Vendors, the list filters as you type — name, email, phone, trade, or city. The top-bar Search everything box now matches those same fields on a vendor, including legal name. A broken vendor query no longer fails silently.

On Vendors, typing 2222909 now finds a vendor saved as 386-222-2909. Same for after-hours numbers and tax IDs. Global search gets the same phone match.

The admin claim queue used a hardcoded white card with dark-theme ink, so the county line and field labels washed out. Cards now use the theme panel surface and heading color.

The Authors admin cards used a hardcoded white background with light theme-ink, so writer names washed out. Cards now use the theme panel surface and heading color.

If the same login connected the association payout account, bank checkout no longer opens Stripe’s saved-bank screen (that still knew the HOA account after logging out of Stripe). It asks for routing and account numbers instead. Card is unchanged.

Connecting the association bank no longer leaves Stripe on the board member’s personal email. Owner checkout for that person is a personal bank or card, not the HOA payout account.

Editing a member who owns two units used to look like two people. The edit screen now says which units share that login, so an email or password change is not a surprise.

Marking a community claim Approved now takes the listing off the unclaimed list. The page shows Claimed instead of asking another board to claim it, even before the SoShiny account is provisioned.

Release notes with formatted paragraphs were displaying the literal tags on the public changelog and in the admin list. They now render as readable text (and the admin list strips tags for the preview).

In dark mode, some text went invisible: bolded phrases pasted into resolutions and minutes, and the body of every rich-text editor. Editors are now always a light writing surface no matter the theme, and pasted-in colors can no longer fight the page.

Two improvements to the Rules and Bylaws page. The governing-documents explainer now starts collapsed, so the search box is the first thing you see instead of sitting below a big table. Tap the explainer open whenever you need it. And on phones, the page no longer scrolls sideways: the search bar stacks neatly (search box on top, filters below, button underneath) where it used to get squeezed to nothing, and long web addresses in rule text wrap instead of stretching the page.

Marking yourself returned from a trip left you showing as away for the rest of the day, since your return date still counted as an away day. An explicit return now ends the trip immediately, and a trip marked returned on the same day it started is treated as never having been away.

Signing up for The Board Brief with an email address that was already on the list showed a network error. Fixed: repeat signups now succeed quietly, and worksheet downloads re-send to returning subscribers the way they were meant to.

A handful of older pages, industry guides, and blog posts still showed earlier pricing. Everything now shows the America 250 rate: $25 a month plus 33 cents per unit, every feature on every plan, locked for life when you sign up before December 31, 2026.

For members in US time zones, printed agendas and meeting packages could show the meeting one day earlier than the date the board picked. Calendar dates now print exactly as chosen everywhere: meeting dates, violation due dates, rule effective dates, and dues due dates included. Agenda item notes written with the rich-text editor now print with their formatting instead of raw code.

Some members signing in from a community web address saw a "Session expired" message on their first try. The sign-in, password reset, and signup pages are no longer cached along the way, so the form you submit always matches your visit. Newsletter signup forms got the same treatment.

Beachfront communities were getting tide predictions from the nearest gauge even when it sat on a river — and river tides can run hours off the surf. The tide card now prefers open-coast NOAA stations (Bellair now reads the Daytona Beach Shores ocean pier), and the sunrise & sunset card names its city, just like the forecast.

Clicking a member in search results now lands on that person — managers get their profile, residents get the directory filtered to just them. The directory search also understands full names typed together, like "Karen Swenson."

Notes added from the directory (the 📋 badge) and entries in a member’s Contact log were stored separately and didn’t show together. They’re now merged into a single timeline on the member’s profile, and the directory note count reflects both. The 📋 badge now opens the member’s Contact log.

The public community page (your bellaircondos.com landing) was showing every announcement including expired ones. It now shows only currently-active announcements, matching the dashboard and lobby TV.

The dashboard was listing announcements that had already expired (and the count tile included them). It now shows only currently-active announcements — published and not past their expiry — matching the Announcements page, including the resident view and the emergency banner.

Fixed a set of spacing and accent-color values that were silently rendering wrong in a few spots (meeting pages, broadcasts, signing). Also hardened the post-login redirect against open-redirect tricks.

soshiny.com/florida/quick-reference (and the NY/TX/AZ siblings) were rendering flush against the site header with no breathing room above the first card. Two issues: the template was opening a duplicate element inside the one header.php already opens (invalid HTML), and the container had no vertical padding to separate the cards from the header. Fix: dropped the duplicate ; added padding-top/bottom on the container so the printable cards visually float in the middle of the page on screen. Print CSS unchanged so the printed PDF still paginates cleanly to two letter-size pages.

Lightweight version of the slug-routing brief. The tenant_dashboard_url() helper appends ?from_assoc={id} to outbound email links only when the sending association lacks a verified custom domain — for tenants with a custom domain (bellaircondos.com, badassdemo.com), the domain itself is the disambiguator and nothing is appended. Both live associations today have custom domains, so behavior is unchanged in production; this is forward-looking infrastructure for the next tenant who onboards without a domain. Also: deep links through login. When an unauthenticated visitor clicks a dashboard email link, require_login() now stashes the original URL as ?next= on the login page, and login.php redirects back to it after successful sign-in (open-redirect-guarded — only local /paths, never /login itself). Dashboard bootstrap rejects requests where ?from_assoc differs from the user's actual association_id with a clear 'sign in with the correct account' message instead of a confusing 404.

A board email about a Bellair Condos concern was linking to soshiny.com/dashboard/concerns.php?id=30 instead of bellaircondos.com — the same bug existed across every notification email the platform sends. Audit + fix: 14 hardcoded https://soshiny.com/dashboard/... URLs across concerns, ARC, search, forms, amenities, and documents now use a new association_base_url() helper that returns the association's verified custom domain (bellaircondos.com, badassdemo.com, etc.) when one is set, falling back to soshiny.com otherwise. The same helper is wired into the invite + password-reset emails (send_password_link()) and the new-member invite send (dashboard/send-invite.php), so a Bellair board admin sending an invite from soshiny.com still produces a bellaircondos.com link in the recipient's inbox. Brand-anchor links to soshiny.com in email footers ('Powered by SoShiny') are unchanged — those should always point at the platform.

The three head-to-head comparison pages (soshiny.com/vs/hoalife, /vs/condo-control, /vs/runhoa) had been emitting Product structured data, which Google Search Console flagged for missing aggregateRating and review fields. We don't have real verified customer reviews yet, and fabricating them violates Google's structured-data guidelines and triggers manual actions — so the right fix is to use the correct schema type. Switched all three pages to SoftwareApplication (the same schema homepage and pricing already use), via a one-line include that points at the existing canonical partial. One source of truth for the pricing schema across all 5 pages. No pricing data changed.

Four published blog posts (Hidden Cost, Five Jobs, Florida Compliance, and What Does Community Software Cost) were showing a raw FAQPage JSON blob as visible text on the page. Root cause: the rich-text editor in /admin/blog.php (Quill) strips , , and tags on every save — so the FAQ accordions and their structured-data scripts were getting eaten the moment any admin opened a post to edit it. Visible content was preserved but the schema and the collapsible UI were lost, and the JSON-LD body leaked into the rendered HTML as plain text. Fix: rewrote the FAQ section on every blog post (4 published + 11 drafts, 15 total) to use plain h3/p HTML that Quill preserves. The Q&A is still visible and readable; the FAQPage rich-snippet eligibility is gone for now. A separate small software change to post.php would restore the schema by moving the FAQ to its own field on the post (rendered outside the Quill editor's reach).

An earlier admin edit (the slug rename from parking-units to hoa-units-parking-fees) saved over the deep content rewrite that had landed on the page minutes before, bringing back two empty H3 sections. The full rewrite is now restored at the new URL (soshiny.com/features/hoa-units-parking-fees) — including the field-list bodies for "What's on each unit record" and "And every parking spot is its own record too", the FAQ section with FAQPage structured data, the 8 distinct benefit icons, the trimmed meta description, and the og:image alt text. Five inline links from blog posts (Hidden Cost plus four drafts) were also updated from the old slug to the new one.

Uploading a hero banner image via Settings was silently failing — the file got written to disk but the database column was never updated, so the page reloaded without the banner. The form submission now writes the new hero path properly.

The 'Help' link at the bottom of the sidebar (and the admin Sign-out link too) was being silently swallowed by an invisible scroll-hint overlay sitting on top of it. Clicks now register correctly whether the hint is visible or not.

The storage breakdown page now lists each file by its title (e.g. '2026 Bylaws.pdf' instead of the UUID filename) for documents and media, with the raw filename underneath. Clicking a document used to return 'Bad request' because the URL was missing the type parameter — fixed in both the storage page and the My documents card on profile (now correctly /dashboard/file.php?type=document&id=N). Also added a friendly 404 page — when a URL doesn't exist, you get a tiny HOA Violation Notice card with a randomized joke instead of Apache's default page.

Before: setting a board office on a member whose role was Resident or Renter silently dropped the office (since offices only apply to board roles). The form gave no feedback, which is exactly how Polly and John ended up appearing not to save. Now: picking any board office on a resident or renter auto-promotes them to Board member (least-privilege board role), and the success flash spells out what happened. Property managers keep their existing role.

Imported residents come in with status=pending until they sign in for the first time, but the 'Meet your board' landing section and the dashboard Board card were both filtering for status=active only — so a board member like Scott Bender (imported, marked as Director, set to show on the public landing) was being hidden. Fixed: both views now include everyone except status=inactive. Same fix applied to the Print contacts + board view.

Visiting /dashboard/search.php with no search term used to show "No rules on file yet" even when hundreds of rules were imported. Now the page defaults to a most-recent listing (200 rows), and search narrows it down. Imports were always landing in the database correctly — just invisible until you typed a query.

The announcements query on /landing.php joined the users table (for author names) but selected `id` unqualified. Both tables have an `id` column, so MySQL threw an ambiguity error and the page died — visitors saw a 302 to /login.php instead of the community page. Qualified the column names. Public announcements feed now renders correctly.

Was reading the static unit_count capacity from association settings. Now counts distinct unit numbers across active + pending members — matches what you actually see in /dashboard/directory.php.

Two issues — labeled the action "+ Add member" instead of "+ Invite", and fixed a real bug where new users were created with status=pending which silently rejected them at login. They now start as status=active and can sign in immediately with the password you set or the auto-generated one we email them.

Previously the geocode-on-save check only fired when an address field changed, so associations with an existing address but no stored coordinates never got geocoded — and their map section stayed hidden. The check now also triggers when latitude or longitude is empty, so simply hitting Save once will populate coordinates and reveal the map.

Inverted the hero overlay so the darkest pixels sit where copy lives (was backwards). Orange CTA now has a subtle white inner ring + drop shadow so its silhouette holds against any video frame. Ghost button bumped to a stronger frosted-glass treatment.

The site-nav anchor color rule was overriding button text color. Scoped it to :not(.btn) so primary buttons keep their white-on-orange treatment regardless of context.

Clearing the unit-count input no longer snaps the value back to 50. Empty state is allowed mid-typing; on blur the field falls back to 50 only if it's still empty or invalid.

Discovered during password reset testing — MAMP MySQL ran in EDT while PHP defaulted to UTC, causing 1-hour reset tokens to look already-expired. db.php now sets time_zone='+00:00' on every connection so PHP's time() and MySQL's NOW() agree.