🔥 Remove "open_to_hookups" preference from accounts

• Drop checkbox from edit form
• Remove field from AccountFields concern
• Exclude from #open_to list

✏️ Fix typo in prompt string: “test” → “a test event”

💄 (events/_orders.erb): wrap action links in nowrap spans to prevent line breaks inside link groups

🔒 Return 403 instead of 400 for authorization failures

💬 Update confirmation prompt to use “your” instead of “this” for clearer user-facing language

✨ Add ability for users to cancel zero-value orders - Introduce GET /orders/:id/destroy endpoint that soft-deletes orders with no monetary value after verifying ownership - Surface “Cancel RSVP” link in order list when order.value is nil/0 - Guard against refunds by setting prevent_refund before destroy

🔒️ (rack_attack_throttle.rb): replace Fail2Ban filter with manual cache read/write to fix false-positive blocks

♻️ Replace complex SQL-injection header patterns with simple invalid-char check
🩺 Reduce false positives by only blocking non-XMLHttpRequest values that contain unexpected characters

🔒️ Block SQL-injection attempts in X-Requested-With header Detect and ban IPs sending crafted headers matching common SQLi patterns

🐛 Add “sexuality” to adult-word list so events tagged with it are hidden from homepage

♻️ Move adult-content hiding logic from before_validation to after_save

The check now runs only once the record is actually persisted, avoiding side-effects during validation and letting the attribute be set cleanly after the event is saved.

♻️ (event.rb): move event_tag_names update out of callbacks into its own method
🔥 (event_callbacks.rb): remove redundant set(event_tag_names …) call to avoid double work

🐛 Fix adult-content filter to also scan event tags Previously only the event name was checked for adult keywords; now both name and tags are inspected so events are correctly hidden from the homepage when any tagged term is explicit.

🐛 (events/_grid.erb): allow duplicate event names to be shown when explicitly requested via show_events_with_same_name param

♻️ (searchable.rb): freeze APOSTROPHE_CHAR_CLASS constant to prevent accidental mutation

♻️ (searchable.rb): refactor apostrophe handling to support all Unicode variants

🚑️ (organisation.rb): comment out destructive destroy call to prevent accidental data loss during cleanup task

✏️ Fix wording in auto top-up hint for clarity

🐛 Fix apostrophe handling in search to match both straight and curly quotes

💬 Update hard-coded £100 to localised Money object in auto top-up hint