Commit | Line | Data |
---|---|---|
98a4cc6e | 1 | - When adding node, content is escaped twice(?) |
fe69da5f | 2 | |
3ec55fdc | 3 | - Registration process -> Add welcome texts & move them to one file/node |
98a4cc6e | 4 | Temporary requests node does not exists. |
5 | Nodes are created with bad vector | |
3ec55fdc | 6 | (during registration we should generate GnuPG keypair |
7 | to user_gpg_prv and user_gpg_pub fields in table users) (harvie) | |
fe69da5f | 8 | |
9c2bf185 | 9 | - Fix uploading user images |
98a4cc6e | 10 | |
11 | - User mail -> can't delete the mails... | |
12 | Anyway move whole mail handling out of nodes.php (?) | |
13 | ||
46c0767c | 14 | - SQL injections (many fixed, but some should be still there) |
fe69da5f | 15 | |
5b9c0808 | 16 | - remove absolute paths from all source files (!) |
17 | ||
78cc8511 | 18 | - remove hard-coded hostname from: |
19 | ( registration mails ) | |
20 | ( scripts in "scripts" directory (system paths)) | |
5b9c0808 | 21 | |
78cc8511 | 22 | - Fix https vs http problem (url) |
dcee7633 | 23 | |
24 | - Suspected security holes: | |
25 | ( cron/process-img.sh ) | |
f657368b | 26 | ( ./inc/eventz/spamuj_ubik.inc ) |
27 | ( ./inc/eventz/upload_own_template.inc ) (is even needed?) | |
dcee7633 | 28 | |
f657368b | 29 | - Remove/fix not working eventz |
30 | ( ./inc/eventz/addClass.inc ) | |
31 | ( ./inc/eventz/addEvent.inc ) | |
32 | ( ./inc/eventz/addAjax.inc ) | |
33 | ( ./inc/eventz/addPlugin.inc ) | |
34 | ( ./inc/eventz/kyberia.inc ) (wtf) | |
35 | ||
d48685b8 | 36 | - Refactor directory structure |
2f9b4885 H |
37 | |
38 | - Deprecated PHP features | |
39 | ( Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 163 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 184 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 196 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 208 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 220 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 242 ) | |
fe69da5f | 40 | |
41 | - keep fixing XSS | |
42 | ||
5b9c0808 | 43 | - Test & scale logarithmic threading |
44 | ||
3ec55fdc | 45 | - Remove templates from git (they should be only in sql) |
fe69da5f | 46 | |
47 | - Clean code => fix uninitialized variables | |
f657368b | 48 | |
5b9c0808 | 49 | - documentation/installation guide (see README) |
f657368b | 50 | |
bb6232c5 H |
51 | - Make PATH_INFO not changing contents of $_GET[] (it should affect some other variable instead - requires complex rewrite) |
52 | - Switch completely to Base36 (Templates, Links, don't change $_GET[], queries should convert between base10 in db and base36 in kyberia automatically, etc...) | |
45a1b870 | 53 | |
f657368b | 54 | - (IMHO we should use SHA1 or stronger algorithm instead of MD5 for storing passwords) |
1ca26066 | 55 | (I've implemented this partially. We can now login using various hash algorithms, it's backward compatible, but we still need to edit registration/password changing to use SHA1 when updating passwords in DB) |
38d469f5 H |
56 | |
57 | - Rename all files&directories that should not be rewrited to PATH_INFO to start with "_" (and if they should be also ignored by git they should start with "-") | |
58 | (Rename images to _images - and fix hardcoded stuff...) |