A crude way to test if we're debugging
Don't migrate unconfirmed user accounts

... because would make things much more difficult. (Recently)
registered but unconfirmed users can simply re-register.
Set a default database character set and collation
Suppress more error notices
fixup! Set a default database character set and collation
Fix frontend path in dev config
Refactor and migrate profile managment

Account registration and validation now work with the new database
scheme and support a password encryption method deemed secure (using a
function backport from PHP 5.4).

Creating an account or changing core account information like the
password and contact e-mail address now create a change request entry
in a separate table to make unintended or malicious changes verifiable
and revertable by the account owner. More work is necessary on that
part though.
Refactor index.php

The purpose is to not have one giant spaghetti bowl of if-else blocks.
Now every unit (or page) resides in its own file that index.php
switches to if necessary.
Dev config changes
Code formatting
Implement ON DUPLICATE UPDATE support
Allow smaller thumbnail sources
Migrate and refactor profile manager

 - Password and e-mail address changes require the current password.
 - Password and e-mail address changes require clicking a validation
   link in a confirmation e-mail (to the old address).
 - Name avatar files after the SHA1 checksum of the original to avoid
   duplicates.
 - Store avatar files in a subdirectory named after the first two hex
   characters of the file name.
 - Some refactoring of registration and login code