doc/TODO

   1 - User mail is not working
   2
   3 - Registration process is not working
   4
   5 - Cron scripts are not executed
   6   (no automatic logouts, no K generation, ...)
   7
   8 - fix uploading of files
   9
  10 - fix ALL sql injections
  11
  12 - remove absolute paths from all source files (!) (over 50)
  13
  14 - remove hard-coded kyberia.sk from:
  15   ( ./inc/eventz/configure_email.inc )
  16   ( ./inc/eventz/delete.inc )
  17   ( ./inc/smarty/node_methodz/modifier.replaceLocalURLs.php )
  18   ( ./inc/replaceLocalURLs.inc )
  19   ( ./nodes.php )
  20   ( ./cron/rssparse.php )
  21   ( ./scripts/contentregexp.php ) (obsolete?)
  22   Fix https vs http problem (url)
  23
  24 - Suspected security holes:
  25   ( cron/process-img.sh )
  26   ( sms_payment.php  => yes, sqli but is it really used? )
  27   ( inc/eventz/upload_data_node.php => Shell injections in .zip handling, .jpg handling,
  28     "strange" filenames like .htacess (to allow listing of folder)
  29
  30 - Refactor directory structure
  31
  32 - Deprecated PHP features
  33   ( Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 163 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 184 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 196 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 208 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 220 Deprecated: Assigning the return value of new by reference is deprecated in /srv/kyberia/wwwroot/nodes.php on line 242 )
  34
  35 - keep fixing XSS
  36
  37 - documentation/installation guide (see README)
  38
  39 - Clean code => fix uninitialized variables